0x0, r0, 0x3)
open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000480)='./file0\x00', &(0x7f0000000840)=[&(0x7f0000000600)='(\xe0\xf5\x00', &(0x7f0000000680)='/dev/loop#\x00', &(0x7f0000000440)='system\x00', &(0x7f0000000740)='\x00', &(0x7f00000007c0)='\x00', &(0x7f0000000800)='.cpuset\x1c\x00'], &(0x7f00000002c0)=[&(0x7f0000000040)='selfposix_acl_access&[\x00', &(0x7f0000000080)='/dev/loop#\x00', &(0x7f0000000100)='\\}#(,\x00', 0x0])

22:08:00 executing program 0:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r2, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00'], 0x1)
sendfile(r2, r1, 0x0, 0xa198)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="000ffff0802bc8369ce73cb6fda400006224541f3780351157b252dd000000009154262a80420801444dd89f6bfd1510066a2128e6c04f112558c8bdac2ae91c22768a299a879ca5ea45ea6189f14f84644589436f645a783aac81cf5bc374f0ac00ef2728cfd3b16ae8a4ec80ebea0a7e8c20a5986a2ab75b34dc27b332714d36cba3ac62ec7100c22eb5d6638b8e1d01468ad3328280706dfc31700ea3fe507bfd0f8169b2187e8d804978b5a6397a1f471a29369349f8dcda480be4b38fb6862fc91512ff53f74ccb2674157b224da1961bbaf18cfe6f399d07607fc5fa"], 0xdf)
sendfile(r3, 0xffffffffffffffff, 0x0, 0xa198)
open(0x0, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)

22:08:00 executing program 3:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r2)
socket$inet(0x10, 0x2, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080025944eeba71a4976e252922c000000002aba000000012e0b3836005404b0e0301a4ce875f2e0ff5f163ee340b7679500800000000000000101013c5891039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffff7f00000000ffefa6f909f7", @ANYRES32=r4, @ANYBLOB="0000000bf1ffffff000000ff7f0001"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

22:08:00 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r0, 0x0, 0x0)

[  710.587264][T22856] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'.
22:08:00 executing program 5:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000404740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c500000000b068d0bf46d323456536016466fcb76ccaaf6c3efed495a46215be0000760700c0c80cefd28581d1580300000000000000ca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa2417303e9e0b390", 0x90, 0x0, 0x0, 0x0)
sendto$inet6(r0, &(0x7f0000000180)="900000001d001f4d154a817393278bff0a80a578020000000404840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2896c6d3b", 0x6c, 0x0, 0x0, 0x0)

[  710.661729][T22869] netlink: 2092 bytes leftover after parsing attributes in process `syz-executor.3'.
22:08:00 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x2002, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={0x0, @in6={{0xa, 0x4e21, 0xe, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0xc1}, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0)
write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x77, 0x2, 0x8}, 0xb)
sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={<r1=>0x0}, 0x0)
ptrace$setopts(0x7abb990919170921, r1, 0x10001, 0x111)
ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio1\x00', 0x81f403e8956afdaf, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = getpgrp(0x0)
r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x404000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={<r4=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000a00)={0x9, 0x108, 0xfa00, {r4, 0x66, "c2658c", "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"}}, 0x110)
setpriority(0x0, r2, 0x100)
read(r0, &(0x7f0000000340)=""/175, 0xaf)
r5 = getpid()
ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000500)=0x1ff)
r6 = getpid()
ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000580)=0x8)
sched_setscheduler(r6, 0x0, &(0x7f0000000380))
ioprio_set$pid(0x0, r6, 0x9)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r7=>0xffffffffffffffff})
r8 = dup(r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$VIDIOC_TRY_EXT_CTRLS(r8, 0xc0205649, &(0x7f0000000700)={0x990000, 0x3, 0x3b, r3, 0x0, &(0x7f00000006c0)={0x990901, 0x1000, [], @value=0x5}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r9=>0xffffffffffffffff})
r10 = dup(r9)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f0000000b40))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r11=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0xffff}, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)='\x00', r11}, 0x30)
perf_event_open(&(0x7f0000000880)={0x5, 0x70, 0x0, 0x0, 0x8, 0xc8, 0x0, 0x107fff, 0x400, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={&(0x7f0000000240), 0x8}, 0x9120, 0x3, 0x6, 0x0, 0x0, 0x3f, 0x8}, r5, 0x0, r0, 0x3)
open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000480)='./file0\x00', &(0x7f0000000840)=[&(0x7f0000000600)='(\xe0\xf5\x00', &(0x7f0000000680)='/dev/loop#\x00', &(0x7f0000000440)='system\x00', &(0x7f0000000740)='\x00', &(0x7f00000007c0)='\x00', &(0x7f0000000800)='.cpuset\x1c\x00'], &(0x7f00000002c0)=[&(0x7f0000000040)='selfposix_acl_access&[\x00', &(0x7f0000000080)='/dev/loop#\x00', &(0x7f0000000100)='\\}#(,\x00', 0x0])

22:08:00 executing program 5:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000404740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c500000000b068d0bf46d323456536016466fcb76ccaaf6c3efed495a46215be0000760700c0c80cefd28581d1580300000000000000ca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa2417303e9e0b390", 0x90, 0x0, 0x0, 0x0)
sendto$inet6(r0, &(0x7f0000000180)="900000001d001f4d154a817393278bff0a80a578020000000404840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4", 0x7e, 0x0, 0x0, 0x0)

[  710.742175][T22873] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'.
22:08:00 executing program 5:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000404740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c500000000b068d0bf46d323456536016466fcb76ccaaf6c3efed495a46215be0000760700c0c80cefd28581d1580300000000000000ca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa2417303e9e0b390", 0x90, 0x0, 0x0, 0x0)
sendto$inet6(r0, &(0x7f0000000180)="900000001d001f4d154a817393278bff0a80a578020000000404840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4", 0x7e, 0x0, 0x0, 0x0)

[  710.818476][T22878] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'.
22:08:00 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x2002, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={0x0, @in6={{0xa, 0x4e21, 0xe, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0xc1}, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0)
write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x77, 0x2, 0x8}, 0xb)
sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={<r1=>0x0}, 0x0)
ptrace$setopts(0x7abb990919170921, r1, 0x10001, 0x111)
ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio1\x00', 0x81f403e8956afdaf, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = getpgrp(0x0)
r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x404000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={<r4=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000a00)={0x9, 0x108, 0xfa00, {r4, 0x66, "c2658c", "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"}}, 0x110)
setpriority(0x0, r2, 0x100)
read(r0, &(0x7f0000000340)=""/175, 0xaf)
r5 = getpid()
ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000500)=0x1ff)
r6 = getpid()
ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000580)=0x8)
sched_setscheduler(r6, 0x0, &(0x7f0000000380))
ioprio_set$pid(0x0, r6, 0x9)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r7=>0xffffffffffffffff})
r8 = dup(r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$VIDIOC_TRY_EXT_CTRLS(r8, 0xc0205649, &(0x7f0000000700)={0x990000, 0x3, 0x3b, r3, 0x0, &(0x7f00000006c0)={0x990901, 0x1000, [], @value=0x5}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r9=>0xffffffffffffffff})
r10 = dup(r9)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f0000000b40))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r11=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0xffff}, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)='\x00', r11}, 0x30)
perf_event_open(&(0x7f0000000880)={0x5, 0x70, 0x0, 0x0, 0x8, 0xc8, 0x0, 0x107fff, 0x400, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={&(0x7f0000000240), 0x8}, 0x9120, 0x3, 0x6, 0x0, 0x0, 0x3f, 0x8}, r5, 0x0, r0, 0x3)
open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000480)='./file0\x00', &(0x7f0000000840)=[&(0x7f0000000600)='(\xe0\xf5\x00', &(0x7f0000000680)='/dev/loop#\x00', &(0x7f0000000440)='system\x00', &(0x7f0000000740)='\x00', &(0x7f00000007c0)='\x00', &(0x7f0000000800)='.cpuset\x1c\x00'], &(0x7f00000002c0)=[&(0x7f0000000040)='selfposix_acl_access&[\x00', &(0x7f0000000080)='/dev/loop#\x00', &(0x7f0000000100)='\\}#(,\x00', 0x0])

[  710.910864][T22886] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'.
22:08:00 executing program 5:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000404740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c500000000b068d0bf46d323456536016466fcb76ccaaf6c3efed495a46215be0000760700c0c80cefd28581d1580300000000000000ca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa2417303e9e0b390", 0x90, 0x0, 0x0, 0x0)
sendto$inet6(r0, &(0x7f0000000180)="900000001d001f4d154a817393278bff0a80a578020000000404840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4", 0x7e, 0x0, 0x0, 0x0)

[  711.057209][T22894] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'.
22:08:03 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="6653405cb4aed12f0000000000ae47a825d86800278dcff47d0100005ae64f8f36460234432479aed75d492b41fd983f79e65199615607672c59957ab6ad602ea04db364bf68e6faa53367f05f4ad61421349f2f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca4fafa924edfe92175aaa1c4ecc7aeeb72e0d050feace34b52d9e5f755563698c7e24ab45f0866f15da7f9a6cd1c9ba50f5dd289d81466ec4af1d8bf2e2b773b5ca2e623ed2e65877a87b785aa8aa2eb0f07c986bf605c9335f4a", 0xc8}], 0x4, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff2d}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xffffffffffffffff, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r0, 0x0, 0x0)

22:08:03 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x2002, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={0x0, @in6={{0xa, 0x4e21, 0xe, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0xc1}, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0)
write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x77, 0x2, 0x8}, 0xb)
sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={<r1=>0x0}, 0x0)
ptrace$setopts(0x7abb990919170921, r1, 0x10001, 0x111)
ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio1\x00', 0x81f403e8956afdaf, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = getpgrp(0x0)
r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x404000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={<r4=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000a00)={0x9, 0x108, 0xfa00, {r4, 0x66, "c2658c", "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"}}, 0x110)
setpriority(0x0, r2, 0x100)
read(r0, &(0x7f0000000340)=""/175, 0xaf)
r5 = getpid()
ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000500)=0x1ff)
r6 = getpid()
ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000580)=0x8)
sched_setscheduler(r6, 0x0, &(0x7f0000000380))
ioprio_set$pid(0x0, r6, 0x9)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r7=>0xffffffffffffffff})
r8 = dup(r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$VIDIOC_TRY_EXT_CTRLS(r8, 0xc0205649, &(0x7f0000000700)={0x990000, 0x3, 0x3b, r3, 0x0, &(0x7f00000006c0)={0x990901, 0x1000, [], @value=0x5}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r9=>0xffffffffffffffff})
r10 = dup(r9)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f0000000b40))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r11=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0xffff}, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)='\x00', r11}, 0x30)
perf_event_open(&(0x7f0000000880)={0x5, 0x70, 0x0, 0x0, 0x8, 0xc8, 0x0, 0x107fff, 0x400, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={&(0x7f0000000240), 0x8}, 0x9120, 0x3, 0x6, 0x0, 0x0, 0x3f, 0x8}, r5, 0x4, 0xffffffffffffffff, 0x3)
open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000480)='./file0\x00', &(0x7f0000000840)=[&(0x7f0000000600)='(\xe0\xf5\x00', &(0x7f0000000680)='/dev/loop#\x00', &(0x7f0000000440)='system\x00', &(0x7f0000000740)='\x00', &(0x7f00000007c0)='\x00', &(0x7f0000000800)='.cpuset\x1c\x00'], &(0x7f00000002c0)=[&(0x7f0000000040)='selfposix_acl_access&[\x00', &(0x7f0000000080)='/dev/loop#\x00', &(0x7f0000000100)='\\}#(,\x00', 0x0])

22:08:03 executing program 5:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000404740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c500000000b068d0bf46d323456536016466fcb76ccaaf6c3efed495a46215be0000760700c0c80cefd28581d1580300000000000000ca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa2417303e9e0b390", 0x90, 0x0, 0x0, 0x0)
sendto$inet6(r0, &(0x7f0000000180)="900000001d001f4d154a817393278bff0a80a578020000000404840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee", 0x87, 0x0, 0x0, 0x0)

22:08:03 executing program 0:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r2, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00'], 0x1)
sendfile(r2, r1, 0x0, 0xa198)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="000ffff0802bc8369ce73cb6fda400006224541f3780351157b252dd000000009154262a80420801444dd89f6bfd1510066a2128e6c04f112558c8bdac2ae91c22768a299a879ca5ea45ea6189f14f84644589436f645a783aac81cf5bc374f0ac00ef2728cfd3b16ae8a4ec80ebea0a7e8c20a5986a2ab75b34dc27b332714d36cba3ac62ec7100c22eb5d6638b8e1d01468ad3328280706dfc31700ea3fe507bfd0f8169b2187e8d804978b5a6397a1f471a29369349f8dcda480be4b38fb6862fc91512ff53f74ccb2674157b224da1961bbaf18cfe6f399d07607fc5fa"], 0xdf)
sendfile(r4, r3, 0x0, 0xa198)
open(0x0, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)

22:08:03 executing program 3:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r2)
socket$inet(0x10, 0x2, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080025944eeba71a4976e252922c000000002aba000000012e0b3836005404b0e0301a4ce875f2e0ff5f163ee340b7679500800000000000000101013c5891039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffff7f00000000ffefa6f909f7", @ANYRES32=r4, @ANYBLOB="0000000bf1ffffff000000ff7f0001"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

22:08:03 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r0, 0x0, 0x0)

[  713.747420][T22921] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'.
[  713.751891][   T27] audit: type=1804 audit(1583791683.692:163): pid=22922 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/429/file0" dev="sda1" ino=16581 res=1
22:08:03 executing program 5:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000404740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c500000000b068d0bf46d323456536016466fcb76ccaaf6c3efed495a46215be0000760700c0c80cefd28581d1580300000000000000ca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa2417303e9e0b390", 0x90, 0x0, 0x0, 0x0)
sendto$inet6(r0, &(0x7f0000000180)="900000001d001f4d154a817393278bff0a80a578020000000404840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee", 0x87, 0x0, 0x0, 0x0)

22:08:03 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x2002, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={0x0, @in6={{0xa, 0x4e21, 0xe, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0xc1}, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0)
write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x77, 0x2, 0x8}, 0xb)
sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={<r1=>0x0}, 0x0)
ptrace$setopts(0x7abb990919170921, r1, 0x10001, 0x111)
ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio1\x00', 0x81f403e8956afdaf, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = getpgrp(0x0)
r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x404000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={<r4=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000a00)={0x9, 0x108, 0xfa00, {r4, 0x66, "c2658c", "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"}}, 0x110)
setpriority(0x0, r2, 0x100)
read(r0, &(0x7f0000000340)=""/175, 0xaf)
r5 = getpid()
ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000500)=0x1ff)
r6 = getpid()
ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000580)=0x8)
sched_setscheduler(r6, 0x0, &(0x7f0000000380))
ioprio_set$pid(0x0, r6, 0x9)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r7=>0xffffffffffffffff})
r8 = dup(r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$VIDIOC_TRY_EXT_CTRLS(r8, 0xc0205649, &(0x7f0000000700)={0x990000, 0x3, 0x3b, r3, 0x0, &(0x7f00000006c0)={0x990901, 0x1000, [], @value=0x5}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r9=>0xffffffffffffffff})
r10 = dup(r9)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f0000000b40))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r11=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0xffff}, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)='\x00', r11}, 0x30)
perf_event_open(&(0x7f0000000880)={0x5, 0x70, 0x0, 0x0, 0x8, 0xc8, 0x0, 0x107fff, 0x400, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={&(0x7f0000000240), 0x8}, 0x9120, 0x3, 0x6, 0x0, 0x0, 0x3f, 0x8}, r5, 0x4, 0xffffffffffffffff, 0x3)
open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000480)='./file0\x00', &(0x7f0000000840)=[&(0x7f0000000600)='(\xe0\xf5\x00', &(0x7f0000000680)='/dev/loop#\x00', &(0x7f0000000440)='system\x00', &(0x7f0000000740)='\x00', &(0x7f00000007c0)='\x00', &(0x7f0000000800)='.cpuset\x1c\x00'], &(0x7f00000002c0)=[&(0x7f0000000040)='selfposix_acl_access&[\x00', &(0x7f0000000080)='/dev/loop#\x00', &(0x7f0000000100)='\\}#(,\x00', 0x0])

[  713.805699][T22924] netlink: 2092 bytes leftover after parsing attributes in process `syz-executor.3'.
[  713.823447][   T27] audit: type=1804 audit(1583791683.742:164): pid=22922 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/429/file0" dev="sda1" ino=16581 res=1
22:08:03 executing program 5:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000404740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c500000000b068d0bf46d323456536016466fcb76ccaaf6c3efed495a46215be0000760700c0c80cefd28581d1580300000000000000ca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa2417303e9e0b390", 0x90, 0x0, 0x0, 0x0)
sendto$inet6(r0, &(0x7f0000000180)="900000001d001f4d154a817393278bff0a80a578020000000404840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee", 0x87, 0x0, 0x0, 0x0)

[  713.890558][T22928] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'.
22:08:03 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x2002, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={0x0, @in6={{0xa, 0x4e21, 0xe, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0xc1}, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0)
write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x77, 0x2, 0x8}, 0xb)
sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={<r1=>0x0}, 0x0)
ptrace$setopts(0x7abb990919170921, r1, 0x10001, 0x111)
ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio1\x00', 0x81f403e8956afdaf, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = getpgrp(0x0)
r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x404000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={<r4=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000a00)={0x9, 0x108, 0xfa00, {r4, 0x66, "c2658c", "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"}}, 0x110)
setpriority(0x0, r2, 0x100)
read(r0, &(0x7f0000000340)=""/175, 0xaf)
r5 = getpid()
ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000500)=0x1ff)
r6 = getpid()
ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000580)=0x8)
sched_setscheduler(r6, 0x0, &(0x7f0000000380))
ioprio_set$pid(0x0, r6, 0x9)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r7=>0xffffffffffffffff})
r8 = dup(r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$VIDIOC_TRY_EXT_CTRLS(r8, 0xc0205649, &(0x7f0000000700)={0x990000, 0x3, 0x3b, r3, 0x0, &(0x7f00000006c0)={0x990901, 0x1000, [], @value=0x5}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r9=>0xffffffffffffffff})
r10 = dup(r9)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f0000000b40))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r11=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0xffff}, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)='\x00', r11}, 0x30)
perf_event_open(&(0x7f0000000880)={0x5, 0x70, 0x0, 0x0, 0x8, 0xc8, 0x0, 0x107fff, 0x400, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={&(0x7f0000000240), 0x8}, 0x9120, 0x3, 0x6, 0x0, 0x0, 0x3f, 0x8}, r5, 0x4, 0xffffffffffffffff, 0x3)
open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000480)='./file0\x00', &(0x7f0000000840)=[&(0x7f0000000600)='(\xe0\xf5\x00', &(0x7f0000000680)='/dev/loop#\x00', &(0x7f0000000440)='system\x00', &(0x7f0000000740)='\x00', &(0x7f00000007c0)='\x00', &(0x7f0000000800)='.cpuset\x1c\x00'], &(0x7f00000002c0)=[&(0x7f0000000040)='selfposix_acl_access&[\x00', &(0x7f0000000080)='/dev/loop#\x00', &(0x7f0000000100)='\\}#(,\x00', 0x0])

22:08:03 executing program 5:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000404740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c500000000b068d0bf46d323456536016466fcb76ccaaf6c3efed495a46215be0000760700c0c80cefd28581d1580300000000000000ca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa2417303e9e0b390", 0x90, 0x0, 0x0, 0x0)
sendto$inet6(r0, &(0x7f0000000180)="900000001d001f4d154a817393278bff0a80a578020000000404840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731a", 0x8c, 0x0, 0x0, 0x0)

[  713.991016][T22937] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'.
22:08:04 executing program 5:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000404740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c500000000b068d0bf46d323456536016466fcb76ccaaf6c3efed495a46215be0000760700c0c80cefd28581d1580300000000000000ca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa2417303e9e0b390", 0x90, 0x0, 0x0, 0x0)
sendto$inet6(r0, &(0x7f0000000180)="900000001d001f4d154a817393278bff0a80a578020000000404840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731a", 0x8c, 0x0, 0x0, 0x0)

22:08:06 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="6653405cb4aed12f0000000000ae47a825d86800278dcff47d0100005ae64f8f36460234432479aed75d492b41fd983f79e65199615607672c59957ab6ad602ea04db364bf68e6faa53367f05f4ad61421349f2f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca4fafa924edfe92175aaa1c4ecc7aeeb72e0d050feace34b52d9e5f755563698c7e24ab45f0866f15da7f9a6cd1c9ba50f5dd289d81466ec4af1d8bf2e2b773b5ca2e623ed2e65877a87b785aa8aa2eb0f07c986bf605c9335f4a", 0xc8}], 0x4, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff2d}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xffffffffffffffff, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r0, 0x0, 0x0)

22:08:06 executing program 5:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000404740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c500000000b068d0bf46d323456536016466fcb76ccaaf6c3efed495a46215be0000760700c0c80cefd28581d1580300000000000000ca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa2417303e9e0b390", 0x90, 0x0, 0x0, 0x0)
sendto$inet6(r0, &(0x7f0000000180)="900000001d001f4d154a817393278bff0a80a578020000000404840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731a", 0x8c, 0x0, 0x0, 0x0)

22:08:06 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x2002, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={0x0, @in6={{0xa, 0x4e21, 0xe, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0xc1}, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0)
write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x77, 0x2, 0x8}, 0xb)
sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={<r1=>0x0}, 0x0)
ptrace$setopts(0x7abb990919170921, r1, 0x10001, 0x111)
ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio1\x00', 0x81f403e8956afdaf, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = getpgrp(0x0)
r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x404000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={<r4=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000a00)={0x9, 0x108, 0xfa00, {r4, 0x66, "c2658c", "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"}}, 0x110)
setpriority(0x0, r2, 0x100)
read(r0, &(0x7f0000000340)=""/175, 0xaf)
r5 = getpid()
ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000500)=0x1ff)
r6 = getpid()
ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000580)=0x8)
sched_setscheduler(r6, 0x0, &(0x7f0000000380))
ioprio_set$pid(0x0, r6, 0x9)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r7=>0xffffffffffffffff})
r8 = dup(r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$VIDIOC_TRY_EXT_CTRLS(r8, 0xc0205649, &(0x7f0000000700)={0x990000, 0x3, 0x3b, r3, 0x0, &(0x7f00000006c0)={0x990901, 0x1000, [], @value=0x5}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r9=>0xffffffffffffffff})
r10 = dup(r9)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f0000000b40))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r11=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0xffff}, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)='\x00', r11}, 0x30)
perf_event_open(&(0x7f0000000880)={0x5, 0x70, 0x0, 0x0, 0x8, 0xc8, 0x0, 0x107fff, 0x400, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={&(0x7f0000000240), 0x8}, 0x9120, 0x3, 0x6, 0x0, 0x0, 0x3f, 0x8}, r5, 0x4, r0, 0x0)
open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000480)='./file0\x00', &(0x7f0000000840)=[&(0x7f0000000600)='(\xe0\xf5\x00', &(0x7f0000000680)='/dev/loop#\x00', &(0x7f0000000440)='system\x00', &(0x7f0000000740)='\x00', &(0x7f00000007c0)='\x00', &(0x7f0000000800)='.cpuset\x1c\x00'], &(0x7f00000002c0)=[&(0x7f0000000040)='selfposix_acl_access&[\x00', &(0x7f0000000080)='/dev/loop#\x00', &(0x7f0000000100)='\\}#(,\x00', 0x0])

22:08:06 executing program 0:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r2, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00'], 0x1)
sendfile(r2, r1, 0x0, 0xa198)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="000ffff0802bc8369ce73cb6fda400006224541f3780351157b252dd000000009154262a80420801444dd89f6bfd1510066a2128e6c04f112558c8bdac2ae91c22768a299a879ca5ea45ea6189f14f84644589436f645a783aac81cf5bc374f0ac00ef2728cfd3b16ae8a4ec80ebea0a7e8c20a5986a2ab75b34dc27b332714d36cba3ac62ec7100c22eb5d6638b8e1d01468ad3328280706dfc31700ea3fe507bfd0f8169b2187e8d804978b5a6397a1f471a29369349f8dcda480be4b38fb6862fc91512ff53f74ccb2674157b224da1961bbaf18cfe6f399d07607fc5fa"], 0xdf)
sendfile(r4, r3, 0x0, 0xa198)
open(0x0, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)

22:08:06 executing program 3:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r2)
socket$inet(0x10, 0x2, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080025944eeba71a4976e252922c000000002aba000000012e0b3836005404b0e0301a4ce875f2e0ff5f163ee340b7679500800000000000000101013c5891039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffff7f00000000ffefa6f909f7", @ANYRES32=r4, @ANYBLOB="0000000bf1ffffff000000ff7f0001"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

22:08:06 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, 0x0)
ptrace$cont(0x20, r0, 0x0, 0x0)

[  716.772681][T23062] __nla_validate_parse: 2 callbacks suppressed
[  716.772693][T23062] netlink: 2092 bytes leftover after parsing attributes in process `syz-executor.3'.
[  716.814037][T23057] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'.
22:08:06 executing program 5:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000404740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c500000000b068d0bf46d323456536016466fcb76ccaaf6c3efed495a46215be0000760700c0c80cefd28581d1580300000000000000ca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa2417303e9e0b390", 0x90, 0x0, 0x0, 0x0)
sendto$inet6(r0, &(0x7f0000000180)="900000001d001f4d154a817393278bff0a80a578020000000404840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0", 0x8e, 0x0, 0x0, 0x0)

[  716.856455][   T27] audit: type=1804 audit(1583791686.802:165): pid=23071 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/430/file0" dev="sda1" ino=16991 res=1
[  716.893231][   T27] audit: type=1804 audit(1583791686.802:166): pid=23071 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/430/file0" dev="sda1" ino=16991 res=1
22:08:06 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x2002, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={0x0, @in6={{0xa, 0x4e21, 0xe, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0xc1}, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0)
write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x77, 0x2, 0x8}, 0xb)
sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={<r1=>0x0}, 0x0)
ptrace$setopts(0x7abb990919170921, r1, 0x10001, 0x111)
ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio1\x00', 0x81f403e8956afdaf, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = getpgrp(0x0)
r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x404000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={<r4=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000a00)={0x9, 0x108, 0xfa00, {r4, 0x66, "c2658c", "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"}}, 0x110)
setpriority(0x0, r2, 0x100)
read(r0, &(0x7f0000000340)=""/175, 0xaf)
r5 = getpid()
ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000500)=0x1ff)
r6 = getpid()
ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000580)=0x8)
sched_setscheduler(r6, 0x0, &(0x7f0000000380))
ioprio_set$pid(0x0, r6, 0x9)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r7=>0xffffffffffffffff})
r8 = dup(r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$VIDIOC_TRY_EXT_CTRLS(r8, 0xc0205649, &(0x7f0000000700)={0x990000, 0x3, 0x3b, r3, 0x0, &(0x7f00000006c0)={0x990901, 0x1000, [], @value=0x5}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r9=>0xffffffffffffffff})
r10 = dup(r9)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f0000000b40))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r11=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0xffff}, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)='\x00', r11}, 0x30)
perf_event_open(&(0x7f0000000880)={0x5, 0x70, 0x0, 0x0, 0x8, 0xc8, 0x0, 0x107fff, 0x400, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={&(0x7f0000000240), 0x8}, 0x9120, 0x3, 0x6, 0x0, 0x0, 0x3f, 0x8}, r5, 0x4, r0, 0x0)
open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000480)='./file0\x00', &(0x7f0000000840)=[&(0x7f0000000600)='(\xe0\xf5\x00', &(0x7f0000000680)='/dev/loop#\x00', &(0x7f0000000440)='system\x00', &(0x7f0000000740)='\x00', &(0x7f00000007c0)='\x00', &(0x7f0000000800)='.cpuset\x1c\x00'], &(0x7f00000002c0)=[&(0x7f0000000040)='selfposix_acl_access&[\x00', &(0x7f0000000080)='/dev/loop#\x00', &(0x7f0000000100)='\\}#(,\x00', 0x0])

[  717.023302][T23080] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'.
22:08:07 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x2002, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={0x0, @in6={{0xa, 0x4e21, 0xe, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0xc1}, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0)
write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x77, 0x2, 0x8}, 0xb)
sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={<r1=>0x0}, 0x0)
ptrace$setopts(0x7abb990919170921, r1, 0x10001, 0x111)
ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio1\x00', 0x81f403e8956afdaf, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = getpgrp(0x0)
r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x404000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={<r4=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000a00)={0x9, 0x108, 0xfa00, {r4, 0x66, "c2658c", "df70238469aac9d4907464f29c1754324ed168c706fc37ddb86672e2a6601aefe58eaa4d39b08d20f612d04d207f2343d2ef0308ea553d0430ba29fbd1dc0922dbcaffe9325eca46f1b70208570afbe8af8047e6d323df5ba61e374a095723090a2b2ad594c24f8b10ab07ef5ebaad20e82cf58266a90ccd892895df0f01996af75fb0340198b6d6433b54ece705126a96a1ea1801ff0feee26d343f116a9dd5af4f7f5be661a21a9c4ba9458882e4661dcf854d38884f7716dcb67cbfdeb20deddc905882a8c5af02f857e06c1e280f2a8b6c0c608b17c8c57c6984faf6023ade63b1fb0dd0156b61e28445fb337a427f119e9486e690fd06c39968a937154f"}}, 0x110)
setpriority(0x0, r2, 0x100)
read(r0, &(0x7f0000000340)=""/175, 0xaf)
r5 = getpid()
ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000500)=0x1ff)
r6 = getpid()
ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000580)=0x8)
sched_setscheduler(r6, 0x0, &(0x7f0000000380))
ioprio_set$pid(0x0, r6, 0x9)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r7=>0xffffffffffffffff})
r8 = dup(r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$VIDIOC_TRY_EXT_CTRLS(r8, 0xc0205649, &(0x7f0000000700)={0x990000, 0x3, 0x3b, r3, 0x0, &(0x7f00000006c0)={0x990901, 0x1000, [], @value=0x5}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r9=>0xffffffffffffffff})
r10 = dup(r9)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f0000000b40))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r11=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0xffff}, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)='\x00', r11}, 0x30)
perf_event_open(&(0x7f0000000880)={0x5, 0x70, 0x0, 0x0, 0x8, 0xc8, 0x0, 0x107fff, 0x400, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={&(0x7f0000000240), 0x8}, 0x9120, 0x3, 0x6, 0x0, 0x0, 0x3f, 0x8}, r5, 0x4, r0, 0x0)
open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000480)='./file0\x00', &(0x7f0000000840)=[&(0x7f0000000600)='(\xe0\xf5\x00', &(0x7f0000000680)='/dev/loop#\x00', &(0x7f0000000440)='system\x00', &(0x7f0000000740)='\x00', &(0x7f00000007c0)='\x00', &(0x7f0000000800)='.cpuset\x1c\x00'], &(0x7f00000002c0)=[&(0x7f0000000040)='selfposix_acl_access&[\x00', &(0x7f0000000080)='/dev/loop#\x00', &(0x7f0000000100)='\\}#(,\x00', 0x0])

22:08:07 executing program 5:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000404740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c500000000b068d0bf46d323456536016466fcb76ccaaf6c3efed495a46215be0000760700c0c80cefd28581d1580300000000000000ca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa2417303e9e0b390", 0x90, 0x0, 0x0, 0x0)
sendto$inet6(r0, &(0x7f0000000180)="900000001d001f4d154a817393278bff0a80a578020000000404840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0", 0x8e, 0x0, 0x0, 0x0)

22:08:07 executing program 5:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000404740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c500000000b068d0bf46d323456536016466fcb76ccaaf6c3efed495a46215be0000760700c0c80cefd28581d1580300000000000000ca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa2417303e9e0b390", 0x90, 0x0, 0x0, 0x0)
sendto$inet6(r0, &(0x7f0000000180)="900000001d001f4d154a817393278bff0a80a578020000000404840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0", 0x8e, 0x0, 0x0, 0x0)

[  717.163057][T23089] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'.
22:08:07 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x2002, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={0x0, @in6={{0xa, 0x4e21, 0xe, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0xc1}, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0)
write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x77, 0x2, 0x8}, 0xb)
sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={<r1=>0x0}, 0x0)
ptrace$setopts(0x7abb990919170921, r1, 0x10001, 0x111)
ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio1\x00', 0x81f403e8956afdaf, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = getpgrp(0x0)
r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x404000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={<r4=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000a00)={0x9, 0x108, 0xfa00, {r4, 0x66, "c2658c", "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"}}, 0x110)
setpriority(0x0, r2, 0x100)
read(r0, &(0x7f0000000340)=""/175, 0xaf)
r5 = getpid()
ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000500)=0x1ff)
r6 = getpid()
ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000580)=0x8)
sched_setscheduler(r6, 0x0, &(0x7f0000000380))
ioprio_set$pid(0x0, r6, 0x9)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r7=>0xffffffffffffffff})
r8 = dup(r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$VIDIOC_TRY_EXT_CTRLS(r8, 0xc0205649, &(0x7f0000000700)={0x990000, 0x3, 0x3b, r3, 0x0, &(0x7f00000006c0)={0x990901, 0x1000, [], @value=0x5}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r9=>0xffffffffffffffff})
r10 = dup(r9)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f0000000b40))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r11=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0xffff}, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)='\x00', r11}, 0x30)
perf_event_open(&(0x7f0000000880)={0x5, 0x70, 0x0, 0x0, 0x8, 0xc8, 0x0, 0x107fff, 0x400, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={&(0x7f0000000240), 0x8}, 0x9120, 0x3, 0x6, 0x0, 0x0, 0x3f, 0x8}, r5, 0x4, r0, 0x3)
open(0x0, 0x40, 0x1)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000480)='./file0\x00', &(0x7f0000000840)=[&(0x7f0000000600)='(\xe0\xf5\x00', &(0x7f0000000680)='/dev/loop#\x00', &(0x7f0000000440)='system\x00', &(0x7f0000000740)='\x00', &(0x7f00000007c0)='\x00', &(0x7f0000000800)='.cpuset\x1c\x00'], &(0x7f00000002c0)=[&(0x7f0000000040)='selfposix_acl_access&[\x00', &(0x7f0000000080)='/dev/loop#\x00', &(0x7f0000000100)='\\}#(,\x00', 0x0])

[  717.296534][T23097] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'.
22:08:09 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="6653405cb4aed12f0000000000ae47a825d86800278dcff47d0100005ae64f8f36460234432479aed75d492b41fd983f79e65199615607672c59957ab6ad602ea04db364bf68e6faa53367f05f4ad61421349f2f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca4fafa924edfe92175aaa1c4ecc7aeeb72e0d050feace34b52d9e5f755563698c7e24ab45f0866f15da7f9a6cd1c9ba50f5dd289d81466ec4af1d8bf2e2b773b5ca2e623ed2e65877a87b785aa8aa2eb0f07c986bf605c9335f4a", 0xc8}], 0x4, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff2d}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xffffffffffffffff, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r0, 0x0, 0x0)

22:08:09 executing program 5:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000404740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c500000000b068d0bf46d323456536016466fcb76ccaaf6c3efed495a46215be0000760700c0c80cefd28581d1580300000000000000ca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa2417303e9e0b390", 0x90, 0x0, 0x0, 0x0)
sendto$inet6(r0, &(0x7f0000000180)="900000001d001f4d154a817393278bff0a80a578020000000404840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b3", 0x8f, 0x0, 0x0, 0x0)

22:08:09 executing program 0:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r2, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00'], 0x1)
sendfile(r2, r1, 0x0, 0xa198)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="000ffff0802bc8369ce73cb6fda400006224541f3780351157b252dd000000009154262a80420801444dd89f6bfd1510066a2128e6c04f112558c8bdac2ae91c22768a299a879ca5ea45ea6189f14f84644589436f645a783aac81cf5bc374f0ac00ef2728cfd3b16ae8a4ec80ebea0a7e8c20a5986a2ab75b34dc27b332714d36cba3ac62ec7100c22eb5d6638b8e1d01468ad3328280706dfc31700ea3fe507bfd0f8169b2187e8d804978b5a6397a1f471a29369349f8dcda480be4b38fb6862fc91512ff53f74ccb2674157b224da1961bbaf18cfe6f399d07607fc5fa"], 0xdf)
sendfile(r4, r3, 0x0, 0xa198)
open(0x0, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)

22:08:09 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x2002, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={0x0, @in6={{0xa, 0x4e21, 0xe, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0xc1}, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0)
write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x77, 0x2, 0x8}, 0xb)
sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={<r1=>0x0}, 0x0)
ptrace$setopts(0x7abb990919170921, r1, 0x10001, 0x111)
ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio1\x00', 0x81f403e8956afdaf, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = getpgrp(0x0)
r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x404000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={<r4=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000a00)={0x9, 0x108, 0xfa00, {r4, 0x66, "c2658c", "df70238469aac9d4907464f29c1754324ed168c706fc37ddb86672e2a6601aefe58eaa4d39b08d20f612d04d207f2343d2ef0308ea553d0430ba29fbd1dc0922dbcaffe9325eca46f1b70208570afbe8af8047e6d323df5ba61e374a095723090a2b2ad594c24f8b10ab07ef5ebaad20e82cf58266a90ccd892895df0f01996af75fb0340198b6d6433b54ece705126a96a1ea1801ff0feee26d343f116a9dd5af4f7f5be661a21a9c4ba9458882e4661dcf854d38884f7716dcb67cbfdeb20deddc905882a8c5af02f857e06c1e280f2a8b6c0c608b17c8c57c6984faf6023ade63b1fb0dd0156b61e28445fb337a427f119e9486e690fd06c39968a937154f"}}, 0x110)
setpriority(0x0, r2, 0x100)
read(r0, &(0x7f0000000340)=""/175, 0xaf)
r5 = getpid()
ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000500)=0x1ff)
r6 = getpid()
ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000580)=0x8)
sched_setscheduler(r6, 0x0, &(0x7f0000000380))
ioprio_set$pid(0x0, r6, 0x9)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r7=>0xffffffffffffffff})
r8 = dup(r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$VIDIOC_TRY_EXT_CTRLS(r8, 0xc0205649, &(0x7f0000000700)={0x990000, 0x3, 0x3b, r3, 0x0, &(0x7f00000006c0)={0x990901, 0x1000, [], @value=0x5}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r9=>0xffffffffffffffff})
r10 = dup(r9)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f0000000b40))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r11=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0xffff}, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)='\x00', r11}, 0x30)
perf_event_open(&(0x7f0000000880)={0x5, 0x70, 0x0, 0x0, 0x8, 0xc8, 0x0, 0x107fff, 0x400, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={&(0x7f0000000240), 0x8}, 0x9120, 0x3, 0x6, 0x0, 0x0, 0x3f, 0x8}, r5, 0x4, r0, 0x3)
open(0x0, 0x40, 0x1)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000480)='./file0\x00', &(0x7f0000000840)=[&(0x7f0000000600)='(\xe0\xf5\x00', &(0x7f0000000680)='/dev/loop#\x00', &(0x7f0000000440)='system\x00', &(0x7f0000000740)='\x00', &(0x7f00000007c0)='\x00', &(0x7f0000000800)='.cpuset\x1c\x00'], &(0x7f00000002c0)=[&(0x7f0000000040)='selfposix_acl_access&[\x00', &(0x7f0000000080)='/dev/loop#\x00', &(0x7f0000000100)='\\}#(,\x00', 0x0])

22:08:09 executing program 3:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r1)
socket$inet(0x10, 0x2, 0x0)
r2 = socket(0x11, 0x800000003, 0x0)
bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080025944eeba71a4976e252922c000000002aba000000012e0b3836005404b0e0301a4ce875f2e0ff5f163ee340b7679500800000000000000101013c5891039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffff7f00000000ffefa6f909f7", @ANYRES32=r3, @ANYBLOB="0000000bf1ffffff000000ff7f0001"], 0x3}}, 0x0)
splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0)

22:08:09 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, 0x0)
ptrace$cont(0x20, r0, 0x0, 0x0)

[  719.868878][T23114] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'.
22:08:09 executing program 5:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000404740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c500000000b068d0bf46d323456536016466fcb76ccaaf6c3efed495a46215be0000760700c0c80cefd28581d1580300000000000000ca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa2417303e9e0b390", 0x90, 0x0, 0x0, 0x0)
sendto$inet6(r0, &(0x7f0000000180)="900000001d001f4d154a817393278bff0a80a578020000000404840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b3", 0x8f, 0x0, 0x0, 0x0)

[  719.941803][   T27] audit: type=1804 audit(1583791689.892:167): pid=23124 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/431/file0" dev="sda1" ino=17001 res=1
[  719.972289][   T27] audit: type=1804 audit(1583791689.892:168): pid=23124 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/431/file0" dev="sda1" ino=17001 res=1
22:08:10 executing program 5:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000404740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c500000000b068d0bf46d323456536016466fcb76ccaaf6c3efed495a46215be0000760700c0c80cefd28581d1580300000000000000ca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa2417303e9e0b390", 0x90, 0x0, 0x0, 0x0)
sendto$inet6(r0, &(0x7f0000000180)="900000001d001f4d154a817393278bff0a80a578020000000404840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b3", 0x8f, 0x0, 0x0, 0x0)

22:08:10 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x2002, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={0x0, @in6={{0xa, 0x4e21, 0xe, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0xc1}, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0)
write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x77, 0x2, 0x8}, 0xb)
sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={<r1=>0x0}, 0x0)
ptrace$setopts(0x7abb990919170921, r1, 0x10001, 0x111)
ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio1\x00', 0x81f403e8956afdaf, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = getpgrp(0x0)
r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x404000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={<r4=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000a00)={0x9, 0x108, 0xfa00, {r4, 0x66, "c2658c", "df70238469aac9d4907464f29c1754324ed168c706fc37ddb86672e2a6601aefe58eaa4d39b08d20f612d04d207f2343d2ef0308ea553d0430ba29fbd1dc0922dbcaffe9325eca46f1b70208570afbe8af8047e6d323df5ba61e374a095723090a2b2ad594c24f8b10ab07ef5ebaad20e82cf58266a90ccd892895df0f01996af75fb0340198b6d6433b54ece705126a96a1ea1801ff0feee26d343f116a9dd5af4f7f5be661a21a9c4ba9458882e4661dcf854d38884f7716dcb67cbfdeb20deddc905882a8c5af02f857e06c1e280f2a8b6c0c608b17c8c57c6984faf6023ade63b1fb0dd0156b61e28445fb337a427f119e9486e690fd06c39968a937154f"}}, 0x110)
setpriority(0x0, r2, 0x100)
read(r0, &(0x7f0000000340)=""/175, 0xaf)
r5 = getpid()
ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000500)=0x1ff)
r6 = getpid()
ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000580)=0x8)
sched_setscheduler(r6, 0x0, &(0x7f0000000380))
ioprio_set$pid(0x0, r6, 0x9)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r7=>0xffffffffffffffff})
r8 = dup(r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$VIDIOC_TRY_EXT_CTRLS(r8, 0xc0205649, &(0x7f0000000700)={0x990000, 0x3, 0x3b, r3, 0x0, &(0x7f00000006c0)={0x990901, 0x1000, [], @value=0x5}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r9=>0xffffffffffffffff})
r10 = dup(r9)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f0000000b40))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r11=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0xffff}, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)='\x00', r11}, 0x30)
perf_event_open(&(0x7f0000000880)={0x5, 0x70, 0x0, 0x0, 0x8, 0xc8, 0x0, 0x107fff, 0x400, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={&(0x7f0000000240), 0x8}, 0x9120, 0x3, 0x6, 0x0, 0x0, 0x3f, 0x8}, r5, 0x4, r0, 0x3)
open(0x0, 0x40, 0x1)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000480)='./file0\x00', &(0x7f0000000840)=[&(0x7f0000000600)='(\xe0\xf5\x00', &(0x7f0000000680)='/dev/loop#\x00', &(0x7f0000000440)='system\x00', &(0x7f0000000740)='\x00', &(0x7f00000007c0)='\x00', &(0x7f0000000800)='.cpuset\x1c\x00'], &(0x7f00000002c0)=[&(0x7f0000000040)='selfposix_acl_access&[\x00', &(0x7f0000000080)='/dev/loop#\x00', &(0x7f0000000100)='\\}#(,\x00', 0x0])

[  720.026158][T23129] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'.
[  720.113148][T23132] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'.
22:08:10 executing program 5:
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r0, &(0x7f00000002c0)={0x28, 0x0, 0x0, @hyper}, 0x10)
syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14)
r1 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r1, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
r2 = socket$inet6(0x10, 0x2, 0x0)
sendto$inet6(r2, &(0x7f00000000c0)="1ba0000010001d0200fdc5cbdd041d8e828000000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740c00000000d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="cb56b6cc0407008b65d8b4ac2ca35c66", 0x10)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112)

22:08:10 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x2002, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={0x0, @in6={{0xa, 0x4e21, 0xe, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0xc1}, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0)
write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x77, 0x2, 0x8}, 0xb)
sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={<r1=>0x0}, 0x0)
ptrace$setopts(0x7abb990919170921, r1, 0x10001, 0x111)
ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio1\x00', 0x81f403e8956afdaf, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = getpgrp(0x0)
r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x404000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={<r4=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000a00)={0x9, 0x108, 0xfa00, {r4, 0x66, "c2658c", "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"}}, 0x110)
setpriority(0x0, r2, 0x100)
read(r0, &(0x7f0000000340)=""/175, 0xaf)
r5 = getpid()
ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000500)=0x1ff)
r6 = getpid()
ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000580)=0x8)
sched_setscheduler(r6, 0x0, &(0x7f0000000380))
ioprio_set$pid(0x0, r6, 0x9)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r7=>0xffffffffffffffff})
r8 = dup(r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$VIDIOC_TRY_EXT_CTRLS(r8, 0xc0205649, &(0x7f0000000700)={0x990000, 0x3, 0x3b, r3, 0x0, &(0x7f00000006c0)={0x990901, 0x1000, [], @value=0x5}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r9=>0xffffffffffffffff})
r10 = dup(r9)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f0000000b40))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r11=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0xffff}, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)='\x00', r11}, 0x30)
perf_event_open(&(0x7f0000000880)={0x5, 0x70, 0x0, 0x0, 0x8, 0xc8, 0x0, 0x107fff, 0x400, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={&(0x7f0000000240), 0x8}, 0x9120, 0x3, 0x6, 0x0, 0x0, 0x3f, 0x8}, r5, 0x4, r0, 0x3)
open(&(0x7f0000000180)='./file0\x00', 0x0, 0x1)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000480)='./file0\x00', &(0x7f0000000840)=[&(0x7f0000000600)='(\xe0\xf5\x00', &(0x7f0000000680)='/dev/loop#\x00', &(0x7f0000000440)='system\x00', &(0x7f0000000740)='\x00', &(0x7f00000007c0)='\x00', &(0x7f0000000800)='.cpuset\x1c\x00'], &(0x7f00000002c0)=[&(0x7f0000000040)='selfposix_acl_access&[\x00', &(0x7f0000000080)='/dev/loop#\x00', &(0x7f0000000100)='\\}#(,\x00', 0x0])

[  720.244807][T23139] netlink: 40067 bytes leftover after parsing attributes in process `syz-executor.5'.
22:08:10 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x2002, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={0x0, @in6={{0xa, 0x4e21, 0xe, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0xc1}, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0)
write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x77, 0x2, 0x8}, 0xb)
sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={<r1=>0x0}, 0x0)
ptrace$setopts(0x7abb990919170921, r1, 0x10001, 0x111)
ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio1\x00', 0x81f403e8956afdaf, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = getpgrp(0x0)
r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x404000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={<r4=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000a00)={0x9, 0x108, 0xfa00, {r4, 0x66, "c2658c", "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"}}, 0x110)
setpriority(0x0, r2, 0x100)
read(r0, &(0x7f0000000340)=""/175, 0xaf)
r5 = getpid()
ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000500)=0x1ff)
r6 = getpid()
ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000580)=0x8)
sched_setscheduler(r6, 0x0, &(0x7f0000000380))
ioprio_set$pid(0x0, r6, 0x9)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r7=>0xffffffffffffffff})
r8 = dup(r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$VIDIOC_TRY_EXT_CTRLS(r8, 0xc0205649, &(0x7f0000000700)={0x990000, 0x3, 0x3b, r3, 0x0, &(0x7f00000006c0)={0x990901, 0x1000, [], @value=0x5}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r9=>0xffffffffffffffff})
r10 = dup(r9)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f0000000b40))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r11=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0xffff}, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)='\x00', r11}, 0x30)
perf_event_open(&(0x7f0000000880)={0x5, 0x70, 0x0, 0x0, 0x8, 0xc8, 0x0, 0x107fff, 0x400, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={&(0x7f0000000240), 0x8}, 0x9120, 0x3, 0x6, 0x0, 0x0, 0x3f, 0x8}, r5, 0x4, r0, 0x3)
open(&(0x7f0000000180)='./file0\x00', 0x0, 0x1)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000480)='./file0\x00', &(0x7f0000000840)=[&(0x7f0000000600)='(\xe0\xf5\x00', &(0x7f0000000680)='/dev/loop#\x00', &(0x7f0000000440)='system\x00', &(0x7f0000000740)='\x00', &(0x7f00000007c0)='\x00', &(0x7f0000000800)='.cpuset\x1c\x00'], &(0x7f00000002c0)=[&(0x7f0000000040)='selfposix_acl_access&[\x00', &(0x7f0000000080)='/dev/loop#\x00', &(0x7f0000000100)='\\}#(,\x00', 0x0])

[  720.344866][T23150] netlink: 40067 bytes leftover after parsing attributes in process `syz-executor.5'.
22:08:12 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="6653405cb4aed12f0000000000ae47a825d86800278dcff47d0100005ae64f8f36460234432479aed75d492b41fd983f79e65199615607672c59957ab6ad602ea04db364bf68e6faa53367f05f4ad61421349f2f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca4fafa924edfe92175aaa1c4ecc7aeeb72e0d050feace34b52d9e5f755563698c7e24ab45f0866f15da7f9a6cd1c9ba50f5dd289d81466ec4af1d8bf2e2b773b5ca2e623ed2e65877a87b785aa8aa2eb0f07c986bf605c9335f4a", 0xc8}], 0x4, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff2d}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r0, 0x0, 0x0)

22:08:12 executing program 5:
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r0, &(0x7f00000002c0)={0x28, 0x0, 0x0, @hyper}, 0x10)
syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14)
r1 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r1, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
r2 = socket$inet6(0x10, 0x2, 0x0)
sendto$inet6(r2, &(0x7f00000000c0)="1ba0000010001d0200fdc5cbdd041d8e828000000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740c00000000d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="cb56b6cc0407008b65d8b4ac2ca35c66", 0x10)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112)

22:08:12 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x2002, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={0x0, @in6={{0xa, 0x4e21, 0xe, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0xc1}, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0)
write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x77, 0x2, 0x8}, 0xb)
sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={<r1=>0x0}, 0x0)
ptrace$setopts(0x7abb990919170921, r1, 0x10001, 0x111)
ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio1\x00', 0x81f403e8956afdaf, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = getpgrp(0x0)
r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x404000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={<r4=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000a00)={0x9, 0x108, 0xfa00, {r4, 0x66, "c2658c", "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"}}, 0x110)
setpriority(0x0, r2, 0x100)
read(r0, &(0x7f0000000340)=""/175, 0xaf)
r5 = getpid()
ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000500)=0x1ff)
r6 = getpid()
ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000580)=0x8)
sched_setscheduler(r6, 0x0, &(0x7f0000000380))
ioprio_set$pid(0x0, r6, 0x9)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r7=>0xffffffffffffffff})
r8 = dup(r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$VIDIOC_TRY_EXT_CTRLS(r8, 0xc0205649, &(0x7f0000000700)={0x990000, 0x3, 0x3b, r3, 0x0, &(0x7f00000006c0)={0x990901, 0x1000, [], @value=0x5}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r9=>0xffffffffffffffff})
r10 = dup(r9)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f0000000b40))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r11=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0xffff}, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)='\x00', r11}, 0x30)
perf_event_open(&(0x7f0000000880)={0x5, 0x70, 0x0, 0x0, 0x8, 0xc8, 0x0, 0x107fff, 0x400, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={&(0x7f0000000240), 0x8}, 0x9120, 0x3, 0x6, 0x0, 0x0, 0x3f, 0x8}, r5, 0x4, r0, 0x3)
open(&(0x7f0000000180)='./file0\x00', 0x0, 0x1)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000480)='./file0\x00', &(0x7f0000000840)=[&(0x7f0000000600)='(\xe0\xf5\x00', &(0x7f0000000680)='/dev/loop#\x00', &(0x7f0000000440)='system\x00', &(0x7f0000000740)='\x00', &(0x7f00000007c0)='\x00', &(0x7f0000000800)='.cpuset\x1c\x00'], &(0x7f00000002c0)=[&(0x7f0000000040)='selfposix_acl_access&[\x00', &(0x7f0000000080)='/dev/loop#\x00', &(0x7f0000000100)='\\}#(,\x00', 0x0])

22:08:12 executing program 0:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fchdir(r0)
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00'], 0x1)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="000ffff0802bc8369ce73cb6fda400006224541f3780351157b252dd000000009154262a80420801444dd89f6bfd1510066a2128e6c04f112558c8bdac2ae91c22768a299a879ca5ea45ea6189f14f84644589436f645a783aac81cf5bc374f0ac00ef2728cfd3b16ae8a4ec80ebea0a7e8c20a5986a2ab75b34dc27b332714d36cba3ac62ec7100c22eb5d6638b8e1d01468ad3328280706dfc31700ea3fe507bfd0f8169b2187e8d804978b5a6397a1f471a29369349f8dcda480be4b38fb6862fc91512ff53f74ccb2674157b224da1961bbaf18cfe6f399d07607fc5fa"], 0xdf)
sendfile(r3, r2, 0x0, 0xa198)
open(0x0, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)

22:08:12 executing program 3:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r1)
socket$inet(0x10, 0x2, 0x0)
r2 = socket(0x11, 0x800000003, 0x0)
bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080025944eeba71a4976e252922c000000002aba000000012e0b3836005404b0e0301a4ce875f2e0ff5f163ee340b7679500800000000000000101013c5891039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffff7f00000000ffefa6f909f7", @ANYRES32=r3, @ANYBLOB="0000000bf1ffffff000000ff7f0001"], 0x3}}, 0x0)
splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0)

22:08:12 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, 0x0)
ptrace$cont(0x20, r0, 0x0, 0x0)

[  722.966569][   T27] audit: type=1804 audit(1583791692.912:169): pid=23164 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/432/file0" dev="sda1" ino=17013 res=1
[  723.007501][T23167] netlink: 40067 bytes leftover after parsing attributes in process `syz-executor.5'.
22:08:13 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x2002, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={0x0, @in6={{0xa, 0x4e21, 0xe, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0xc1}, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0)
write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x77, 0x2, 0x8}, 0xb)
sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={<r1=>0x0}, 0x0)
ptrace$setopts(0x7abb990919170921, r1, 0x10001, 0x111)
ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio1\x00', 0x81f403e8956afdaf, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = getpgrp(0x0)
r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x404000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={<r4=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000a00)={0x9, 0x108, 0xfa00, {r4, 0x66, "c2658c", "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"}}, 0x110)
setpriority(0x0, r2, 0x100)
read(r0, &(0x7f0000000340)=""/175, 0xaf)
r5 = getpid()
ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000500)=0x1ff)
r6 = getpid()
ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000580)=0x8)
sched_setscheduler(r6, 0x0, &(0x7f0000000380))
ioprio_set$pid(0x0, r6, 0x9)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r7=>0xffffffffffffffff})
r8 = dup(r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$VIDIOC_TRY_EXT_CTRLS(r8, 0xc0205649, &(0x7f0000000700)={0x990000, 0x3, 0x3b, r3, 0x0, &(0x7f00000006c0)={0x990901, 0x1000, [], @value=0x5}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r9=>0xffffffffffffffff})
r10 = dup(r9)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f0000000b40))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r11=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0xffff}, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)='\x00', r11}, 0x30)
perf_event_open(&(0x7f0000000880)={0x5, 0x70, 0x0, 0x0, 0x8, 0xc8, 0x0, 0x107fff, 0x400, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={&(0x7f0000000240), 0x8}, 0x9120, 0x3, 0x6, 0x0, 0x0, 0x3f, 0x8}, r5, 0x4, r0, 0x3)
open(&(0x7f0000000180)='./file0\x00', 0x40, 0x0)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000480)='./file0\x00', &(0x7f0000000840)=[&(0x7f0000000600)='(\xe0\xf5\x00', &(0x7f0000000680)='/dev/loop#\x00', &(0x7f0000000440)='system\x00', &(0x7f0000000740)='\x00', &(0x7f00000007c0)='\x00', &(0x7f0000000800)='.cpuset\x1c\x00'], &(0x7f00000002c0)=[&(0x7f0000000040)='selfposix_acl_access&[\x00', &(0x7f0000000080)='/dev/loop#\x00', &(0x7f0000000100)='\\}#(,\x00', 0x0])

[  723.038050][   T27] audit: type=1804 audit(1583791692.952:170): pid=23164 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/432/file0" dev="sda1" ino=17013 res=1
22:08:13 executing program 5:
r0 = socket(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000680)=ANY=[@ANYBLOB="6e61740000640000000000000000d400000000000000000000000000010000000000000005000000900300000000000070010000180204007001000000000000f8020000f80200080000e9fff80700000002000005000000", @ANYPTR, @ANYBLOB="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"], 0x3)
syz_emit_ethernet(0x36, &(0x7f0000000340)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @dev}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8}}}}}}, 0x0)

22:08:13 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x2002, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={0x0, @in6={{0xa, 0x4e21, 0xe, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0xc1}, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0)
write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x77, 0x2, 0x8}, 0xb)
sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={<r1=>0x0}, 0x0)
ptrace$setopts(0x7abb990919170921, r1, 0x10001, 0x111)
ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio1\x00', 0x81f403e8956afdaf, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = getpgrp(0x0)
r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x404000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={<r4=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000a00)={0x9, 0x108, 0xfa00, {r4, 0x66, "c2658c", "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"}}, 0x110)
setpriority(0x0, r2, 0x100)
read(r0, &(0x7f0000000340)=""/175, 0xaf)
r5 = getpid()
ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000500)=0x1ff)
r6 = getpid()
ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000580)=0x8)
sched_setscheduler(r6, 0x0, &(0x7f0000000380))
ioprio_set$pid(0x0, r6, 0x9)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r7=>0xffffffffffffffff})
r8 = dup(r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$VIDIOC_TRY_EXT_CTRLS(r8, 0xc0205649, &(0x7f0000000700)={0x990000, 0x3, 0x3b, r3, 0x0, &(0x7f00000006c0)={0x990901, 0x1000, [], @value=0x5}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r9=>0xffffffffffffffff})
r10 = dup(r9)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f0000000b40))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r11=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0xffff}, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)='\x00', r11}, 0x30)
perf_event_open(&(0x7f0000000880)={0x5, 0x70, 0x0, 0x0, 0x8, 0xc8, 0x0, 0x107fff, 0x400, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={&(0x7f0000000240), 0x8}, 0x9120, 0x3, 0x6, 0x0, 0x0, 0x3f, 0x8}, r5, 0x4, r0, 0x3)
open(&(0x7f0000000180)='./file0\x00', 0x40, 0x0)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000480)='./file0\x00', &(0x7f0000000840)=[&(0x7f0000000600)='(\xe0\xf5\x00', &(0x7f0000000680)='/dev/loop#\x00', &(0x7f0000000440)='system\x00', &(0x7f0000000740)='\x00', &(0x7f00000007c0)='\x00', &(0x7f0000000800)='.cpuset\x1c\x00'], &(0x7f00000002c0)=[&(0x7f0000000040)='selfposix_acl_access&[\x00', &(0x7f0000000080)='/dev/loop#\x00', &(0x7f0000000100)='\\}#(,\x00', 0x0])

[  723.191324][T23183] x_tables: ip_tables: icmp match: only valid for protocol 1
[  723.200753][T23183] x_tables: ip_tables: icmp match: only valid for protocol 1
22:08:13 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x4}}, [@filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x20000003}}]}]}}]}, 0x74}}, 0x0)

22:08:13 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x2002, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={0x0, @in6={{0xa, 0x4e21, 0xe, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0xc1}, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0)
write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x77, 0x2, 0x8}, 0xb)
sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={<r1=>0x0}, 0x0)
ptrace$setopts(0x7abb990919170921, r1, 0x10001, 0x111)
ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio1\x00', 0x81f403e8956afdaf, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = getpgrp(0x0)
r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x404000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={<r4=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000a00)={0x9, 0x108, 0xfa00, {r4, 0x66, "c2658c", "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"}}, 0x110)
setpriority(0x0, r2, 0x100)
read(r0, &(0x7f0000000340)=""/175, 0xaf)
r5 = getpid()
ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000500)=0x1ff)
r6 = getpid()
ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000580)=0x8)
sched_setscheduler(r6, 0x0, &(0x7f0000000380))
ioprio_set$pid(0x0, r6, 0x9)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r7=>0xffffffffffffffff})
r8 = dup(r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$VIDIOC_TRY_EXT_CTRLS(r8, 0xc0205649, &(0x7f0000000700)={0x990000, 0x3, 0x3b, r3, 0x0, &(0x7f00000006c0)={0x990901, 0x1000, [], @value=0x5}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r9=>0xffffffffffffffff})
r10 = dup(r9)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f0000000b40))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r11=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0xffff}, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)='\x00', r11}, 0x30)
perf_event_open(&(0x7f0000000880)={0x5, 0x70, 0x0, 0x0, 0x8, 0xc8, 0x0, 0x107fff, 0x400, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={&(0x7f0000000240), 0x8}, 0x9120, 0x3, 0x6, 0x0, 0x0, 0x3f, 0x8}, r5, 0x4, r0, 0x3)
open(&(0x7f0000000180)='./file0\x00', 0x40, 0x0)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000480)='./file0\x00', &(0x7f0000000840)=[&(0x7f0000000600)='(\xe0\xf5\x00', &(0x7f0000000680)='/dev/loop#\x00', &(0x7f0000000440)='system\x00', &(0x7f0000000740)='\x00', &(0x7f00000007c0)='\x00', &(0x7f0000000800)='.cpuset\x1c\x00'], &(0x7f00000002c0)=[&(0x7f0000000040)='selfposix_acl_access&[\x00', &(0x7f0000000080)='/dev/loop#\x00', &(0x7f0000000100)='\\}#(,\x00', 0x0])

22:08:13 executing program 5:
r0 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4)
sendmmsg$sock(r0, &(0x7f0000003400)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x80000001, @dev}, 0x80, 0x0}}], 0x1, 0x0)

22:08:15 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="6653405cb4aed12f0000000000ae47a825d86800278dcff47d0100005ae64f8f36460234432479aed75d492b41fd983f79e65199615607672c59957ab6ad602ea04db364bf68e6faa53367f05f4ad61421349f2f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca4fafa924edfe92175aaa1c4ecc7aeeb72e0d050feace34b52d9e5f755563698c7e24ab45f0866f15da7f9a6cd1c9ba50f5dd289d81466ec4af1d8bf2e2b773b5ca2e623ed2e65877a87b785aa8aa2eb0f07c986bf605c9335f4a", 0xc8}], 0x4, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff2d}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r0, 0x0, 0x0)

22:08:15 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x2002, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={0x0, @in6={{0xa, 0x4e21, 0xe, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0xc1}, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0)
write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x77, 0x2, 0x8}, 0xb)
sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={<r1=>0x0}, 0x0)
ptrace$setopts(0x7abb990919170921, r1, 0x10001, 0x111)
ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio1\x00', 0x81f403e8956afdaf, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = getpgrp(0x0)
r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x404000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={<r4=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000a00)={0x9, 0x108, 0xfa00, {r4, 0x66, "c2658c", "df70238469aac9d4907464f29c1754324ed168c706fc37ddb86672e2a6601aefe58eaa4d39b08d20f612d04d207f2343d2ef0308ea553d0430ba29fbd1dc0922dbcaffe9325eca46f1b70208570afbe8af8047e6d323df5ba61e374a095723090a2b2ad594c24f8b10ab07ef5ebaad20e82cf58266a90ccd892895df0f01996af75fb0340198b6d6433b54ece705126a96a1ea1801ff0feee26d343f116a9dd5af4f7f5be661a21a9c4ba9458882e4661dcf854d38884f7716dcb67cbfdeb20deddc905882a8c5af02f857e06c1e280f2a8b6c0c608b17c8c57c6984faf6023ade63b1fb0dd0156b61e28445fb337a427f119e9486e690fd06c39968a937154f"}}, 0x110)
setpriority(0x0, r2, 0x100)
read(r0, &(0x7f0000000340)=""/175, 0xaf)
r5 = getpid()
ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000500)=0x1ff)
r6 = getpid()
ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000580)=0x8)
sched_setscheduler(r6, 0x0, &(0x7f0000000380))
ioprio_set$pid(0x0, r6, 0x9)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r7=>0xffffffffffffffff})
r8 = dup(r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$VIDIOC_TRY_EXT_CTRLS(r8, 0xc0205649, &(0x7f0000000700)={0x990000, 0x3, 0x3b, r3, 0x0, &(0x7f00000006c0)={0x990901, 0x1000, [], @value=0x5}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r9=>0xffffffffffffffff})
r10 = dup(r9)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f0000000b40))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r11=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0xffff}, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)='\x00', r11}, 0x30)
perf_event_open(&(0x7f0000000880)={0x5, 0x70, 0x0, 0x0, 0x8, 0xc8, 0x0, 0x107fff, 0x400, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={&(0x7f0000000240), 0x8}, 0x9120, 0x3, 0x6, 0x0, 0x0, 0x3f, 0x8}, r5, 0x4, r0, 0x3)
open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000480)='./file0\x00', &(0x7f0000000840)=[&(0x7f0000000600)='(\xe0\xf5\x00', &(0x7f0000000680)='/dev/loop#\x00', &(0x7f0000000440)='system\x00', &(0x7f0000000740)='\x00', &(0x7f00000007c0)='\x00', &(0x7f0000000800)='.cpuset\x1c\x00'], &(0x7f00000002c0)=[&(0x7f0000000040)='selfposix_acl_access&[\x00', &(0x7f0000000080)='/dev/loop#\x00', &(0x7f0000000100)='\\}#(,\x00', 0x0])

22:08:15 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x4}}, [@filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x74}}, 0x0)

22:08:15 executing program 0:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fchdir(r0)
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00'], 0x1)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="000ffff0802bc8369ce73cb6fda400006224541f3780351157b252dd000000009154262a80420801444dd89f6bfd1510066a2128e6c04f112558c8bdac2ae91c22768a299a879ca5ea45ea6189f14f84644589436f645a783aac81cf5bc374f0ac00ef2728cfd3b16ae8a4ec80ebea0a7e8c20a5986a2ab75b34dc27b332714d36cba3ac62ec7100c22eb5d6638b8e1d01468ad3328280706dfc31700ea3fe507bfd0f8169b2187e8d804978b5a6397a1f471a29369349f8dcda480be4b38fb6862fc91512ff53f74ccb2674157b224da1961bbaf18cfe6f399d07607fc5fa"], 0xdf)
sendfile(r3, r2, 0x0, 0xa198)
open(0x0, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)

22:08:15 executing program 3:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r1)
socket$inet(0x10, 0x2, 0x0)
r2 = socket(0x11, 0x800000003, 0x0)
bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080025944eeba71a4976e252922c000000002aba000000012e0b3836005404b0e0301a4ce875f2e0ff5f163ee340b7679500800000000000000101013c5891039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffff7f00000000ffefa6f909f7", @ANYRES32=r3, @ANYBLOB="0000000bf1ffffff000000ff7f0001"], 0x3}}, 0x0)
splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0)

22:08:16 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0)

[  726.111764][   T27] audit: type=1804 audit(1583791696.062:171): pid=23212 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/433/file0" dev="sda1" ino=17032 res=1
[  726.154148][   T27] audit: type=1804 audit(1583791696.092:172): pid=23212 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/433/file0" dev="sda1" ino=17032 res=1
22:08:16 executing program 5:

22:08:16 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x2002, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={0x0, @in6={{0xa, 0x4e21, 0xe, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0xc1}, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0)
write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x77, 0x2, 0x8}, 0xb)
sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={<r1=>0x0}, 0x0)
ptrace$setopts(0x7abb990919170921, r1, 0x10001, 0x111)
ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio1\x00', 0x81f403e8956afdaf, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = getpgrp(0x0)
r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x404000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={<r4=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000a00)={0x9, 0x108, 0xfa00, {r4, 0x66, "c2658c", "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"}}, 0x110)
setpriority(0x0, r2, 0x100)
read(r0, &(0x7f0000000340)=""/175, 0xaf)
r5 = getpid()
ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000500)=0x1ff)
r6 = getpid()
ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000580)=0x8)
sched_setscheduler(r6, 0x0, &(0x7f0000000380))
ioprio_set$pid(0x0, r6, 0x9)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r7=>0xffffffffffffffff})
r8 = dup(r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$VIDIOC_TRY_EXT_CTRLS(r8, 0xc0205649, &(0x7f0000000700)={0x990000, 0x3, 0x3b, r3, 0x0, &(0x7f00000006c0)={0x990901, 0x1000, [], @value=0x5}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r9=>0xffffffffffffffff})
r10 = dup(r9)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f0000000b40))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r11=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0xffff}, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)='\x00', r11}, 0x30)
perf_event_open(&(0x7f0000000880)={0x5, 0x70, 0x0, 0x0, 0x8, 0xc8, 0x0, 0x107fff, 0x400, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={&(0x7f0000000240), 0x8}, 0x9120, 0x3, 0x6, 0x0, 0x0, 0x3f, 0x8}, r5, 0x4, r0, 0x3)
open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000480)='./file0\x00', &(0x7f0000000840)=[&(0x7f0000000600)='(\xe0\xf5\x00', &(0x7f0000000680)='/dev/loop#\x00', &(0x7f0000000440)='system\x00', &(0x7f0000000740)='\x00', &(0x7f00000007c0)='\x00', &(0x7f0000000800)='.cpuset\x1c\x00'], &(0x7f00000002c0)=[&(0x7f0000000040)='selfposix_acl_access&[\x00', &(0x7f0000000080)='/dev/loop#\x00', &(0x7f0000000100)='\\}#(,\x00', 0x0])

22:08:16 executing program 5:

22:08:16 executing program 5:

22:08:16 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x2002, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={0x0, @in6={{0xa, 0x4e21, 0xe, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0xc1}, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0)
write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x77, 0x2, 0x8}, 0xb)
sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={<r1=>0x0}, 0x0)
ptrace$setopts(0x7abb990919170921, r1, 0x10001, 0x111)
ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio1\x00', 0x81f403e8956afdaf, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = getpgrp(0x0)
r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x404000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={<r4=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000a00)={0x9, 0x108, 0xfa00, {r4, 0x66, "c2658c", "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"}}, 0x110)
setpriority(0x0, r2, 0x100)
read(r0, &(0x7f0000000340)=""/175, 0xaf)
r5 = getpid()
ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000500)=0x1ff)
r6 = getpid()
ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000580)=0x8)
sched_setscheduler(r6, 0x0, &(0x7f0000000380))
ioprio_set$pid(0x0, r6, 0x9)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r7=>0xffffffffffffffff})
r8 = dup(r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$VIDIOC_TRY_EXT_CTRLS(r8, 0xc0205649, &(0x7f0000000700)={0x990000, 0x3, 0x3b, r3, 0x0, &(0x7f00000006c0)={0x990901, 0x1000, [], @value=0x5}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r9=>0xffffffffffffffff})
r10 = dup(r9)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f0000000b40))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r11=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0xffff}, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)='\x00', r11}, 0x30)
perf_event_open(&(0x7f0000000880)={0x5, 0x70, 0x0, 0x0, 0x8, 0xc8, 0x0, 0x107fff, 0x400, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={&(0x7f0000000240), 0x8}, 0x9120, 0x3, 0x6, 0x0, 0x0, 0x3f, 0x8}, r5, 0x4, r0, 0x3)
open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000480)='./file0\x00', &(0x7f0000000840)=[&(0x7f0000000600)='(\xe0\xf5\x00', &(0x7f0000000680)='/dev/loop#\x00', &(0x7f0000000440)='system\x00', &(0x7f0000000740)='\x00', &(0x7f00000007c0)='\x00', &(0x7f0000000800)='.cpuset\x1c\x00'], &(0x7f00000002c0)=[&(0x7f0000000040)='selfposix_acl_access&[\x00', &(0x7f0000000080)='/dev/loop#\x00', &(0x7f0000000100)='\\}#(,\x00', 0x0])

22:08:16 executing program 5:

22:08:19 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="6653405cb4aed12f0000000000ae47a825d86800278dcff47d0100005ae64f8f36460234432479aed75d492b41fd983f79e65199615607672c59957ab6ad602ea04db364bf68e6faa53367f05f4ad61421349f2f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca4fafa924edfe92175aaa1c4ecc7aeeb72e0d050feace34b52d9e5f755563698c7e24ab45f0866f15da7f9a6cd1c9ba50f5dd289d81466ec4af1d8bf2e2b773b5ca2e623ed2e65877a87b785aa8aa2eb0f07c986bf605c9335f4a", 0xc8}], 0x4, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff2d}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r0, 0x0, 0x0)

22:08:19 executing program 5:

22:08:19 executing program 0:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fchdir(r0)
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00'], 0x1)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="000ffff0802bc8369ce73cb6fda400006224541f3780351157b252dd000000009154262a80420801444dd89f6bfd1510066a2128e6c04f112558c8bdac2ae91c22768a299a879ca5ea45ea6189f14f84644589436f645a783aac81cf5bc374f0ac00ef2728cfd3b16ae8a4ec80ebea0a7e8c20a5986a2ab75b34dc27b332714d36cba3ac62ec7100c22eb5d6638b8e1d01468ad3328280706dfc31700ea3fe507bfd0f8169b2187e8d804978b5a6397a1f471a29369349f8dcda480be4b38fb6862fc91512ff53f74ccb2674157b224da1961bbaf18cfe6f399d07607fc5fa"], 0xdf)
sendfile(r3, r2, 0x0, 0xa198)
open(0x0, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)

22:08:19 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x2002, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={0x0, @in6={{0xa, 0x4e21, 0xe, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0xc1}, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0)
write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x77, 0x2, 0x8}, 0xb)
sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={<r1=>0x0}, 0x0)
ptrace$setopts(0x7abb990919170921, r1, 0x10001, 0x111)
ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio1\x00', 0x81f403e8956afdaf, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = getpgrp(0x0)
r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x404000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={<r4=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000a00)={0x9, 0x108, 0xfa00, {r4, 0x66, "c2658c", "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"}}, 0x110)
setpriority(0x0, r2, 0x100)
read(r0, &(0x7f0000000340)=""/175, 0xaf)
r5 = getpid()
ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000500)=0x1ff)
r6 = getpid()
ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000580)=0x8)
sched_setscheduler(r6, 0x0, &(0x7f0000000380))
ioprio_set$pid(0x0, r6, 0x9)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r7=>0xffffffffffffffff})
r8 = dup(r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$VIDIOC_TRY_EXT_CTRLS(r8, 0xc0205649, &(0x7f0000000700)={0x990000, 0x3, 0x3b, r3, 0x0, &(0x7f00000006c0)={0x990901, 0x1000, [], @value=0x5}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r9=>0xffffffffffffffff})
r10 = dup(r9)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f0000000b40))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r11=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0xffff}, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)='\x00', r11}, 0x30)
perf_event_open(&(0x7f0000000880)={0x5, 0x70, 0x0, 0x0, 0x8, 0xc8, 0x0, 0x107fff, 0x400, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={&(0x7f0000000240), 0x8}, 0x9120, 0x3, 0x6, 0x0, 0x0, 0x3f, 0x8}, r5, 0x4, r0, 0x3)
open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(0x0, &(0x7f0000000840)=[&(0x7f0000000600)='(\xe0\xf5\x00', &(0x7f0000000680)='/dev/loop#\x00', &(0x7f0000000440)='system\x00', &(0x7f0000000740)='\x00', &(0x7f00000007c0)='\x00', &(0x7f0000000800)='.cpuset\x1c\x00'], &(0x7f00000002c0)=[&(0x7f0000000040)='selfposix_acl_access&[\x00', &(0x7f0000000080)='/dev/loop#\x00', &(0x7f0000000100)='\\}#(,\x00', 0x0])

22:08:19 executing program 3:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r2)
socket$inet(0x10, 0x2, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080025944eeba71a4976e252922c000000002aba000000012e0b3836005404b0e0301a4ce875f2e0ff5f163ee340b7679500800000000000000101013c5891039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

22:08:19 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0)

22:08:19 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x2002, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={0x0, @in6={{0xa, 0x4e21, 0xe, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0xc1}, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0)
write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x77, 0x2, 0x8}, 0xb)
sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={<r1=>0x0}, 0x0)
ptrace$setopts(0x7abb990919170921, r1, 0x10001, 0x111)
ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio1\x00', 0x81f403e8956afdaf, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = getpgrp(0x0)
r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x404000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={<r4=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000a00)={0x9, 0x108, 0xfa00, {r4, 0x66, "c2658c", "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"}}, 0x110)
setpriority(0x0, r2, 0x100)
read(r0, &(0x7f0000000340)=""/175, 0xaf)
r5 = getpid()
ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000500)=0x1ff)
r6 = getpid()
ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000580)=0x8)
sched_setscheduler(r6, 0x0, &(0x7f0000000380))
ioprio_set$pid(0x0, r6, 0x9)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r7=>0xffffffffffffffff})
r8 = dup(r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$VIDIOC_TRY_EXT_CTRLS(r8, 0xc0205649, &(0x7f0000000700)={0x990000, 0x3, 0x3b, r3, 0x0, &(0x7f00000006c0)={0x990901, 0x1000, [], @value=0x5}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r9=>0xffffffffffffffff})
r10 = dup(r9)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f0000000b40))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r11=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0xffff}, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)='\x00', r11}, 0x30)
perf_event_open(&(0x7f0000000880)={0x5, 0x70, 0x0, 0x0, 0x8, 0xc8, 0x0, 0x107fff, 0x400, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={&(0x7f0000000240), 0x8}, 0x9120, 0x3, 0x6, 0x0, 0x0, 0x3f, 0x8}, r5, 0x4, r0, 0x3)
open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(0x0, &(0x7f0000000840)=[&(0x7f0000000600)='(\xe0\xf5\x00', &(0x7f0000000680)='/dev/loop#\x00', &(0x7f0000000440)='system\x00', &(0x7f0000000740)='\x00', &(0x7f00000007c0)='\x00', &(0x7f0000000800)='.cpuset\x1c\x00'], &(0x7f00000002c0)=[&(0x7f0000000040)='selfposix_acl_access&[\x00', &(0x7f0000000080)='/dev/loop#\x00', &(0x7f0000000100)='\\}#(,\x00', 0x0])

[  729.209360][   T27] audit: type=1804 audit(1583791699.162:173): pid=23454 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/434/file0" dev="sda1" ino=17046 res=1
22:08:19 executing program 5:

[  729.254794][   T27] audit: type=1804 audit(1583791699.162:174): pid=23454 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/434/file0" dev="sda1" ino=17046 res=1
22:08:19 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x2002, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={0x0, @in6={{0xa, 0x4e21, 0xe, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0xc1}, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0)
write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x77, 0x2, 0x8}, 0xb)
sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={<r1=>0x0}, 0x0)
ptrace$setopts(0x7abb990919170921, r1, 0x10001, 0x111)
ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio1\x00', 0x81f403e8956afdaf, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = getpgrp(0x0)
r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x404000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={<r4=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000a00)={0x9, 0x108, 0xfa00, {r4, 0x66, "c2658c", "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"}}, 0x110)
setpriority(0x0, r2, 0x100)
read(r0, &(0x7f0000000340)=""/175, 0xaf)
r5 = getpid()
ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000500)=0x1ff)
r6 = getpid()
ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000580)=0x8)
sched_setscheduler(r6, 0x0, &(0x7f0000000380))
ioprio_set$pid(0x0, r6, 0x9)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r7=>0xffffffffffffffff})
r8 = dup(r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$VIDIOC_TRY_EXT_CTRLS(r8, 0xc0205649, &(0x7f0000000700)={0x990000, 0x3, 0x3b, r3, 0x0, &(0x7f00000006c0)={0x990901, 0x1000, [], @value=0x5}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r9=>0xffffffffffffffff})
r10 = dup(r9)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f0000000b40))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r11=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0xffff}, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)='\x00', r11}, 0x30)
perf_event_open(&(0x7f0000000880)={0x5, 0x70, 0x0, 0x0, 0x8, 0xc8, 0x0, 0x107fff, 0x400, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={&(0x7f0000000240), 0x8}, 0x9120, 0x3, 0x6, 0x0, 0x0, 0x3f, 0x8}, r5, 0x4, r0, 0x3)
open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(0x0, &(0x7f0000000840)=[&(0x7f0000000600)='(\xe0\xf5\x00', &(0x7f0000000680)='/dev/loop#\x00', &(0x7f0000000440)='system\x00', &(0x7f0000000740)='\x00', &(0x7f00000007c0)='\x00', &(0x7f0000000800)='.cpuset\x1c\x00'], &(0x7f00000002c0)=[&(0x7f0000000040)='selfposix_acl_access&[\x00', &(0x7f0000000080)='/dev/loop#\x00', &(0x7f0000000100)='\\}#(,\x00', 0x0])

22:08:19 executing program 5:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCGKEYCODE(r0, 0x80104592, &(0x7f00000000c0)=""/166)

22:08:19 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x2002, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={0x0, @in6={{0xa, 0x4e21, 0xe, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0xc1}, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0)
write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x77, 0x2, 0x8}, 0xb)
sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={<r1=>0x0}, 0x0)
ptrace$setopts(0x7abb990919170921, r1, 0x10001, 0x111)
ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio1\x00', 0x81f403e8956afdaf, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = getpgrp(0x0)
r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x404000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={<r4=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000a00)={0x9, 0x108, 0xfa00, {r4, 0x66, "c2658c", "df70238469aac9d4907464f29c1754324ed168c706fc37ddb86672e2a6601aefe58eaa4d39b08d20f612d04d207f2343d2ef0308ea553d0430ba29fbd1dc0922dbcaffe9325eca46f1b70208570afbe8af8047e6d323df5ba61e374a095723090a2b2ad594c24f8b10ab07ef5ebaad20e82cf58266a90ccd892895df0f01996af75fb0340198b6d6433b54ece705126a96a1ea1801ff0feee26d343f116a9dd5af4f7f5be661a21a9c4ba9458882e4661dcf854d38884f7716dcb67cbfdeb20deddc905882a8c5af02f857e06c1e280f2a8b6c0c608b17c8c57c6984faf6023ade63b1fb0dd0156b61e28445fb337a427f119e9486e690fd06c39968a937154f"}}, 0x110)
setpriority(0x0, r2, 0x100)
read(r0, &(0x7f0000000340)=""/175, 0xaf)
r5 = getpid()
ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000500)=0x1ff)
r6 = getpid()
ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000580)=0x8)
sched_setscheduler(r6, 0x0, &(0x7f0000000380))
ioprio_set$pid(0x0, r6, 0x9)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r7=>0xffffffffffffffff})
r8 = dup(r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$VIDIOC_TRY_EXT_CTRLS(r8, 0xc0205649, &(0x7f0000000700)={0x990000, 0x3, 0x3b, r3, 0x0, &(0x7f00000006c0)={0x990901, 0x1000, [], @value=0x5}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r9=>0xffffffffffffffff})
r10 = dup(r9)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f0000000b40))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r11=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0xffff}, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)='\x00', r11}, 0x30)
perf_event_open(&(0x7f0000000880)={0x5, 0x70, 0x0, 0x0, 0x8, 0xc8, 0x0, 0x107fff, 0x400, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={&(0x7f0000000240), 0x8}, 0x9120, 0x3, 0x6, 0x0, 0x0, 0x3f, 0x8}, r5, 0x4, r0, 0x3)
open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000002c0)=[&(0x7f0000000040)='selfposix_acl_access&[\x00', &(0x7f0000000080)='/dev/loop#\x00', &(0x7f0000000100)='\\}#(,\x00', 0x0])

22:08:19 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x2002, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={0x0, @in6={{0xa, 0x4e21, 0xe, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0xc1}, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0)
write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x77, 0x2, 0x8}, 0xb)
sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={<r1=>0x0}, 0x0)
ptrace$setopts(0x7abb990919170921, r1, 0x10001, 0x111)
ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio1\x00', 0x81f403e8956afdaf, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = getpgrp(0x0)
r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x404000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={<r4=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000a00)={0x9, 0x108, 0xfa00, {r4, 0x66, "c2658c", "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"}}, 0x110)
setpriority(0x0, r2, 0x100)
read(r0, &(0x7f0000000340)=""/175, 0xaf)
r5 = getpid()
ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000500)=0x1ff)
r6 = getpid()
ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000580)=0x8)
sched_setscheduler(r6, 0x0, &(0x7f0000000380))
ioprio_set$pid(0x0, r6, 0x9)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r7=>0xffffffffffffffff})
r8 = dup(r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$VIDIOC_TRY_EXT_CTRLS(r8, 0xc0205649, &(0x7f0000000700)={0x990000, 0x3, 0x3b, r3, 0x0, &(0x7f00000006c0)={0x990901, 0x1000, [], @value=0x5}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r9=>0xffffffffffffffff})
r10 = dup(r9)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f0000000b40))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r11=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0xffff}, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)='\x00', r11}, 0x30)
perf_event_open(&(0x7f0000000880)={0x5, 0x70, 0x0, 0x0, 0x8, 0xc8, 0x0, 0x107fff, 0x400, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={&(0x7f0000000240), 0x8}, 0x9120, 0x3, 0x6, 0x0, 0x0, 0x3f, 0x8}, r5, 0x4, r0, 0x3)
open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000002c0)=[&(0x7f0000000040)='selfposix_acl_access&[\x00', &(0x7f0000000080)='/dev/loop#\x00', &(0x7f0000000100)='\\}#(,\x00', 0x0])

22:08:22 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x2002, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={0x0, @in6={{0xa, 0x4e21, 0xe, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0xc1}, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0)
write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x77, 0x2, 0x8}, 0xb)
sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={<r1=>0x0}, 0x0)
ptrace$setopts(0x7abb990919170921, r1, 0x10001, 0x111)
ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio1\x00', 0x81f403e8956afdaf, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = getpgrp(0x0)
r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x404000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={<r4=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000a00)={0x9, 0x108, 0xfa00, {r4, 0x66, "c2658c", "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"}}, 0x110)
setpriority(0x0, r2, 0x100)
read(r0, &(0x7f0000000340)=""/175, 0xaf)
r5 = getpid()
ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000500)=0x1ff)
r6 = getpid()
ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000580)=0x8)
sched_setscheduler(r6, 0x0, &(0x7f0000000380))
ioprio_set$pid(0x0, r6, 0x9)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r7=>0xffffffffffffffff})
r8 = dup(r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$VIDIOC_TRY_EXT_CTRLS(r8, 0xc0205649, &(0x7f0000000700)={0x990000, 0x3, 0x3b, r3, 0x0, &(0x7f00000006c0)={0x990901, 0x1000, [], @value=0x5}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r9=>0xffffffffffffffff})
r10 = dup(r9)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f0000000b40))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r11=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0xffff}, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)='\x00', r11}, 0x30)
perf_event_open(&(0x7f0000000880)={0x5, 0x70, 0x0, 0x0, 0x8, 0xc8, 0x0, 0x107fff, 0x400, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={&(0x7f0000000240), 0x8}, 0x9120, 0x3, 0x6, 0x0, 0x0, 0x3f, 0x8}, r5, 0x4, r0, 0x3)
open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000002c0)=[&(0x7f0000000040)='selfposix_acl_access&[\x00', &(0x7f0000000080)='/dev/loop#\x00', &(0x7f0000000100)='\\}#(,\x00', 0x0])

22:08:22 executing program 3:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r2)
socket$inet(0x10, 0x2, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080025944eeba71a4976e252922c000000002aba000000012e0b3836005404b0e0301a4ce875f2e0ff5f163ee340b7679500800000000000000101013c5891039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

22:08:22 executing program 0:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
sendfile(r2, r1, 0x0, 0xa198)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="000ffff0802bc8369ce73cb6fda400006224541f3780351157b252dd000000009154262a80420801444dd89f6bfd1510066a2128e6c04f112558c8bdac2ae91c22768a299a879ca5ea45ea6189f14f84644589436f645a783aac81cf5bc374f0ac00ef2728cfd3b16ae8a4ec80ebea0a7e8c20a5986a2ab75b34dc27b332714d36cba3ac62ec7100c22eb5d6638b8e1d01468ad3328280706dfc31700ea3fe507bfd0f8169b2187e8d804978b5a6397a1f471a29369349f8dcda480be4b38fb6862fc91512ff53f74ccb2674157b224da1961bbaf18cfe6f399d07607fc5fa"], 0xdf)
sendfile(r4, r3, 0x0, 0xa198)
open(0x0, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)

22:08:22 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="6653405cb4aed12f0000000000ae47a825d86800278dcff47d0100005ae64f8f36460234432479aed75d492b41fd983f79e65199615607672c59957ab6ad602ea04db364bf68e6faa53367f05f4ad61421349f2f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca4fafa924edfe92175aaa1c4ecc7aeeb72e0d050feace34b52d9e5f755563698c7e24ab45f0866f15da7f9a6cd1c9ba50f5dd289d81466ec4af1d8bf2e2b773b5ca2e623ed2e65877a87b785aa8aa2eb0f07c986bf605c9335f4a", 0xc8}], 0x4, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff2d}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, 0x0)
ptrace$cont(0x20, r0, 0x0, 0x0)

22:08:22 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)

[  732.283125][   T27] audit: type=1804 audit(1583791702.232:175): pid=23504 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/435/file0" dev="sda1" ino=17060 res=1
22:08:22 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0)

[  732.339231][   T27] audit: type=1804 audit(1583791702.262:176): pid=23504 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/435/file0" dev="sda1" ino=17060 res=1
22:08:22 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x2002, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={0x0, @in6={{0xa, 0x4e21, 0xe, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0xc1}, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0)
write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x77, 0x2, 0x8}, 0xb)
sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={<r1=>0x0}, 0x0)
ptrace$setopts(0x7abb990919170921, r1, 0x10001, 0x111)
ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio1\x00', 0x81f403e8956afdaf, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = getpgrp(0x0)
r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x404000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={<r4=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000a00)={0x9, 0x108, 0xfa00, {r4, 0x66, "c2658c", "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"}}, 0x110)
setpriority(0x0, r2, 0x100)
read(r0, &(0x7f0000000340)=""/175, 0xaf)
r5 = getpid()
ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000500)=0x1ff)
r6 = getpid()
ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000580)=0x8)
sched_setscheduler(r6, 0x0, &(0x7f0000000380))
ioprio_set$pid(0x0, r6, 0x9)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r7=>0xffffffffffffffff})
r8 = dup(r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$VIDIOC_TRY_EXT_CTRLS(r8, 0xc0205649, &(0x7f0000000700)={0x990000, 0x3, 0x3b, r3, 0x0, &(0x7f00000006c0)={0x990901, 0x1000, [], @value=0x5}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r9=>0xffffffffffffffff})
r10 = dup(r9)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f0000000b40))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r11=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0xffff}, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)='\x00', r11}, 0x30)
perf_event_open(&(0x7f0000000880)={0x5, 0x70, 0x0, 0x0, 0x8, 0xc8, 0x0, 0x107fff, 0x400, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={&(0x7f0000000240), 0x8}, 0x9120, 0x3, 0x6, 0x0, 0x0, 0x3f, 0x8}, r5, 0x4, r0, 0x3)
open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000480)='./file0\x00', &(0x7f0000000840)=[&(0x7f0000000600)='(\xe0\xf5\x00', &(0x7f0000000680)='/dev/loop#\x00', &(0x7f0000000440)='system\x00', &(0x7f0000000740)='\x00', &(0x7f00000007c0)='\x00'], &(0x7f00000002c0)=[&(0x7f0000000040)='selfposix_acl_access&[\x00', &(0x7f0000000080)='/dev/loop#\x00', &(0x7f0000000100)='\\}#(,\x00', 0x0])

22:08:22 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x2002, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={0x0, @in6={{0xa, 0x4e21, 0xe, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0xc1}, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0)
write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x77, 0x2, 0x8}, 0xb)
sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={<r1=>0x0}, 0x0)
ptrace$setopts(0x7abb990919170921, r1, 0x10001, 0x111)
ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio1\x00', 0x81f403e8956afdaf, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = getpgrp(0x0)
r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x404000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={<r4=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000a00)={0x9, 0x108, 0xfa00, {r4, 0x66, "c2658c", "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"}}, 0x110)
setpriority(0x0, r2, 0x100)
read(r0, &(0x7f0000000340)=""/175, 0xaf)
r5 = getpid()
ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000500)=0x1ff)
r6 = getpid()
ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000580)=0x8)
sched_setscheduler(r6, 0x0, &(0x7f0000000380))
ioprio_set$pid(0x0, r6, 0x9)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r7=>0xffffffffffffffff})
r8 = dup(r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$VIDIOC_TRY_EXT_CTRLS(r8, 0xc0205649, &(0x7f0000000700)={0x990000, 0x3, 0x3b, r3, 0x0, &(0x7f00000006c0)={0x990901, 0x1000, [], @value=0x5}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r9=>0xffffffffffffffff})
r10 = dup(r9)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f0000000b40))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r11=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0xffff}, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)='\x00', r11}, 0x30)
perf_event_open(&(0x7f0000000880)={0x5, 0x70, 0x0, 0x0, 0x8, 0xc8, 0x0, 0x107fff, 0x400, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={&(0x7f0000000240), 0x8}, 0x9120, 0x3, 0x6, 0x0, 0x0, 0x3f, 0x8}, r5, 0x4, r0, 0x3)
open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000480)='./file0\x00', &(0x7f0000000840)=[&(0x7f0000000600)='(\xe0\xf5\x00', &(0x7f0000000680)='/dev/loop#\x00', &(0x7f0000000440)='system\x00', &(0x7f0000000740)='\x00', &(0x7f00000007c0)='\x00'], &(0x7f00000002c0)=[&(0x7f0000000040)='selfposix_acl_access&[\x00', &(0x7f0000000080)='/dev/loop#\x00', &(0x7f0000000100)='\\}#(,\x00', 0x0])

22:08:22 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x2002, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={0x0, @in6={{0xa, 0x4e21, 0xe, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0xc1}, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0)
write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x77, 0x2, 0x8}, 0xb)
sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={<r1=>0x0}, 0x0)
ptrace$setopts(0x7abb990919170921, r1, 0x10001, 0x111)
ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio1\x00', 0x81f403e8956afdaf, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = getpgrp(0x0)
r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x404000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={<r4=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000a00)={0x9, 0x108, 0xfa00, {r4, 0x66, "c2658c", "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"}}, 0x110)
setpriority(0x0, r2, 0x100)
read(r0, &(0x7f0000000340)=""/175, 0xaf)
r5 = getpid()
ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000500)=0x1ff)
r6 = getpid()
ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000580)=0x8)
sched_setscheduler(r6, 0x0, &(0x7f0000000380))
ioprio_set$pid(0x0, r6, 0x9)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r7=>0xffffffffffffffff})
r8 = dup(r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$VIDIOC_TRY_EXT_CTRLS(r8, 0xc0205649, &(0x7f0000000700)={0x990000, 0x3, 0x3b, r3, 0x0, &(0x7f00000006c0)={0x990901, 0x1000, [], @value=0x5}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r9=>0xffffffffffffffff})
r10 = dup(r9)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f0000000b40))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r11=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0xffff}, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)='\x00', r11}, 0x30)
perf_event_open(&(0x7f0000000880)={0x5, 0x70, 0x0, 0x0, 0x8, 0xc8, 0x0, 0x107fff, 0x400, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={&(0x7f0000000240), 0x8}, 0x9120, 0x3, 0x6, 0x0, 0x0, 0x3f, 0x8}, r5, 0x4, r0, 0x3)
open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000480)='./file0\x00', &(0x7f0000000840)=[&(0x7f0000000600)='(\xe0\xf5\x00', &(0x7f0000000680)='/dev/loop#\x00', &(0x7f0000000440)='system\x00', &(0x7f0000000740)='\x00', &(0x7f00000007c0)='\x00'], &(0x7f00000002c0)=[&(0x7f0000000040)='selfposix_acl_access&[\x00', &(0x7f0000000080)='/dev/loop#\x00', &(0x7f0000000100)='\\}#(,\x00', 0x0])

22:08:22 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x2002, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={0x0, @in6={{0xa, 0x4e21, 0xe, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0xc1}, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0)
write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x77, 0x2, 0x8}, 0xb)
sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={<r1=>0x0}, 0x0)
ptrace$setopts(0x7abb990919170921, r1, 0x10001, 0x111)
ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio1\x00', 0x81f403e8956afdaf, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = getpgrp(0x0)
r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x404000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={<r4=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000a00)={0x9, 0x108, 0xfa00, {r4, 0x66, "c2658c", "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"}}, 0x110)
setpriority(0x0, r2, 0x100)
read(r0, &(0x7f0000000340)=""/175, 0xaf)
r5 = getpid()
ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000500)=0x1ff)
r6 = getpid()
ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000580)=0x8)
sched_setscheduler(r6, 0x0, &(0x7f0000000380))
ioprio_set$pid(0x0, r6, 0x9)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r7=>0xffffffffffffffff})
r8 = dup(r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$VIDIOC_TRY_EXT_CTRLS(r8, 0xc0205649, &(0x7f0000000700)={0x990000, 0x3, 0x3b, r3, 0x0, &(0x7f00000006c0)={0x990901, 0x1000, [], @value=0x5}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r9=>0xffffffffffffffff})
r10 = dup(r9)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f0000000b40))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r11=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0xffff}, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)='\x00', r11}, 0x30)
perf_event_open(&(0x7f0000000880)={0x5, 0x70, 0x0, 0x0, 0x8, 0xc8, 0x0, 0x107fff, 0x400, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={&(0x7f0000000240), 0x8}, 0x9120, 0x3, 0x6, 0x0, 0x0, 0x3f, 0x8}, r5, 0x4, r0, 0x3)
open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000480)='./file0\x00', &(0x7f0000000840)=[&(0x7f0000000600)='(\xe0\xf5\x00', &(0x7f0000000680)='/dev/loop#\x00', &(0x7f0000000440)='system\x00', &(0x7f0000000740)='\x00', &(0x7f00000007c0)='\x00', 0x0], &(0x7f00000002c0)=[&(0x7f0000000040)='selfposix_acl_access&[\x00', &(0x7f0000000080)='/dev/loop#\x00', &(0x7f0000000100)='\\}#(,\x00', 0x0])

22:08:22 executing program 0:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
sendfile(r2, r1, 0x0, 0xa198)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="000ffff0802bc8369ce73cb6fda400006224541f3780351157b252dd000000009154262a80420801444dd89f6bfd1510066a2128e6c04f112558c8bdac2ae91c22768a299a879ca5ea45ea6189f14f84644589436f645a783aac81cf5bc374f0ac00ef2728cfd3b16ae8a4ec80ebea0a7e8c20a5986a2ab75b34dc27b332714d36cba3ac62ec7100c22eb5d6638b8e1d01468ad3328280706dfc31700ea3fe507bfd0f8169b2187e8d804978b5a6397a1f471a29369349f8dcda480be4b38fb6862fc91512ff53f74ccb2674157b224da1961bbaf18cfe6f399d07607fc5fa"], 0xdf)
sendfile(r4, r3, 0x0, 0xa198)
open(0x0, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)

[  732.831636][   T27] audit: type=1804 audit(1583791702.782:177): pid=23546 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/436/file0" dev="sda1" ino=17058 res=1
[  732.862955][   T27] audit: type=1804 audit(1583791702.812:178): pid=23546 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/436/file0" dev="sda1" ino=17058 res=1
22:08:22 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x2002, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={0x0, @in6={{0xa, 0x4e21, 0xe, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0xc1}, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0)
write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x77, 0x2, 0x8}, 0xb)
sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={<r1=>0x0}, 0x0)
ptrace$setopts(0x7abb990919170921, r1, 0x10001, 0x111)
ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio1\x00', 0x81f403e8956afdaf, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = getpgrp(0x0)
r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x404000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={<r4=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000a00)={0x9, 0x108, 0xfa00, {r4, 0x66, "c2658c", "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"}}, 0x110)
setpriority(0x0, r2, 0x100)
read(r0, &(0x7f0000000340)=""/175, 0xaf)
r5 = getpid()
ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000500)=0x1ff)
r6 = getpid()
ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000580)=0x8)
sched_setscheduler(r6, 0x0, &(0x7f0000000380))
ioprio_set$pid(0x0, r6, 0x9)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r7=>0xffffffffffffffff})
r8 = dup(r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$VIDIOC_TRY_EXT_CTRLS(r8, 0xc0205649, &(0x7f0000000700)={0x990000, 0x3, 0x3b, r3, 0x0, &(0x7f00000006c0)={0x990901, 0x1000, [], @value=0x5}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r9=>0xffffffffffffffff})
r10 = dup(r9)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f0000000b40))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r11=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0xffff}, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)='\x00', r11}, 0x30)
perf_event_open(&(0x7f0000000880)={0x5, 0x70, 0x0, 0x0, 0x8, 0xc8, 0x0, 0x107fff, 0x400, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={&(0x7f0000000240), 0x8}, 0x9120, 0x3, 0x6, 0x0, 0x0, 0x3f, 0x8}, r5, 0x4, r0, 0x3)
open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000480)='./file0\x00', &(0x7f0000000840)=[&(0x7f0000000600)='(\xe0\xf5\x00', &(0x7f0000000680)='/dev/loop#\x00', &(0x7f0000000440)='system\x00', &(0x7f0000000740)='\x00', &(0x7f00000007c0)='\x00', 0x0], &(0x7f00000002c0)=[&(0x7f0000000040)='selfposix_acl_access&[\x00', &(0x7f0000000080)='/dev/loop#\x00', &(0x7f0000000100)='\\}#(,\x00', 0x0])

22:08:22 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x2002, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={0x0, @in6={{0xa, 0x4e21, 0xe, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0xc1}, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0)
write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x77, 0x2, 0x8}, 0xb)
sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={<r1=>0x0}, 0x0)
ptrace$setopts(0x7abb990919170921, r1, 0x10001, 0x111)
ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio1\x00', 0x81f403e8956afdaf, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = getpgrp(0x0)
r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x404000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={<r4=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000a00)={0x9, 0x108, 0xfa00, {r4, 0x66, "c2658c", "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"}}, 0x110)
setpriority(0x0, r2, 0x100)
read(r0, &(0x7f0000000340)=""/175, 0xaf)
r5 = getpid()
ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000500)=0x1ff)
r6 = getpid()
ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000580)=0x8)
sched_setscheduler(r6, 0x0, &(0x7f0000000380))
ioprio_set$pid(0x0, r6, 0x9)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r7=>0xffffffffffffffff})
r8 = dup(r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$VIDIOC_TRY_EXT_CTRLS(r8, 0xc0205649, &(0x7f0000000700)={0x990000, 0x3, 0x3b, r3, 0x0, &(0x7f00000006c0)={0x990901, 0x1000, [], @value=0x5}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r9=>0xffffffffffffffff})
r10 = dup(r9)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f0000000b40))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r11=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0xffff}, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)='\x00', r11}, 0x30)
perf_event_open(&(0x7f0000000880)={0x5, 0x70, 0x0, 0x0, 0x8, 0xc8, 0x0, 0x107fff, 0x400, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={&(0x7f0000000240), 0x8}, 0x9120, 0x3, 0x6, 0x0, 0x0, 0x3f, 0x8}, r5, 0x4, r0, 0x3)
open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000480)='./file0\x00', &(0x7f0000000840)=[&(0x7f0000000600)='(\xe0\xf5\x00', &(0x7f0000000680)='/dev/loop#\x00', &(0x7f0000000440)='system\x00', &(0x7f0000000740)='\x00', &(0x7f00000007c0)='\x00', 0x0], &(0x7f00000002c0)=[&(0x7f0000000040)='selfposix_acl_access&[\x00', &(0x7f0000000080)='/dev/loop#\x00', &(0x7f0000000100)='\\}#(,\x00', 0x0])

22:08:25 executing program 3:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r2)
socket$inet(0x10, 0x2, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080025944eeba71a4976e252922c000000002aba000000012e0b3836005404b0e0301a4ce875f2e0ff5f163ee340b7679500800000000000000101013c5891039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

22:08:25 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0x4138ae84, 0x0)

22:08:25 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="6653405cb4aed12f0000000000ae47a825d86800278dcff47d0100005ae64f8f36460234432479aed75d492b41fd983f79e65199615607672c59957ab6ad602ea04db364bf68e6faa53367f05f4ad61421349f2f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca4fafa924edfe92175aaa1c4ecc7aeeb72e0d050feace34b52d9e5f755563698c7e24ab45f0866f15da7f9a6cd1c9ba50f5dd289d81466ec4af1d8bf2e2b773b5ca2e623ed2e65877a87b785aa8aa2eb0f07c986bf605c9335f4a", 0xc8}], 0x4, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff2d}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, 0x0)
ptrace$cont(0x20, r0, 0x0, 0x0)

22:08:25 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x2002, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={0x0, @in6={{0xa, 0x4e21, 0xe, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0xc1}, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0)
write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x77, 0x2, 0x8}, 0xb)
sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={<r1=>0x0}, 0x0)
ptrace$setopts(0x7abb990919170921, r1, 0x10001, 0x111)
ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio1\x00', 0x81f403e8956afdaf, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = getpgrp(0x0)
r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x404000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={<r4=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000a00)={0x9, 0x108, 0xfa00, {r4, 0x66, "c2658c", "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"}}, 0x110)
setpriority(0x0, r2, 0x100)
read(r0, &(0x7f0000000340)=""/175, 0xaf)
r5 = getpid()
ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000500)=0x1ff)
r6 = getpid()
ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000580)=0x8)
sched_setscheduler(r6, 0x0, &(0x7f0000000380))
ioprio_set$pid(0x0, r6, 0x9)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r7=>0xffffffffffffffff})
r8 = dup(r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$VIDIOC_TRY_EXT_CTRLS(r8, 0xc0205649, &(0x7f0000000700)={0x990000, 0x3, 0x3b, r3, 0x0, &(0x7f00000006c0)={0x990901, 0x1000, [], @value=0x5}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r9=>0xffffffffffffffff})
r10 = dup(r9)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f0000000b40))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r11=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0xffff}, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)='\x00', r11}, 0x30)
perf_event_open(&(0x7f0000000880)={0x5, 0x70, 0x0, 0x0, 0x8, 0xc8, 0x0, 0x107fff, 0x400, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={&(0x7f0000000240), 0x8}, 0x9120, 0x3, 0x6, 0x0, 0x0, 0x3f, 0x8}, r5, 0x4, r0, 0x3)
open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000480)='./file0\x00', &(0x7f0000000840)=[&(0x7f0000000600)='(\xe0\xf5\x00', &(0x7f0000000680)='/dev/loop#\x00', &(0x7f0000000440)='system\x00', &(0x7f0000000740)='\x00', &(0x7f0000000800)='.cpuset\x1c\x00'], &(0x7f00000002c0)=[&(0x7f0000000040)='selfposix_acl_access&[\x00', &(0x7f0000000080)='/dev/loop#\x00', &(0x7f0000000100)='\\}#(,\x00', 0x0])

22:08:25 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, 0x0, 0x0, 0x0)

22:08:25 executing program 0:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
sendfile(r2, r1, 0x0, 0xa198)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="000ffff0802bc8369ce73cb6fda400006224541f3780351157b252dd000000009154262a80420801444dd89f6bfd1510066a2128e6c04f112558c8bdac2ae91c22768a299a879ca5ea45ea6189f14f84644589436f645a783aac81cf5bc374f0ac00ef2728cfd3b16ae8a4ec80ebea0a7e8c20a5986a2ab75b34dc27b332714d36cba3ac62ec7100c22eb5d6638b8e1d01468ad3328280706dfc31700ea3fe507bfd0f8169b2187e8d804978b5a6397a1f471a29369349f8dcda480be4b38fb6862fc91512ff53f74ccb2674157b224da1961bbaf18cfe6f399d07607fc5fa"], 0xdf)
sendfile(r4, r3, 0x0, 0xa198)
open(0x0, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)

22:08:25 executing program 5:
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0xffdf}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r3, r2, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffa7)

22:08:25 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x2002, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={0x0, @in6={{0xa, 0x4e21, 0xe, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0xc1}, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0)
write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x77, 0x2, 0x8}, 0xb)
sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={<r1=>0x0}, 0x0)
ptrace$setopts(0x7abb990919170921, r1, 0x10001, 0x111)
ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio1\x00', 0x81f403e8956afdaf, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = getpgrp(0x0)
r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x404000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={<r4=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000a00)={0x9, 0x108, 0xfa00, {r4, 0x66, "c2658c", "df70238469aac9d4907464f29c1754324ed168c706fc37ddb86672e2a6601aefe58eaa4d39b08d20f612d04d207f2343d2ef0308ea553d0430ba29fbd1dc0922dbcaffe9325eca46f1b70208570afbe8af8047e6d323df5ba61e374a095723090a2b2ad594c24f8b10ab07ef5ebaad20e82cf58266a90ccd892895df0f01996af75fb0340198b6d6433b54ece705126a96a1ea1801ff0feee26d343f116a9dd5af4f7f5be661a21a9c4ba9458882e4661dcf854d38884f7716dcb67cbfdeb20deddc905882a8c5af02f857e06c1e280f2a8b6c0c608b17c8c57c6984faf6023ade63b1fb0dd0156b61e28445fb337a427f119e9486e690fd06c39968a937154f"}}, 0x110)
setpriority(0x0, r2, 0x100)
read(r0, &(0x7f0000000340)=""/175, 0xaf)
r5 = getpid()
ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000500)=0x1ff)
r6 = getpid()
ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000580)=0x8)
sched_setscheduler(r6, 0x0, &(0x7f0000000380))
ioprio_set$pid(0x0, r6, 0x9)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r7=>0xffffffffffffffff})
r8 = dup(r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$VIDIOC_TRY_EXT_CTRLS(r8, 0xc0205649, &(0x7f0000000700)={0x990000, 0x3, 0x3b, r3, 0x0, &(0x7f00000006c0)={0x990901, 0x1000, [], @value=0x5}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r9=>0xffffffffffffffff})
r10 = dup(r9)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f0000000b40))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r11=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0xffff}, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)='\x00', r11}, 0x30)
perf_event_open(&(0x7f0000000880)={0x5, 0x70, 0x0, 0x0, 0x8, 0xc8, 0x0, 0x107fff, 0x400, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={&(0x7f0000000240), 0x8}, 0x9120, 0x3, 0x6, 0x0, 0x0, 0x3f, 0x8}, r5, 0x4, r0, 0x3)
open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000480)='./file0\x00', &(0x7f0000000840)=[&(0x7f0000000600)='(\xe0\xf5\x00', &(0x7f0000000680)='/dev/loop#\x00', &(0x7f0000000440)='system\x00', &(0x7f0000000740)='\x00', &(0x7f0000000800)='.cpuset\x1c\x00'], &(0x7f00000002c0)=[&(0x7f0000000040)='selfposix_acl_access&[\x00', &(0x7f0000000080)='/dev/loop#\x00', &(0x7f0000000100)='\\}#(,\x00', 0x0])

[  735.516239][   T27] audit: type=1804 audit(1583791705.462:179): pid=23594 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/437/file0" dev="sda1" ino=17078 res=1
[  735.560165][   T27] audit: type=1804 audit(1583791705.462:180): pid=23594 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/437/file0" dev="sda1" ino=17078 res=1
[  735.636881][   T27] audit: type=1800 audit(1583791705.582:181): pid=23598 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=17077 res=0
[  735.661844][   T27] audit: type=1804 audit(1583791705.592:182): pid=23598 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir467624896/syzkaller.lqRwTx/550/file0/file0" dev="sda1" ino=17077 res=1
22:08:25 executing program 5:
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0xffdf}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r3, r2, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffa7)

22:08:25 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x2002, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={0x0, @in6={{0xa, 0x4e21, 0xe, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0xc1}, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0)
write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x77, 0x2, 0x8}, 0xb)
sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={<r1=>0x0}, 0x0)
ptrace$setopts(0x7abb990919170921, r1, 0x10001, 0x111)
ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio1\x00', 0x81f403e8956afdaf, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = getpgrp(0x0)
r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x404000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={<r4=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000a00)={0x9, 0x108, 0xfa00, {r4, 0x66, "c2658c", "df70238469aac9d4907464f29c1754324ed168c706fc37ddb86672e2a6601aefe58eaa4d39b08d20f612d04d207f2343d2ef0308ea553d0430ba29fbd1dc0922dbcaffe9325eca46f1b70208570afbe8af8047e6d323df5ba61e374a095723090a2b2ad594c24f8b10ab07ef5ebaad20e82cf58266a90ccd892895df0f01996af75fb0340198b6d6433b54ece705126a96a1ea1801ff0feee26d343f116a9dd5af4f7f5be661a21a9c4ba9458882e4661dcf854d38884f7716dcb67cbfdeb20deddc905882a8c5af02f857e06c1e280f2a8b6c0c608b17c8c57c6984faf6023ade63b1fb0dd0156b61e28445fb337a427f119e9486e690fd06c39968a937154f"}}, 0x110)
setpriority(0x0, r2, 0x100)
read(r0, &(0x7f0000000340)=""/175, 0xaf)
r5 = getpid()
ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000500)=0x1ff)
r6 = getpid()
ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000580)=0x8)
sched_setscheduler(r6, 0x0, &(0x7f0000000380))
ioprio_set$pid(0x0, r6, 0x9)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r7=>0xffffffffffffffff})
r8 = dup(r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$VIDIOC_TRY_EXT_CTRLS(r8, 0xc0205649, &(0x7f0000000700)={0x990000, 0x3, 0x3b, r3, 0x0, &(0x7f00000006c0)={0x990901, 0x1000, [], @value=0x5}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r9=>0xffffffffffffffff})
r10 = dup(r9)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f0000000b40))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r11=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0xffff}, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)='\x00', r11}, 0x30)
perf_event_open(&(0x7f0000000880)={0x5, 0x70, 0x0, 0x0, 0x8, 0xc8, 0x0, 0x107fff, 0x400, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={&(0x7f0000000240), 0x8}, 0x9120, 0x3, 0x6, 0x0, 0x0, 0x3f, 0x8}, r5, 0x4, r0, 0x3)
open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000480)='./file0\x00', &(0x7f0000000840)=[&(0x7f0000000600)='(\xe0\xf5\x00', &(0x7f0000000680)='/dev/loop#\x00', &(0x7f0000000440)='system\x00', &(0x7f0000000740)='\x00', &(0x7f0000000800)='.cpuset\x1c\x00'], &(0x7f00000002c0)=[&(0x7f0000000040)='selfposix_acl_access&[\x00', &(0x7f0000000080)='/dev/loop#\x00', &(0x7f0000000100)='\\}#(,\x00', 0x0])

22:08:25 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x2002, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={0x0, @in6={{0xa, 0x4e21, 0xe, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0xc1}, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0)
write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x77, 0x2, 0x8}, 0xb)
sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={<r1=>0x0}, 0x0)
ptrace$setopts(0x7abb990919170921, r1, 0x10001, 0x111)
ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio1\x00', 0x81f403e8956afdaf, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = getpgrp(0x0)
r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x404000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={<r4=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000a00)={0x9, 0x108, 0xfa00, {r4, 0x66, "c2658c", "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"}}, 0x110)
setpriority(0x0, r2, 0x100)
read(r0, &(0x7f0000000340)=""/175, 0xaf)
r5 = getpid()
ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000500)=0x1ff)
r6 = getpid()
ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000580)=0x8)
sched_setscheduler(r6, 0x0, &(0x7f0000000380))
ioprio_set$pid(0x0, r6, 0x9)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r7=>0xffffffffffffffff})
r8 = dup(r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$VIDIOC_TRY_EXT_CTRLS(r8, 0xc0205649, &(0x7f0000000700)={0x990000, 0x3, 0x3b, r3, 0x0, &(0x7f00000006c0)={0x990901, 0x1000, [], @value=0x5}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r9=>0xffffffffffffffff})
r10 = dup(r9)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f0000000b40))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r11=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0xffff}, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)='\x00', r11}, 0x30)
perf_event_open(&(0x7f0000000880)={0x5, 0x70, 0x0, 0x0, 0x8, 0xc8, 0x0, 0x107fff, 0x400, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={&(0x7f0000000240), 0x8}, 0x9120, 0x3, 0x6, 0x0, 0x0, 0x3f, 0x8}, r5, 0x4, r0, 0x3)
open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000480)='./file0\x00', &(0x7f0000000840)=[&(0x7f0000000600)='(\xe0\xf5\x00', &(0x7f0000000680)='/dev/loop#\x00', &(0x7f0000000440)='system\x00', &(0x7f0000000740)='\x00', 0x0, &(0x7f0000000800)='.cpuset\x1c\x00'], &(0x7f00000002c0)=[&(0x7f0000000040)='selfposix_acl_access&[\x00', &(0x7f0000000080)='/dev/loop#\x00', &(0x7f0000000100)='\\}#(,\x00', 0x0])

[  735.941052][   T27] audit: type=1800 audit(1583791705.892:183): pid=23619 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="loop5" ino=30 res=0
[  736.001295][   T27] audit: type=1804 audit(1583791705.952:184): pid=23619 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir467624896/syzkaller.lqRwTx/551/file0/file0" dev="loop5" ino=30 res=1
[  736.037011][T23619] attempt to access beyond end of device
[  736.044865][T23619] loop5: rw=2049, want=130, limit=127
22:08:26 executing program 0:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00'], 0x1)
sendfile(0xffffffffffffffff, r1, 0x0, 0xa198)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="000ffff0802bc8369ce73cb6fda400006224541f3780351157b252dd000000009154262a80420801444dd89f6bfd1510066a2128e6c04f112558c8bdac2ae91c22768a299a879ca5ea45ea6189f14f84644589436f645a783aac81cf5bc374f0ac00ef2728cfd3b16ae8a4ec80ebea0a7e8c20a5986a2ab75b34dc27b332714d36cba3ac62ec7100c22eb5d6638b8e1d01468ad3328280706dfc31700ea3fe507bfd0f8169b2187e8d804978b5a6397a1f471a29369349f8dcda480be4b38fb6862fc91512ff53f74ccb2674157b224da1961bbaf18cfe6f399d07607fc5fa"], 0xdf)
sendfile(r3, r2, 0x0, 0xa198)
open(0x0, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)

[  736.052127][T23619] buffer_io_error: 10 callbacks suppressed
[  736.052236][T23619] Buffer I/O error on dev loop5, logical block 129, lost async page write
[  736.069374][T23619] attempt to access beyond end of device
[  736.075241][T23619] loop5: rw=2049, want=131, limit=127
[  736.084121][T23619] Buffer I/O error on dev loop5, logical block 130, lost async page write
[  736.094129][T23619] attempt to access beyond end of device
[  736.100889][T23619] loop5: rw=2049, want=132, limit=127
[  736.106425][T23619] Buffer I/O error on dev loop5, logical block 131, lost async page write
[  736.116005][T23619] attempt to access beyond end of device
[  736.122430][T23619] loop5: rw=2049, want=133, limit=127
[  736.128701][T23619] Buffer I/O error on dev loop5, logical block 132, lost async page write
[  736.137501][T23619] attempt to access beyond end of device
[  736.143965][T23619] loop5: rw=2049, want=142, limit=127
22:08:26 executing program 3:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r2)
socket$inet(0x10, 0x2, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080025944eeba71a4976e252922c000000002aba000000012e0b3836005404b0e0301a4ce875f2e0ff5f163ee340b7679500800000000000000101013c5891039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffff7f00000000ffefa6f909f7", @ANYRES32, @ANYBLOB="0000000bf1ffffff000000ff7f0001"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

[  736.152279][T23619] Buffer I/O error on dev loop5, logical block 141, lost async page write
[  736.161474][T23619] attempt to access beyond end of device
[  736.167232][T23619] loop5: rw=2049, want=143, limit=127
[  736.173504][T23619] Buffer I/O error on dev loop5, logical block 142, lost async page write
[  736.192249][T23619] attempt to access beyond end of device
[  736.201119][T23619] loop5: rw=2049, want=144, limit=127
[  736.207054][T23619] Buffer I/O error on dev loop5, logical block 143, lost async page write
[  736.292621][T23641] netlink: 2092 bytes leftover after parsing attributes in process `syz-executor.3'.
22:08:28 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="6653405cb4aed12f0000000000ae47a825d86800278dcff47d0100005ae64f8f36460234432479aed75d492b41fd983f79e65199615607672c59957ab6ad602ea04db364bf68e6faa53367f05f4ad61421349f2f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca4fafa924edfe92175aaa1c4ecc7aeeb72e0d050feace34b52d9e5f755563698c7e24ab45f0866f15da7f9a6cd1c9ba50f5dd289d81466ec4af1d8bf2e2b773b5ca2e623ed2e65877a87b785aa8aa2eb0f07c986bf605c9335f4a", 0xc8}], 0x4, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff2d}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, 0x0)
ptrace$cont(0x20, r0, 0x0, 0x0)

22:08:28 executing program 5:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x75, 0x4)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @empty}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
writev(r0, &(0x7f0000000240)=[{&(0x7f0000001340)="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", 0x121}, {&(0x7f00000001c0)="094994accaf3f8cc5072f2c46cff934fee7fb289baa3ba3a3116af475141772021c0642b4b2e7dba7a1e2b0b8dc529241769460b04558cf1759a36d6feb605a1275935", 0x43}, {&(0x7f0000001480)="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", 0x172}], 0x3)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda6, 0x4)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27)

22:08:28 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x2002, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={0x0, @in6={{0xa, 0x4e21, 0xe, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0xc1}, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0)
write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x77, 0x2, 0x8}, 0xb)
sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={<r1=>0x0}, 0x0)
ptrace$setopts(0x7abb990919170921, r1, 0x10001, 0x111)
ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio1\x00', 0x81f403e8956afdaf, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = getpgrp(0x0)
r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x404000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={<r4=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000a00)={0x9, 0x108, 0xfa00, {r4, 0x66, "c2658c", "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"}}, 0x110)
setpriority(0x0, r2, 0x100)
read(r0, &(0x7f0000000340)=""/175, 0xaf)
r5 = getpid()
ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000500)=0x1ff)
r6 = getpid()
ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000580)=0x8)
sched_setscheduler(r6, 0x0, &(0x7f0000000380))
ioprio_set$pid(0x0, r6, 0x9)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r7=>0xffffffffffffffff})
r8 = dup(r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$VIDIOC_TRY_EXT_CTRLS(r8, 0xc0205649, &(0x7f0000000700)={0x990000, 0x3, 0x3b, r3, 0x0, &(0x7f00000006c0)={0x990901, 0x1000, [], @value=0x5}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r9=>0xffffffffffffffff})
r10 = dup(r9)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f0000000b40))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r11=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0xffff}, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)='\x00', r11}, 0x30)
perf_event_open(&(0x7f0000000880)={0x5, 0x70, 0x0, 0x0, 0x8, 0xc8, 0x0, 0x107fff, 0x400, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={&(0x7f0000000240), 0x8}, 0x9120, 0x3, 0x6, 0x0, 0x0, 0x3f, 0x8}, r5, 0x4, r0, 0x3)
open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000480)='./file0\x00', &(0x7f0000000840)=[&(0x7f0000000600)='(\xe0\xf5\x00', &(0x7f0000000680)='/dev/loop#\x00', &(0x7f0000000440)='system\x00', &(0x7f0000000740)='\x00', 0x0, &(0x7f0000000800)='.cpuset\x1c\x00'], &(0x7f00000002c0)=[&(0x7f0000000040)='selfposix_acl_access&[\x00', &(0x7f0000000080)='/dev/loop#\x00', &(0x7f0000000100)='\\}#(,\x00', 0x0])

22:08:28 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, 0x0, 0x0, 0x0)

22:08:28 executing program 0:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00'], 0x1)
sendfile(0xffffffffffffffff, r1, 0x0, 0xa198)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="000ffff0802bc8369ce73cb6fda400006224541f3780351157b252dd000000009154262a80420801444dd89f6bfd1510066a2128e6c04f112558c8bdac2ae91c22768a299a879ca5ea45ea6189f14f84644589436f645a783aac81cf5bc374f0ac00ef2728cfd3b16ae8a4ec80ebea0a7e8c20a5986a2ab75b34dc27b332714d36cba3ac62ec7100c22eb5d6638b8e1d01468ad3328280706dfc31700ea3fe507bfd0f8169b2187e8d804978b5a6397a1f471a29369349f8dcda480be4b38fb6862fc91512ff53f74ccb2674157b224da1961bbaf18cfe6f399d07607fc5fa"], 0xdf)
sendfile(r3, r2, 0x0, 0xa198)
open(0x0, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)

22:08:28 executing program 3:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r2)
socket$inet(0x10, 0x2, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080025944eeba71a4976e252922c000000002aba000000012e0b3836005404b0e0301a4ce875f2e0ff5f163ee340b7679500800000000000000101013c5891039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffff7f00000000ffefa6f909f7", @ANYRES32, @ANYBLOB="0000000bf1ffffff000000ff7f0001"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

22:08:28 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x2002, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={0x0, @in6={{0xa, 0x4e21, 0xe, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0xc1}, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0)
write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x77, 0x2, 0x8}, 0xb)
sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={<r1=>0x0}, 0x0)
ptrace$setopts(0x7abb990919170921, r1, 0x10001, 0x111)
ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio1\x00', 0x81f403e8956afdaf, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = getpgrp(0x0)
r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x404000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={<r4=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000a00)={0x9, 0x108, 0xfa00, {r4, 0x66, "c2658c", "df70238469aac9d4907464f29c1754324ed168c706fc37ddb86672e2a6601aefe58eaa4d39b08d20f612d04d207f2343d2ef0308ea553d0430ba29fbd1dc0922dbcaffe9325eca46f1b70208570afbe8af8047e6d323df5ba61e374a095723090a2b2ad594c24f8b10ab07ef5ebaad20e82cf58266a90ccd892895df0f01996af75fb0340198b6d6433b54ece705126a96a1ea1801ff0feee26d343f116a9dd5af4f7f5be661a21a9c4ba9458882e4661dcf854d38884f7716dcb67cbfdeb20deddc905882a8c5af02f857e06c1e280f2a8b6c0c608b17c8c57c6984faf6023ade63b1fb0dd0156b61e28445fb337a427f119e9486e690fd06c39968a937154f"}}, 0x110)
setpriority(0x0, r2, 0x100)
read(r0, &(0x7f0000000340)=""/175, 0xaf)
r5 = getpid()
ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000500)=0x1ff)
r6 = getpid()
ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000580)=0x8)
sched_setscheduler(r6, 0x0, &(0x7f0000000380))
ioprio_set$pid(0x0, r6, 0x9)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r7=>0xffffffffffffffff})
r8 = dup(r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$VIDIOC_TRY_EXT_CTRLS(r8, 0xc0205649, &(0x7f0000000700)={0x990000, 0x3, 0x3b, r3, 0x0, &(0x7f00000006c0)={0x990901, 0x1000, [], @value=0x5}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r9=>0xffffffffffffffff})
r10 = dup(r9)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f0000000b40))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r11=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0xffff}, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)='\x00', r11}, 0x30)
perf_event_open(&(0x7f0000000880)={0x5, 0x70, 0x0, 0x0, 0x8, 0xc8, 0x0, 0x107fff, 0x400, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={&(0x7f0000000240), 0x8}, 0x9120, 0x3, 0x6, 0x0, 0x0, 0x3f, 0x8}, r5, 0x4, r0, 0x3)
open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000480)='./file0\x00', &(0x7f0000000840)=[&(0x7f0000000600)='(\xe0\xf5\x00', &(0x7f0000000680)='/dev/loop#\x00', &(0x7f0000000440)='system\x00', &(0x7f0000000740)='\x00', 0x0, &(0x7f0000000800)='.cpuset\x1c\x00'], &(0x7f00000002c0)=[&(0x7f0000000040)='selfposix_acl_access&[\x00', &(0x7f0000000080)='/dev/loop#\x00', &(0x7f0000000100)='\\}#(,\x00', 0x0])

[  738.578660][T23671] netlink: 2092 bytes leftover after parsing attributes in process `syz-executor.3'.
[  738.603548][   T27] kauditd_printk_skb: 2 callbacks suppressed
22:08:28 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x2002, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={0x0, @in6={{0xa, 0x4e21, 0xe, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0xc1}, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0)
write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x77, 0x2, 0x8}, 0xb)
sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={<r1=>0x0}, 0x0)
ptrace$setopts(0x7abb990919170921, r1, 0x10001, 0x111)
ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio1\x00', 0x81f403e8956afdaf, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = getpgrp(0x0)
r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x404000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={<r4=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000a00)={0x9, 0x108, 0xfa00, {r4, 0x66, "c2658c", "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"}}, 0x110)
setpriority(0x0, r2, 0x100)
read(r0, &(0x7f0000000340)=""/175, 0xaf)
r5 = getpid()
ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000500)=0x1ff)
r6 = getpid()
ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000580)=0x8)
sched_setscheduler(r6, 0x0, &(0x7f0000000380))
ioprio_set$pid(0x0, r6, 0x9)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r7=>0xffffffffffffffff})
r8 = dup(r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$VIDIOC_TRY_EXT_CTRLS(r8, 0xc0205649, &(0x7f0000000700)={0x990000, 0x3, 0x3b, r3, 0x0, &(0x7f00000006c0)={0x990901, 0x1000, [], @value=0x5}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r9=>0xffffffffffffffff})
r10 = dup(r9)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f0000000b40))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r11=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0xffff}, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)='\x00', r11}, 0x30)
perf_event_open(&(0x7f0000000880)={0x5, 0x70, 0x0, 0x0, 0x8, 0xc8, 0x0, 0x107fff, 0x400, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={&(0x7f0000000240), 0x8}, 0x9120, 0x3, 0x6, 0x0, 0x0, 0x3f, 0x8}, r5, 0x4, r0, 0x3)
open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000480)='./file0\x00', &(0x7f0000000840)=[&(0x7f0000000600)='(\xe0\xf5\x00', &(0x7f0000000680)='/dev/loop#\x00', &(0x7f0000000440)='system\x00', &(0x7f00000007c0)='\x00', &(0x7f0000000800)='.cpuset\x1c\x00'], &(0x7f00000002c0)=[&(0x7f0000000040)='selfposix_acl_access&[\x00', &(0x7f0000000080)='/dev/loop#\x00', &(0x7f0000000100)='\\}#(,\x00', 0x0])

[  738.603568][   T27] audit: type=1804 audit(1583791708.552:187): pid=23663 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/439/file0" dev="sda1" ino=16817 res=1
[  738.635292][   T27] audit: type=1804 audit(1583791708.552:188): pid=23663 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/439/file0" dev="sda1" ino=16817 res=1
22:08:28 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x2002, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={0x0, @in6={{0xa, 0x4e21, 0xe, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0xc1}, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0)
write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x77, 0x2, 0x8}, 0xb)
sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={<r1=>0x0}, 0x0)
ptrace$setopts(0x7abb990919170921, r1, 0x10001, 0x111)
ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio1\x00', 0x81f403e8956afdaf, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = getpgrp(0x0)
r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x404000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={<r4=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000a00)={0x9, 0x108, 0xfa00, {r4, 0x66, "c2658c", "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"}}, 0x110)
setpriority(0x0, r2, 0x100)
read(r0, &(0x7f0000000340)=""/175, 0xaf)
r5 = getpid()
ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000500)=0x1ff)
r6 = getpid()
ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000580)=0x8)
sched_setscheduler(r6, 0x0, &(0x7f0000000380))
ioprio_set$pid(0x0, r6, 0x9)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r7=>0xffffffffffffffff})
r8 = dup(r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$VIDIOC_TRY_EXT_CTRLS(r8, 0xc0205649, &(0x7f0000000700)={0x990000, 0x3, 0x3b, r3, 0x0, &(0x7f00000006c0)={0x990901, 0x1000, [], @value=0x5}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r9=>0xffffffffffffffff})
r10 = dup(r9)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f0000000b40))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r11=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0xffff}, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)='\x00', r11}, 0x30)
perf_event_open(&(0x7f0000000880)={0x5, 0x70, 0x0, 0x0, 0x8, 0xc8, 0x0, 0x107fff, 0x400, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={&(0x7f0000000240), 0x8}, 0x9120, 0x3, 0x6, 0x0, 0x0, 0x3f, 0x8}, r5, 0x4, r0, 0x3)
open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000480)='./file0\x00', &(0x7f0000000840)=[&(0x7f0000000600)='(\xe0\xf5\x00', &(0x7f0000000680)='/dev/loop#\x00', &(0x7f0000000440)='system\x00', &(0x7f00000007c0)='\x00', &(0x7f0000000800)='.cpuset\x1c\x00'], &(0x7f00000002c0)=[&(0x7f0000000040)='selfposix_acl_access&[\x00', &(0x7f0000000080)='/dev/loop#\x00', &(0x7f0000000100)='\\}#(,\x00', 0x0])

22:08:28 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x2002, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={0x0, @in6={{0xa, 0x4e21, 0xe, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0xc1}, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0)
write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x77, 0x2, 0x8}, 0xb)
sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={<r1=>0x0}, 0x0)
ptrace$setopts(0x7abb990919170921, r1, 0x10001, 0x111)
ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio1\x00', 0x81f403e8956afdaf, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = getpgrp(0x0)
r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x404000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={<r4=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000a00)={0x9, 0x108, 0xfa00, {r4, 0x66, "c2658c", "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"}}, 0x110)
setpriority(0x0, r2, 0x100)
read(r0, &(0x7f0000000340)=""/175, 0xaf)
r5 = getpid()
ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000500)=0x1ff)
r6 = getpid()
ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000580)=0x8)
sched_setscheduler(r6, 0x0, &(0x7f0000000380))
ioprio_set$pid(0x0, r6, 0x9)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r7=>0xffffffffffffffff})
r8 = dup(r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$VIDIOC_TRY_EXT_CTRLS(r8, 0xc0205649, &(0x7f0000000700)={0x990000, 0x3, 0x3b, r3, 0x0, &(0x7f00000006c0)={0x990901, 0x1000, [], @value=0x5}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r9=>0xffffffffffffffff})
r10 = dup(r9)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f0000000b40))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r11=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0xffff}, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)='\x00', r11}, 0x30)
perf_event_open(&(0x7f0000000880)={0x5, 0x70, 0x0, 0x0, 0x8, 0xc8, 0x0, 0x107fff, 0x400, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={&(0x7f0000000240), 0x8}, 0x9120, 0x3, 0x6, 0x0, 0x0, 0x3f, 0x8}, r5, 0x4, r0, 0x3)
open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000480)='./file0\x00', &(0x7f0000000840)=[&(0x7f0000000600)='(\xe0\xf5\x00', &(0x7f0000000680)='/dev/loop#\x00', &(0x7f0000000440)='system\x00', &(0x7f00000007c0)='\x00', &(0x7f0000000800)='.cpuset\x1c\x00'], &(0x7f00000002c0)=[&(0x7f0000000040)='selfposix_acl_access&[\x00', &(0x7f0000000080)='/dev/loop#\x00', &(0x7f0000000100)='\\}#(,\x00', 0x0])

22:08:28 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x2002, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={0x0, @in6={{0xa, 0x4e21, 0xe, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0xc1}, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0)
write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x77, 0x2, 0x8}, 0xb)
sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={<r1=>0x0}, 0x0)
ptrace$setopts(0x7abb990919170921, r1, 0x10001, 0x111)
ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio1\x00', 0x81f403e8956afdaf, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = getpgrp(0x0)
r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x404000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={<r4=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000a00)={0x9, 0x108, 0xfa00, {r4, 0x66, "c2658c", "df70238469aac9d4907464f29c1754324ed168c706fc37ddb86672e2a6601aefe58eaa4d39b08d20f612d04d207f2343d2ef0308ea553d0430ba29fbd1dc0922dbcaffe9325eca46f1b70208570afbe8af8047e6d323df5ba61e374a095723090a2b2ad594c24f8b10ab07ef5ebaad20e82cf58266a90ccd892895df0f01996af75fb0340198b6d6433b54ece705126a96a1ea1801ff0feee26d343f116a9dd5af4f7f5be661a21a9c4ba9458882e4661dcf854d38884f7716dcb67cbfdeb20deddc905882a8c5af02f857e06c1e280f2a8b6c0c608b17c8c57c6984faf6023ade63b1fb0dd0156b61e28445fb337a427f119e9486e690fd06c39968a937154f"}}, 0x110)
setpriority(0x0, r2, 0x100)
read(r0, &(0x7f0000000340)=""/175, 0xaf)
r5 = getpid()
ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000500)=0x1ff)
r6 = getpid()
ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000580)=0x8)
sched_setscheduler(r6, 0x0, &(0x7f0000000380))
ioprio_set$pid(0x0, r6, 0x9)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r7=>0xffffffffffffffff})
r8 = dup(r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$VIDIOC_TRY_EXT_CTRLS(r8, 0xc0205649, &(0x7f0000000700)={0x990000, 0x3, 0x3b, r3, 0x0, &(0x7f00000006c0)={0x990901, 0x1000, [], @value=0x5}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r9=>0xffffffffffffffff})
r10 = dup(r9)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f0000000b40))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r11=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0xffff}, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)='\x00', r11}, 0x30)
perf_event_open(&(0x7f0000000880)={0x5, 0x70, 0x0, 0x0, 0x8, 0xc8, 0x0, 0x107fff, 0x400, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={&(0x7f0000000240), 0x8}, 0x9120, 0x3, 0x6, 0x0, 0x0, 0x3f, 0x8}, r5, 0x4, r0, 0x3)
open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000480)='./file0\x00', &(0x7f0000000840)=[&(0x7f0000000600)='(\xe0\xf5\x00', &(0x7f0000000680)='/dev/loop#\x00', &(0x7f0000000440)='system\x00', 0x0, &(0x7f00000007c0)='\x00', &(0x7f0000000800)='.cpuset\x1c\x00'], &(0x7f00000002c0)=[&(0x7f0000000040)='selfposix_acl_access&[\x00', &(0x7f0000000080)='/dev/loop#\x00', &(0x7f0000000100)='\\}#(,\x00', 0x0])

22:08:29 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x2002, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={0x0, @in6={{0xa, 0x4e21, 0xe, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0xc1}, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0)
write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x77, 0x2, 0x8}, 0xb)
sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={<r1=>0x0}, 0x0)
ptrace$setopts(0x7abb990919170921, r1, 0x10001, 0x111)
ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio1\x00', 0x81f403e8956afdaf, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = getpgrp(0x0)
r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x404000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={<r4=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000a00)={0x9, 0x108, 0xfa00, {r4, 0x66, "c2658c", "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"}}, 0x110)
setpriority(0x0, r2, 0x100)
read(r0, &(0x7f0000000340)=""/175, 0xaf)
r5 = getpid()
ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000500)=0x1ff)
r6 = getpid()
ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000580)=0x8)
sched_setscheduler(r6, 0x0, &(0x7f0000000380))
ioprio_set$pid(0x0, r6, 0x9)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r7=>0xffffffffffffffff})
r8 = dup(r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$VIDIOC_TRY_EXT_CTRLS(r8, 0xc0205649, &(0x7f0000000700)={0x990000, 0x3, 0x3b, r3, 0x0, &(0x7f00000006c0)={0x990901, 0x1000, [], @value=0x5}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r9=>0xffffffffffffffff})
r10 = dup(r9)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f0000000b40))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r11=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0xffff}, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)='\x00', r11}, 0x30)
perf_event_open(&(0x7f0000000880)={0x5, 0x70, 0x0, 0x0, 0x8, 0xc8, 0x0, 0x107fff, 0x400, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={&(0x7f0000000240), 0x8}, 0x9120, 0x3, 0x6, 0x0, 0x0, 0x3f, 0x8}, r5, 0x4, r0, 0x3)
open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000480)='./file0\x00', &(0x7f0000000840)=[&(0x7f0000000600)='(\xe0\xf5\x00', &(0x7f0000000680)='/dev/loop#\x00', &(0x7f0000000440)='system\x00', 0x0, &(0x7f00000007c0)='\x00', &(0x7f0000000800)='.cpuset\x1c\x00'], &(0x7f00000002c0)=[&(0x7f0000000040)='selfposix_acl_access&[\x00', &(0x7f0000000080)='/dev/loop#\x00', &(0x7f0000000100)='\\}#(,\x00', 0x0])

22:08:31 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="6653405cb4aed12f0000000000ae47a825d86800278dcff47d0100005ae64f8f36460234432479aed75d492b41fd983f79e65199615607672c59957ab6ad602ea04db364bf68e6faa53367f05f4ad61421349f2f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca4fafa924edfe92175aaa1c4ecc7aeeb72e0d050feace34b52d9e5f755563698c7e24ab45f0866f15da7f9a6cd1c9ba50f5dd289d81466ec4af1d8bf2e2b773b5ca2e623ed2e65877a87b785aa8aa2eb0f07c986bf605c9335f4a", 0xc8}], 0x4, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff2d}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0)

22:08:31 executing program 0:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00'], 0x1)
sendfile(0xffffffffffffffff, r1, 0x0, 0xa198)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="000ffff0802bc8369ce73cb6fda400006224541f3780351157b252dd000000009154262a80420801444dd89f6bfd1510066a2128e6c04f112558c8bdac2ae91c22768a299a879ca5ea45ea6189f14f84644589436f645a783aac81cf5bc374f0ac00ef2728cfd3b16ae8a4ec80ebea0a7e8c20a5986a2ab75b34dc27b332714d36cba3ac62ec7100c22eb5d6638b8e1d01468ad3328280706dfc31700ea3fe507bfd0f8169b2187e8d804978b5a6397a1f471a29369349f8dcda480be4b38fb6862fc91512ff53f74ccb2674157b224da1961bbaf18cfe6f399d07607fc5fa"], 0xdf)
sendfile(r3, r2, 0x0, 0xa198)
open(0x0, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)

22:08:31 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x2002, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={0x0, @in6={{0xa, 0x4e21, 0xe, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0xc1}, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0)
write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x77, 0x2, 0x8}, 0xb)
sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={<r1=>0x0}, 0x0)
ptrace$setopts(0x7abb990919170921, r1, 0x10001, 0x111)
ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio1\x00', 0x81f403e8956afdaf, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = getpgrp(0x0)
r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x404000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={<r4=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000a00)={0x9, 0x108, 0xfa00, {r4, 0x66, "c2658c", "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"}}, 0x110)
setpriority(0x0, r2, 0x100)
read(r0, &(0x7f0000000340)=""/175, 0xaf)
r5 = getpid()
ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000500)=0x1ff)
r6 = getpid()
ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000580)=0x8)
sched_setscheduler(r6, 0x0, &(0x7f0000000380))
ioprio_set$pid(0x0, r6, 0x9)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r7=>0xffffffffffffffff})
r8 = dup(r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$VIDIOC_TRY_EXT_CTRLS(r8, 0xc0205649, &(0x7f0000000700)={0x990000, 0x3, 0x3b, r3, 0x0, &(0x7f00000006c0)={0x990901, 0x1000, [], @value=0x5}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r9=>0xffffffffffffffff})
r10 = dup(r9)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f0000000b40))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r11=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0xffff}, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)='\x00', r11}, 0x30)
perf_event_open(&(0x7f0000000880)={0x5, 0x70, 0x0, 0x0, 0x8, 0xc8, 0x0, 0x107fff, 0x400, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={&(0x7f0000000240), 0x8}, 0x9120, 0x3, 0x6, 0x0, 0x0, 0x3f, 0x8}, r5, 0x4, r0, 0x3)
open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000480)='./file0\x00', &(0x7f0000000840)=[&(0x7f0000000600)='(\xe0\xf5\x00', &(0x7f0000000680)='/dev/loop#\x00', &(0x7f0000000440)='system\x00', 0x0, &(0x7f00000007c0)='\x00', &(0x7f0000000800)='.cpuset\x1c\x00'], &(0x7f00000002c0)=[&(0x7f0000000040)='selfposix_acl_access&[\x00', &(0x7f0000000080)='/dev/loop#\x00', &(0x7f0000000100)='\\}#(,\x00', 0x0])

[  741.480320][   T27] audit: type=1804 audit(1583791711.432:189): pid=23724 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/440/file0" dev="sda1" ino=16962 res=1
[  741.507932][   T27] audit: type=1804 audit(1583791711.432:190): pid=23724 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/440/file0" dev="sda1" ino=16962 res=1
22:08:31 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, 0x0, 0x0, 0x0)

22:08:31 executing program 5:
perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mknod$loop(0x0, 0x0, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_procfs(0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x400000000803, 0x5f)
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0)
r3 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0)
ftruncate(r3, 0x200004)
sendfile(r1, r3, 0x0, 0x80001d00c0d0)
sendmsg$nl_route(r0, 0x0, 0x0)

22:08:31 executing program 3:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r2)
socket$inet(0x10, 0x2, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080025944eeba71a4976e252922c000000002aba000000012e0b3836005404b0e0301a4ce875f2e0ff5f163ee340b7679500800000000000000101013c5891039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffff7f00000000ffefa6f909f7", @ANYRES32, @ANYBLOB="0000000bf1ffffff000000ff7f0001"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

22:08:31 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x2002, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={0x0, @in6={{0xa, 0x4e21, 0xe, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0xc1}, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0)
write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x77, 0x2, 0x8}, 0xb)
sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={<r1=>0x0}, 0x0)
ptrace$setopts(0x7abb990919170921, r1, 0x10001, 0x111)
ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio1\x00', 0x81f403e8956afdaf, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = getpgrp(0x0)
r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x404000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={<r4=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000a00)={0x9, 0x108, 0xfa00, {r4, 0x66, "c2658c", "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"}}, 0x110)
setpriority(0x0, r2, 0x100)
read(r0, &(0x7f0000000340)=""/175, 0xaf)
r5 = getpid()
ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000500)=0x1ff)
r6 = getpid()
ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000580)=0x8)
sched_setscheduler(r6, 0x0, &(0x7f0000000380))
ioprio_set$pid(0x0, r6, 0x9)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r7=>0xffffffffffffffff})
r8 = dup(r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$VIDIOC_TRY_EXT_CTRLS(r8, 0xc0205649, &(0x7f0000000700)={0x990000, 0x3, 0x3b, r3, 0x0, &(0x7f00000006c0)={0x990901, 0x1000, [], @value=0x5}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r9=>0xffffffffffffffff})
r10 = dup(r9)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f0000000b40))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r11=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0xffff}, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)='\x00', r11}, 0x30)
perf_event_open(&(0x7f0000000880)={0x5, 0x70, 0x0, 0x0, 0x8, 0xc8, 0x0, 0x107fff, 0x400, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={&(0x7f0000000240), 0x8}, 0x9120, 0x3, 0x6, 0x0, 0x0, 0x3f, 0x8}, r5, 0x4, r0, 0x3)
open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000480)='./file0\x00', &(0x7f0000000840)=[&(0x7f0000000600)='(\xe0\xf5\x00', &(0x7f0000000680)='/dev/loop#\x00', &(0x7f0000000740)='\x00', &(0x7f00000007c0)='\x00', &(0x7f0000000800)='.cpuset\x1c\x00'], &(0x7f00000002c0)=[&(0x7f0000000040)='selfposix_acl_access&[\x00', &(0x7f0000000080)='/dev/loop#\x00', &(0x7f0000000100)='\\}#(,\x00', 0x0])

[  741.660782][T23743] netlink: 2092 bytes leftover after parsing attributes in process `syz-executor.3'.
22:08:31 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x2002, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={0x0, @in6={{0xa, 0x4e21, 0xe, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0xc1}, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0)
write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x77, 0x2, 0x8}, 0xb)
sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={<r1=>0x0}, 0x0)
ptrace$setopts(0x7abb990919170921, r1, 0x10001, 0x111)
ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio1\x00', 0x81f403e8956afdaf, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = getpgrp(0x0)
r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x404000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={<r4=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000a00)={0x9, 0x108, 0xfa00, {r4, 0x66, "c2658c", "df70238469aac9d4907464f29c1754324ed168c706fc37ddb86672e2a6601aefe58eaa4d39b08d20f612d04d207f2343d2ef0308ea553d0430ba29fbd1dc0922dbcaffe9325eca46f1b70208570afbe8af8047e6d323df5ba61e374a095723090a2b2ad594c24f8b10ab07ef5ebaad20e82cf58266a90ccd892895df0f01996af75fb0340198b6d6433b54ece705126a96a1ea1801ff0feee26d343f116a9dd5af4f7f5be661a21a9c4ba9458882e4661dcf854d38884f7716dcb67cbfdeb20deddc905882a8c5af02f857e06c1e280f2a8b6c0c608b17c8c57c6984faf6023ade63b1fb0dd0156b61e28445fb337a427f119e9486e690fd06c39968a937154f"}}, 0x110)
setpriority(0x0, r2, 0x100)
read(r0, &(0x7f0000000340)=""/175, 0xaf)
r5 = getpid()
ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000500)=0x1ff)
r6 = getpid()
ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000580)=0x8)
sched_setscheduler(r6, 0x0, &(0x7f0000000380))
ioprio_set$pid(0x0, r6, 0x9)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r7=>0xffffffffffffffff})
r8 = dup(r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$VIDIOC_TRY_EXT_CTRLS(r8, 0xc0205649, &(0x7f0000000700)={0x990000, 0x3, 0x3b, r3, 0x0, &(0x7f00000006c0)={0x990901, 0x1000, [], @value=0x5}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r9=>0xffffffffffffffff})
r10 = dup(r9)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f0000000b40))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r11=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0xffff}, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)='\x00', r11}, 0x30)
perf_event_open(&(0x7f0000000880)={0x5, 0x70, 0x0, 0x0, 0x8, 0xc8, 0x0, 0x107fff, 0x400, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={&(0x7f0000000240), 0x8}, 0x9120, 0x3, 0x6, 0x0, 0x0, 0x3f, 0x8}, r5, 0x4, r0, 0x3)
open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000480)='./file0\x00', &(0x7f0000000840)=[&(0x7f0000000600)='(\xe0\xf5\x00', &(0x7f0000000680)='/dev/loop#\x00', &(0x7f0000000740)='\x00', &(0x7f00000007c0)='\x00', &(0x7f0000000800)='.cpuset\x1c\x00'], &(0x7f00000002c0)=[&(0x7f0000000040)='selfposix_acl_access&[\x00', &(0x7f0000000080)='/dev/loop#\x00', &(0x7f0000000100)='\\}#(,\x00', 0x0])

22:08:31 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x2002, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={0x0, @in6={{0xa, 0x4e21, 0xe, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0xc1}, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0)
write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x77, 0x2, 0x8}, 0xb)
sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={<r1=>0x0}, 0x0)
ptrace$setopts(0x7abb990919170921, r1, 0x10001, 0x111)
ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio1\x00', 0x81f403e8956afdaf, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = getpgrp(0x0)
r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x404000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={<r4=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000a00)={0x9, 0x108, 0xfa00, {r4, 0x66, "c2658c", "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"}}, 0x110)
setpriority(0x0, r2, 0x100)
read(r0, &(0x7f0000000340)=""/175, 0xaf)
r5 = getpid()
ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000500)=0x1ff)
r6 = getpid()
ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000580)=0x8)
sched_setscheduler(r6, 0x0, &(0x7f0000000380))
ioprio_set$pid(0x0, r6, 0x9)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r7=>0xffffffffffffffff})
r8 = dup(r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$VIDIOC_TRY_EXT_CTRLS(r8, 0xc0205649, &(0x7f0000000700)={0x990000, 0x3, 0x3b, r3, 0x0, &(0x7f00000006c0)={0x990901, 0x1000, [], @value=0x5}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r9=>0xffffffffffffffff})
r10 = dup(r9)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f0000000b40))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r11=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0xffff}, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)='\x00', r11}, 0x30)
perf_event_open(&(0x7f0000000880)={0x5, 0x70, 0x0, 0x0, 0x8, 0xc8, 0x0, 0x107fff, 0x400, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={&(0x7f0000000240), 0x8}, 0x9120, 0x3, 0x6, 0x0, 0x0, 0x3f, 0x8}, r5, 0x4, r0, 0x3)
open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000480)='./file0\x00', &(0x7f0000000840)=[&(0x7f0000000600)='(\xe0\xf5\x00', &(0x7f0000000680)='/dev/loop#\x00', &(0x7f0000000740)='\x00', &(0x7f00000007c0)='\x00', &(0x7f0000000800)='.cpuset\x1c\x00'], &(0x7f00000002c0)=[&(0x7f0000000040)='selfposix_acl_access&[\x00', &(0x7f0000000080)='/dev/loop#\x00', &(0x7f0000000100)='\\}#(,\x00', 0x0])

[  741.855015][   T27] audit: type=1800 audit(1583791711.802:191): pid=23735 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="file1" dev="sda1" ino=16964 res=0
22:08:31 executing program 5:
perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mknod$loop(0x0, 0x0, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_procfs(0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x400000000803, 0x5f)
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0)
r3 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0)
ftruncate(r3, 0x200004)
sendfile(r1, r3, 0x0, 0x80001d00c0d0)
sendmsg$nl_route(r0, 0x0, 0x0)

22:08:31 executing program 0:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00'], 0x1)
sendfile(r1, 0xffffffffffffffff, 0x0, 0xa198)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="000ffff0802bc8369ce73cb6fda400006224541f3780351157b252dd000000009154262a80420801444dd89f6bfd1510066a2128e6c04f112558c8bdac2ae91c22768a299a879ca5ea45ea6189f14f84644589436f645a783aac81cf5bc374f0ac00ef2728cfd3b16ae8a4ec80ebea0a7e8c20a5986a2ab75b34dc27b332714d36cba3ac62ec7100c22eb5d6638b8e1d01468ad3328280706dfc31700ea3fe507bfd0f8169b2187e8d804978b5a6397a1f471a29369349f8dcda480be4b38fb6862fc91512ff53f74ccb2674157b224da1961bbaf18cfe6f399d07607fc5fa"], 0xdf)
sendfile(r3, r2, 0x0, 0xa198)
open(0x0, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)

22:08:32 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x2002, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={0x0, @in6={{0xa, 0x4e21, 0xe, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0xc1}, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0)
write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x77, 0x2, 0x8}, 0xb)
sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={<r1=>0x0}, 0x0)
ptrace$setopts(0x7abb990919170921, r1, 0x10001, 0x111)
ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio1\x00', 0x81f403e8956afdaf, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = getpgrp(0x0)
r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x404000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={<r4=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000a00)={0x9, 0x108, 0xfa00, {r4, 0x66, "c2658c", "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"}}, 0x110)
setpriority(0x0, r2, 0x100)
read(r0, &(0x7f0000000340)=""/175, 0xaf)
r5 = getpid()
ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000500)=0x1ff)
r6 = getpid()
ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000580)=0x8)
sched_setscheduler(r6, 0x0, &(0x7f0000000380))
ioprio_set$pid(0x0, r6, 0x9)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r7=>0xffffffffffffffff})
r8 = dup(r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$VIDIOC_TRY_EXT_CTRLS(r8, 0xc0205649, &(0x7f0000000700)={0x990000, 0x3, 0x3b, r3, 0x0, &(0x7f00000006c0)={0x990901, 0x1000, [], @value=0x5}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r9=>0xffffffffffffffff})
r10 = dup(r9)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f0000000b40))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r11=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0xffff}, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)='\x00', r11}, 0x30)
perf_event_open(&(0x7f0000000880)={0x5, 0x70, 0x0, 0x0, 0x8, 0xc8, 0x0, 0x107fff, 0x400, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={&(0x7f0000000240), 0x8}, 0x9120, 0x3, 0x6, 0x0, 0x0, 0x3f, 0x8}, r5, 0x4, r0, 0x3)
open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000480)='./file0\x00', &(0x7f0000000840)=[&(0x7f0000000600)='(\xe0\xf5\x00', &(0x7f0000000680)='/dev/loop#\x00', 0x0, &(0x7f0000000740)='\x00', &(0x7f00000007c0)='\x00', &(0x7f0000000800)='.cpuset\x1c\x00'], &(0x7f00000002c0)=[&(0x7f0000000040)='selfposix_acl_access&[\x00', &(0x7f0000000080)='/dev/loop#\x00', &(0x7f0000000100)='\\}#(,\x00', 0x0])

[  742.157391][   T27] audit: type=1804 audit(1583791712.102:192): pid=23771 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/441/file0" dev="sda1" ino=16626 res=1
[  742.210170][   T27] audit: type=1804 audit(1583791712.142:193): pid=23771 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/441/file0" dev="sda1" ino=16626 res=1
22:08:34 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="6653405cb4aed12f0000000000ae47a825d86800278dcff47d0100005ae64f8f36460234432479aed75d492b41fd983f79e65199615607672c59957ab6ad602ea04db364bf68e6faa53367f05f4ad61421349f2f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca4fafa924edfe92175aaa1c4ecc7aeeb72e0d050feace34b52d9e5f755563698c7e24ab45f0866f15da7f9a6cd1c9ba50f5dd289d81466ec4af1d8bf2e2b773b5ca2e623ed2e65877a87b785aa8aa2eb0f07c986bf605c9335f4a", 0xc8}], 0x4, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff2d}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0)

22:08:34 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x2002, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={0x0, @in6={{0xa, 0x4e21, 0xe, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0xc1}, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0)
write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x77, 0x2, 0x8}, 0xb)
sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={<r1=>0x0}, 0x0)
ptrace$setopts(0x7abb990919170921, r1, 0x10001, 0x111)
ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio1\x00', 0x81f403e8956afdaf, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = getpgrp(0x0)
r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x404000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={<r4=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000a00)={0x9, 0x108, 0xfa00, {r4, 0x66, "c2658c", "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"}}, 0x110)
setpriority(0x0, r2, 0x100)
read(r0, &(0x7f0000000340)=""/175, 0xaf)
r5 = getpid()
ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000500)=0x1ff)
r6 = getpid()
ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000580)=0x8)
sched_setscheduler(r6, 0x0, &(0x7f0000000380))
ioprio_set$pid(0x0, r6, 0x9)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r7=>0xffffffffffffffff})
r8 = dup(r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$VIDIOC_TRY_EXT_CTRLS(r8, 0xc0205649, &(0x7f0000000700)={0x990000, 0x3, 0x3b, r3, 0x0, &(0x7f00000006c0)={0x990901, 0x1000, [], @value=0x5}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r9=>0xffffffffffffffff})
r10 = dup(r9)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f0000000b40))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r11=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0xffff}, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)='\x00', r11}, 0x30)
perf_event_open(&(0x7f0000000880)={0x5, 0x70, 0x0, 0x0, 0x8, 0xc8, 0x0, 0x107fff, 0x400, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={&(0x7f0000000240), 0x8}, 0x9120, 0x3, 0x6, 0x0, 0x0, 0x3f, 0x8}, r5, 0x4, r0, 0x3)
open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000480)='./file0\x00', &(0x7f0000000840)=[&(0x7f0000000600)='(\xe0\xf5\x00', &(0x7f0000000680)='/dev/loop#\x00', 0x0, &(0x7f0000000740)='\x00', &(0x7f00000007c0)='\x00', &(0x7f0000000800)='.cpuset\x1c\x00'], &(0x7f00000002c0)=[&(0x7f0000000040)='selfposix_acl_access&[\x00', &(0x7f0000000080)='/dev/loop#\x00', &(0x7f0000000100)='\\}#(,\x00', 0x0])

22:08:34 executing program 5:
perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mknod$loop(0x0, 0x0, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_procfs(0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x400000000803, 0x5f)
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0)
r3 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0)
ftruncate(r3, 0x200004)
sendfile(r1, r3, 0x0, 0x80001d00c0d0)
sendmsg$nl_route(r0, 0x0, 0x0)

22:08:34 executing program 5:
perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mknod$loop(0x0, 0x0, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_procfs(0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x400000000803, 0x5f)
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0)
r3 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0)
ftruncate(r3, 0x200004)
sendfile(r1, r3, 0x0, 0x80001d00c0d0)
sendmsg$nl_route(r0, 0x0, 0x0)

22:08:34 executing program 3:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r2)
socket$inet(0x10, 0x2, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffff7f00000000ffefa6f909f7", @ANYRES32=r4, @ANYBLOB="0000000bf1ffffff000000ff7f0001"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

22:08:34 executing program 2:
perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mknod$loop(0x0, 0x0, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_procfs(0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x400000000803, 0x5f)
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0)
r3 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0)
ftruncate(r3, 0x200004)
sendfile(r1, r3, 0x0, 0x80001d00c0d0)
sendmsg$nl_route(r0, 0x0, 0x0)

22:08:34 executing program 0:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00'], 0x1)
sendfile(r1, 0xffffffffffffffff, 0x0, 0xa198)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="000ffff0802bc8369ce73cb6fda400006224541f3780351157b252dd000000009154262a80420801444dd89f6bfd1510066a2128e6c04f112558c8bdac2ae91c22768a299a879ca5ea45ea6189f14f84644589436f645a783aac81cf5bc374f0ac00ef2728cfd3b16ae8a4ec80ebea0a7e8c20a5986a2ab75b34dc27b332714d36cba3ac62ec7100c22eb5d6638b8e1d01468ad3328280706dfc31700ea3fe507bfd0f8169b2187e8d804978b5a6397a1f471a29369349f8dcda480be4b38fb6862fc91512ff53f74ccb2674157b224da1961bbaf18cfe6f399d07607fc5fa"], 0xdf)
sendfile(r3, r2, 0x0, 0xa198)
open(0x0, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)

22:08:34 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x2002, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={0x0, @in6={{0xa, 0x4e21, 0xe, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0xc1}, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0)
write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x77, 0x2, 0x8}, 0xb)
sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={<r1=>0x0}, 0x0)
ptrace$setopts(0x7abb990919170921, r1, 0x10001, 0x111)
ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio1\x00', 0x81f403e8956afdaf, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = getpgrp(0x0)
r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x404000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={<r4=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000a00)={0x9, 0x108, 0xfa00, {r4, 0x66, "c2658c", "df70238469aac9d4907464f29c1754324ed168c706fc37ddb86672e2a6601aefe58eaa4d39b08d20f612d04d207f2343d2ef0308ea553d0430ba29fbd1dc0922dbcaffe9325eca46f1b70208570afbe8af8047e6d323df5ba61e374a095723090a2b2ad594c24f8b10ab07ef5ebaad20e82cf58266a90ccd892895df0f01996af75fb0340198b6d6433b54ece705126a96a1ea1801ff0feee26d343f116a9dd5af4f7f5be661a21a9c4ba9458882e4661dcf854d38884f7716dcb67cbfdeb20deddc905882a8c5af02f857e06c1e280f2a8b6c0c608b17c8c57c6984faf6023ade63b1fb0dd0156b61e28445fb337a427f119e9486e690fd06c39968a937154f"}}, 0x110)
setpriority(0x0, r2, 0x100)
read(r0, &(0x7f0000000340)=""/175, 0xaf)
r5 = getpid()
ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000500)=0x1ff)
r6 = getpid()
ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000580)=0x8)
sched_setscheduler(r6, 0x0, &(0x7f0000000380))
ioprio_set$pid(0x0, r6, 0x9)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r7=>0xffffffffffffffff})
r8 = dup(r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$VIDIOC_TRY_EXT_CTRLS(r8, 0xc0205649, &(0x7f0000000700)={0x990000, 0x3, 0x3b, r3, 0x0, &(0x7f00000006c0)={0x990901, 0x1000, [], @value=0x5}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r9=>0xffffffffffffffff})
r10 = dup(r9)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f0000000b40))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r11=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0xffff}, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)='\x00', r11}, 0x30)
perf_event_open(&(0x7f0000000880)={0x5, 0x70, 0x0, 0x0, 0x8, 0xc8, 0x0, 0x107fff, 0x400, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={&(0x7f0000000240), 0x8}, 0x9120, 0x3, 0x6, 0x0, 0x0, 0x3f, 0x8}, r5, 0x4, r0, 0x3)
open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000480)='./file0\x00', &(0x7f0000000840)=[&(0x7f0000000600)='(\xe0\xf5\x00', &(0x7f0000000680)='/dev/loop#\x00', 0x0, &(0x7f0000000740)='\x00', &(0x7f00000007c0)='\x00', &(0x7f0000000800)='.cpuset\x1c\x00'], &(0x7f00000002c0)=[&(0x7f0000000040)='selfposix_acl_access&[\x00', &(0x7f0000000080)='/dev/loop#\x00', &(0x7f0000000100)='\\}#(,\x00', 0x0])

[  744.751690][T23812] netlink: 2092 bytes leftover after parsing attributes in process `syz-executor.3'.
[  744.820965][   T27] audit: type=1804 audit(1583791714.772:194): pid=23811 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/442/file0" dev="sda1" ino=17093 res=1
[  744.848068][   T27] audit: type=1804 audit(1583791714.772:195): pid=23811 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/442/file0" dev="sda1" ino=17093 res=1
22:08:35 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = getpid()
getpriority(0x2, r2)

22:08:35 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x2002, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={0x0, @in6={{0xa, 0x4e21, 0xe, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0xc1}, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0)
write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x77, 0x2, 0x8}, 0xb)
sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={<r1=>0x0}, 0x0)
ptrace$setopts(0x7abb990919170921, r1, 0x10001, 0x111)
ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio1\x00', 0x81f403e8956afdaf, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = getpgrp(0x0)
r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x404000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={<r4=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000a00)={0x9, 0x108, 0xfa00, {r4, 0x66, "c2658c", "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"}}, 0x110)
setpriority(0x0, r2, 0x100)
read(r0, &(0x7f0000000340)=""/175, 0xaf)
r5 = getpid()
ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000500)=0x1ff)
r6 = getpid()
ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000580)=0x8)
sched_setscheduler(r6, 0x0, &(0x7f0000000380))
ioprio_set$pid(0x0, r6, 0x9)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r7=>0xffffffffffffffff})
r8 = dup(r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$VIDIOC_TRY_EXT_CTRLS(r8, 0xc0205649, &(0x7f0000000700)={0x990000, 0x3, 0x3b, r3, 0x0, &(0x7f00000006c0)={0x990901, 0x1000, [], @value=0x5}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r9=>0xffffffffffffffff})
r10 = dup(r9)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f0000000b40))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r11=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0xffff}, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)='\x00', r11}, 0x30)
perf_event_open(&(0x7f0000000880)={0x5, 0x70, 0x0, 0x0, 0x8, 0xc8, 0x0, 0x107fff, 0x400, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={&(0x7f0000000240), 0x8}, 0x9120, 0x3, 0x6, 0x0, 0x0, 0x3f, 0x8}, r5, 0x4, r0, 0x3)
open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000480)='./file0\x00', &(0x7f0000000840)=[&(0x7f0000000600)='(\xe0\xf5\x00', &(0x7f0000000440)='system\x00', &(0x7f0000000740)='\x00', &(0x7f00000007c0)='\x00', &(0x7f0000000800)='.cpuset\x1c\x00'], &(0x7f00000002c0)=[&(0x7f0000000040)='selfposix_acl_access&[\x00', &(0x7f0000000080)='/dev/loop#\x00', &(0x7f0000000100)='\\}#(,\x00', 0x0])

22:08:35 executing program 5:
perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mknod$loop(0x0, 0x0, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000803, 0x5f)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0)
r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0)
ftruncate(r2, 0x200004)
sendfile(r0, r2, 0x0, 0x80001d00c0d0)

22:08:35 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ptmx\x00', 0x0, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc))
r4 = syz_open_pts(r3, 0x0)
dup2(r2, r4)

22:08:37 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="6653405cb4aed12f0000000000ae47a825d86800278dcff47d0100005ae64f8f36460234432479aed75d492b41fd983f79e65199615607672c59957ab6ad602ea04db364bf68e6faa53367f05f4ad61421349f2f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca4fafa924edfe92175aaa1c4ecc7aeeb72e0d050feace34b52d9e5f755563698c7e24ab45f0866f15da7f9a6cd1c9ba50f5dd289d81466ec4af1d8bf2e2b773b5ca2e623ed2e65877a87b785aa8aa2eb0f07c986bf605c9335f4a", 0xc8}], 0x4, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff2d}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0)

22:08:37 executing program 0:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00'], 0x1)
sendfile(r1, 0xffffffffffffffff, 0x0, 0xa198)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="000ffff0802bc8369ce73cb6fda400006224541f3780351157b252dd000000009154262a80420801444dd89f6bfd1510066a2128e6c04f112558c8bdac2ae91c22768a299a879ca5ea45ea6189f14f84644589436f645a783aac81cf5bc374f0ac00ef2728cfd3b16ae8a4ec80ebea0a7e8c20a5986a2ab75b34dc27b332714d36cba3ac62ec7100c22eb5d6638b8e1d01468ad3328280706dfc31700ea3fe507bfd0f8169b2187e8d804978b5a6397a1f471a29369349f8dcda480be4b38fb6862fc91512ff53f74ccb2674157b224da1961bbaf18cfe6f399d07607fc5fa"], 0xdf)
sendfile(r3, r2, 0x0, 0xa198)
open(0x0, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)

22:08:37 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x2002, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={0x0, @in6={{0xa, 0x4e21, 0xe, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0xc1}, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0)
write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x77, 0x2, 0x8}, 0xb)
sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={<r1=>0x0}, 0x0)
ptrace$setopts(0x7abb990919170921, r1, 0x10001, 0x111)
ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio1\x00', 0x81f403e8956afdaf, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = getpgrp(0x0)
r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x404000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={<r4=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000a00)={0x9, 0x108, 0xfa00, {r4, 0x66, "c2658c", "df70238469aac9d4907464f29c1754324ed168c706fc37ddb86672e2a6601aefe58eaa4d39b08d20f612d04d207f2343d2ef0308ea553d0430ba29fbd1dc0922dbcaffe9325eca46f1b70208570afbe8af8047e6d323df5ba61e374a095723090a2b2ad594c24f8b10ab07ef5ebaad20e82cf58266a90ccd892895df0f01996af75fb0340198b6d6433b54ece705126a96a1ea1801ff0feee26d343f116a9dd5af4f7f5be661a21a9c4ba9458882e4661dcf854d38884f7716dcb67cbfdeb20deddc905882a8c5af02f857e06c1e280f2a8b6c0c608b17c8c57c6984faf6023ade63b1fb0dd0156b61e28445fb337a427f119e9486e690fd06c39968a937154f"}}, 0x110)
setpriority(0x0, r2, 0x100)
read(r0, &(0x7f0000000340)=""/175, 0xaf)
r5 = getpid()
ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000500)=0x1ff)
r6 = getpid()
ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000580)=0x8)
sched_setscheduler(r6, 0x0, &(0x7f0000000380))
ioprio_set$pid(0x0, r6, 0x9)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r7=>0xffffffffffffffff})
r8 = dup(r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$VIDIOC_TRY_EXT_CTRLS(r8, 0xc0205649, &(0x7f0000000700)={0x990000, 0x3, 0x3b, r3, 0x0, &(0x7f00000006c0)={0x990901, 0x1000, [], @value=0x5}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r9=>0xffffffffffffffff})
r10 = dup(r9)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f0000000b40))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r11=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0xffff}, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)='\x00', r11}, 0x30)
perf_event_open(&(0x7f0000000880)={0x5, 0x70, 0x0, 0x0, 0x8, 0xc8, 0x0, 0x107fff, 0x400, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={&(0x7f0000000240), 0x8}, 0x9120, 0x3, 0x6, 0x0, 0x0, 0x3f, 0x8}, r5, 0x4, r0, 0x3)
open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000480)='./file0\x00', &(0x7f0000000840)=[&(0x7f0000000600)='(\xe0\xf5\x00', &(0x7f0000000440)='system\x00', &(0x7f0000000740)='\x00', &(0x7f00000007c0)='\x00', &(0x7f0000000800)='.cpuset\x1c\x00'], &(0x7f00000002c0)=[&(0x7f0000000040)='selfposix_acl_access&[\x00', &(0x7f0000000080)='/dev/loop#\x00', &(0x7f0000000100)='\\}#(,\x00', 0x0])

22:08:37 executing program 2:
openat$vsock(0xffffffffffffff9c, &(0x7f0000001f80)='/dev/vsock\x00', 0x0, 0x0)
mremap(&(0x7f000029a000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f000016b000/0x3000)=nil)
mlockall(0x1)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)={0x0, <r0=>0x0})
ptrace$peeksig(0x4209, r0, &(0x7f0000000580)={0x0, 0x10}, 0x0)
r1 = getpid()
setpgid(r0, r1)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001700)='NLBL_UNLBL\x00')

22:08:37 executing program 5:
perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mknod$loop(0x0, 0x0, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000803, 0x5f)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0)
r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0)
ftruncate(r2, 0x200004)
sendfile(r0, r2, 0x0, 0x80001d00c0d0)

22:08:37 executing program 3:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r2)
socket$inet(0x10, 0x2, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffff7f00000000ffefa6f909f7", @ANYRES32=r4, @ANYBLOB="0000000bf1ffffff000000ff7f0001"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

[  747.614165][   T27] audit: type=1804 audit(1583791717.562:196): pid=23849 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/443/file0" dev="sda1" ino=17100 res=1
[  747.647281][T23862] netlink: 2092 bytes leftover after parsing attributes in process `syz-executor.3'.
22:08:37 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x2002, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={0x0, @in6={{0xa, 0x4e21, 0xe, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0xc1}, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0)
write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x77, 0x2, 0x8}, 0xb)
sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={<r1=>0x0}, 0x0)
ptrace$setopts(0x7abb990919170921, r1, 0x10001, 0x111)
ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio1\x00', 0x81f403e8956afdaf, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = getpgrp(0x0)
r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x404000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={<r4=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000a00)={0x9, 0x108, 0xfa00, {r4, 0x66, "c2658c", "df70238469aac9d4907464f29c1754324ed168c706fc37ddb86672e2a6601aefe58eaa4d39b08d20f612d04d207f2343d2ef0308ea553d0430ba29fbd1dc0922dbcaffe9325eca46f1b70208570afbe8af8047e6d323df5ba61e374a095723090a2b2ad594c24f8b10ab07ef5ebaad20e82cf58266a90ccd892895df0f01996af75fb0340198b6d6433b54ece705126a96a1ea1801ff0feee26d343f116a9dd5af4f7f5be661a21a9c4ba9458882e4661dcf854d38884f7716dcb67cbfdeb20deddc905882a8c5af02f857e06c1e280f2a8b6c0c608b17c8c57c6984faf6023ade63b1fb0dd0156b61e28445fb337a427f119e9486e690fd06c39968a937154f"}}, 0x110)
setpriority(0x0, r2, 0x100)
read(r0, &(0x7f0000000340)=""/175, 0xaf)
r5 = getpid()
ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000500)=0x1ff)
r6 = getpid()
ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000580)=0x8)
sched_setscheduler(r6, 0x0, &(0x7f0000000380))
ioprio_set$pid(0x0, r6, 0x9)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r7=>0xffffffffffffffff})
r8 = dup(r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$VIDIOC_TRY_EXT_CTRLS(r8, 0xc0205649, &(0x7f0000000700)={0x990000, 0x3, 0x3b, r3, 0x0, &(0x7f00000006c0)={0x990901, 0x1000, [], @value=0x5}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r9=>0xffffffffffffffff})
r10 = dup(r9)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f0000000b40))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r11=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0xffff}, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)='\x00', r11}, 0x30)
perf_event_open(&(0x7f0000000880)={0x5, 0x70, 0x0, 0x0, 0x8, 0xc8, 0x0, 0x107fff, 0x400, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={&(0x7f0000000240), 0x8}, 0x9120, 0x3, 0x6, 0x0, 0x0, 0x3f, 0x8}, r5, 0x4, r0, 0x3)
open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000480)='./file0\x00', &(0x7f0000000840)=[&(0x7f0000000600)='(\xe0\xf5\x00', &(0x7f0000000440)='system\x00', &(0x7f0000000740)='\x00', &(0x7f00000007c0)='\x00', &(0x7f0000000800)='.cpuset\x1c\x00'], &(0x7f00000002c0)=[&(0x7f0000000040)='selfposix_acl_access&[\x00', &(0x7f0000000080)='/dev/loop#\x00', &(0x7f0000000100)='\\}#(,\x00', 0x0])

[  747.704787][   T27] audit: type=1804 audit(1583791717.592:197): pid=23849 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/443/file0" dev="sda1" ino=17100 res=1
22:08:37 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x2002, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={0x0, @in6={{0xa, 0x4e21, 0xe, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0xc1}, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0)
write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x77, 0x2, 0x8}, 0xb)
sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={<r1=>0x0}, 0x0)
ptrace$setopts(0x7abb990919170921, r1, 0x10001, 0x111)
ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio1\x00', 0x81f403e8956afdaf, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = getpgrp(0x0)
r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x404000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={<r4=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000a00)={0x9, 0x108, 0xfa00, {r4, 0x66, "c2658c", "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"}}, 0x110)
setpriority(0x0, r2, 0x100)
read(r0, &(0x7f0000000340)=""/175, 0xaf)
r5 = getpid()
ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000500)=0x1ff)
r6 = getpid()
ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000580)=0x8)
sched_setscheduler(r6, 0x0, &(0x7f0000000380))
ioprio_set$pid(0x0, r6, 0x9)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r7=>0xffffffffffffffff})
r8 = dup(r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$VIDIOC_TRY_EXT_CTRLS(r8, 0xc0205649, &(0x7f0000000700)={0x990000, 0x3, 0x3b, r3, 0x0, &(0x7f00000006c0)={0x990901, 0x1000, [], @value=0x5}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r9=>0xffffffffffffffff})
r10 = dup(r9)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f0000000b40))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r11=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0xffff}, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)='\x00', r11}, 0x30)
perf_event_open(&(0x7f0000000880)={0x5, 0x70, 0x0, 0x0, 0x8, 0xc8, 0x0, 0x107fff, 0x400, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={&(0x7f0000000240), 0x8}, 0x9120, 0x3, 0x6, 0x0, 0x0, 0x3f, 0x8}, r5, 0x4, r0, 0x3)
open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000480)='./file0\x00', &(0x7f0000000840)=[&(0x7f0000000600)='(\xe0\xf5\x00', 0x0, &(0x7f0000000440)='system\x00', &(0x7f0000000740)='\x00', &(0x7f00000007c0)='\x00', &(0x7f0000000800)='.cpuset\x1c\x00'], &(0x7f00000002c0)=[&(0x7f0000000040)='selfposix_acl_access&[\x00', &(0x7f0000000080)='/dev/loop#\x00', &(0x7f0000000100)='\\}#(,\x00', 0x0])

22:08:37 executing program 5:
perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mknod$loop(0x0, 0x0, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000803, 0x5f)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0)
r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0)
ftruncate(r2, 0x200004)

22:08:38 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x2002, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={0x0, @in6={{0xa, 0x4e21, 0xe, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0xc1}, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0)
write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x77, 0x2, 0x8}, 0xb)
sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={<r1=>0x0}, 0x0)
ptrace$setopts(0x7abb990919170921, r1, 0x10001, 0x111)
ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio1\x00', 0x81f403e8956afdaf, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = getpgrp(0x0)
r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x404000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={<r4=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000a00)={0x9, 0x108, 0xfa00, {r4, 0x66, "c2658c", "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"}}, 0x110)
setpriority(0x0, r2, 0x100)
read(r0, &(0x7f0000000340)=""/175, 0xaf)
r5 = getpid()
ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000500)=0x1ff)
r6 = getpid()
ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000580)=0x8)
sched_setscheduler(r6, 0x0, &(0x7f0000000380))
ioprio_set$pid(0x0, r6, 0x9)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r7=>0xffffffffffffffff})
r8 = dup(r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$VIDIOC_TRY_EXT_CTRLS(r8, 0xc0205649, &(0x7f0000000700)={0x990000, 0x3, 0x3b, r3, 0x0, &(0x7f00000006c0)={0x990901, 0x1000, [], @value=0x5}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r9=>0xffffffffffffffff})
r10 = dup(r9)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f0000000b40))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r11=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0xffff}, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)='\x00', r11}, 0x30)
perf_event_open(&(0x7f0000000880)={0x5, 0x70, 0x0, 0x0, 0x8, 0xc8, 0x0, 0x107fff, 0x400, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={&(0x7f0000000240), 0x8}, 0x9120, 0x3, 0x6, 0x0, 0x0, 0x3f, 0x8}, r5, 0x4, r0, 0x3)
open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000480)='./file0\x00', &(0x7f0000000840)=[&(0x7f0000000600)='(\xe0\xf5\x00', 0x0, &(0x7f0000000440)='system\x00', &(0x7f0000000740)='\x00', &(0x7f00000007c0)='\x00', &(0x7f0000000800)='.cpuset\x1c\x00'], &(0x7f00000002c0)=[&(0x7f0000000040)='selfposix_acl_access&[\x00', &(0x7f0000000080)='/dev/loop#\x00', &(0x7f0000000100)='\\}#(,\x00', 0x0])

22:08:38 executing program 0:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00'], 0x1)
sendfile(r1, r0, 0x0, 0xa198)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="000ffff0802bc8369ce73cb6fda400006224541f3780351157b252dd000000009154262a80420801444dd89f6bfd1510066a2128e6c04f112558c8bdac2ae91c22768a299a879ca5ea45ea6189f14f84644589436f645a783aac81cf5bc374f0ac00ef2728cfd3b16ae8a4ec80ebea0a7e8c20a5986a2ab75b34dc27b332714d36cba3ac62ec7100c22eb5d6638b8e1d01468ad3328280706dfc31700ea3fe507bfd0f8169b2187e8d804978b5a6397a1f471a29369349f8dcda480be4b38fb6862fc91512ff53f74ccb2674157b224da1961bbaf18cfe6f399d07607fc5fa"], 0xdf)
sendfile(r3, r2, 0x0, 0xa198)
open(0x0, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)

22:08:38 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x2002, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={0x0, @in6={{0xa, 0x4e21, 0xe, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0xc1}, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0)
write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x77, 0x2, 0x8}, 0xb)
sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={<r1=>0x0}, 0x0)
ptrace$setopts(0x7abb990919170921, r1, 0x10001, 0x111)
ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio1\x00', 0x81f403e8956afdaf, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = getpgrp(0x0)
r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x404000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={<r4=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000a00)={0x9, 0x108, 0xfa00, {r4, 0x66, "c2658c", "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"}}, 0x110)
setpriority(0x0, r2, 0x100)
read(r0, &(0x7f0000000340)=""/175, 0xaf)
r5 = getpid()
ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000500)=0x1ff)
r6 = getpid()
ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000580)=0x8)
sched_setscheduler(r6, 0x0, &(0x7f0000000380))
ioprio_set$pid(0x0, r6, 0x9)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r7=>0xffffffffffffffff})
r8 = dup(r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$VIDIOC_TRY_EXT_CTRLS(r8, 0xc0205649, &(0x7f0000000700)={0x990000, 0x3, 0x3b, r3, 0x0, &(0x7f00000006c0)={0x990901, 0x1000, [], @value=0x5}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r9=>0xffffffffffffffff})
r10 = dup(r9)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f0000000b40))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r11=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0xffff}, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)='\x00', r11}, 0x30)
perf_event_open(&(0x7f0000000880)={0x5, 0x70, 0x0, 0x0, 0x8, 0xc8, 0x0, 0x107fff, 0x400, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={&(0x7f0000000240), 0x8}, 0x9120, 0x3, 0x6, 0x0, 0x0, 0x3f, 0x8}, r5, 0x4, r0, 0x3)
open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000480)='./file0\x00', &(0x7f0000000840)=[&(0x7f0000000600)='(\xe0\xf5\x00', 0x0, &(0x7f0000000440)='system\x00', &(0x7f0000000740)='\x00', &(0x7f00000007c0)='\x00', &(0x7f0000000800)='.cpuset\x1c\x00'], &(0x7f00000002c0)=[&(0x7f0000000040)='selfposix_acl_access&[\x00', &(0x7f0000000080)='/dev/loop#\x00', &(0x7f0000000100)='\\}#(,\x00', 0x0])

[  748.315977][   T27] audit: type=1804 audit(1583791718.262:198): pid=23901 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/444/file0" dev="sda1" ino=17097 res=1
[  748.408098][   T27] audit: type=1804 audit(1583791718.292:199): pid=23901 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/444/file0" dev="sda1" ino=17097 res=1
22:08:40 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="6653405cb4aed12f0000000000ae47a825d86800278dcff47d0100005ae64f8f36460234432479aed75d492b41fd983f79e65199615607672c59957ab6ad602ea04db364bf68e6faa53367f05f4ad61421349f2f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca4fafa924edfe92175aaa1c4ecc7aeeb72e0d050feace34b52d9e5f755563698c7e24ab45f0866f15da7f9a6cd1c9ba50f5dd289d81466ec4af1d8bf2e2b773b5ca2e623ed2e65877a87b785aa8aa2eb0f07c986bf605c9335f4a", 0xc8}], 0x4, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff2d}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, 0x0, 0x0, 0x0)

22:08:40 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x2002, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={0x0, @in6={{0xa, 0x4e21, 0xe, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0xc1}, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0)
write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x77, 0x2, 0x8}, 0xb)
sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={<r1=>0x0}, 0x0)
ptrace$setopts(0x7abb990919170921, r1, 0x10001, 0x111)
ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio1\x00', 0x81f403e8956afdaf, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = getpgrp(0x0)
r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x404000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={<r4=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000a00)={0x9, 0x108, 0xfa00, {r4, 0x66, "c2658c", "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"}}, 0x110)
setpriority(0x0, r2, 0x100)
read(r0, &(0x7f0000000340)=""/175, 0xaf)
r5 = getpid()
ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000500)=0x1ff)
r6 = getpid()
ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000580)=0x8)
sched_setscheduler(r6, 0x0, &(0x7f0000000380))
ioprio_set$pid(0x0, r6, 0x9)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r7=>0xffffffffffffffff})
r8 = dup(r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$VIDIOC_TRY_EXT_CTRLS(r8, 0xc0205649, &(0x7f0000000700)={0x990000, 0x3, 0x3b, r3, 0x0, &(0x7f00000006c0)={0x990901, 0x1000, [], @value=0x5}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r9=>0xffffffffffffffff})
r10 = dup(r9)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f0000000b40))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r11=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0xffff}, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)='\x00', r11}, 0x30)
perf_event_open(&(0x7f0000000880)={0x5, 0x70, 0x0, 0x0, 0x8, 0xc8, 0x0, 0x107fff, 0x400, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={&(0x7f0000000240), 0x8}, 0x9120, 0x3, 0x6, 0x0, 0x0, 0x3f, 0x8}, r5, 0x4, r0, 0x3)
open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000480)='./file0\x00', &(0x7f0000000840)=[&(0x7f0000000680)='/dev/loop#\x00', &(0x7f0000000440)='system\x00', &(0x7f0000000740)='\x00', &(0x7f00000007c0)='\x00', &(0x7f0000000800)='.cpuset\x1c\x00'], &(0x7f00000002c0)=[&(0x7f0000000040)='selfposix_acl_access&[\x00', &(0x7f0000000080)='/dev/loop#\x00', &(0x7f0000000100)='\\}#(,\x00', 0x0])

22:08:40 executing program 3:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r2)
socket$inet(0x10, 0x2, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffff7f00000000ffefa6f909f7", @ANYRES32=r4, @ANYBLOB="0000000bf1ffffff000000ff7f0001"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

22:08:40 executing program 2:
openat$vsock(0xffffffffffffff9c, &(0x7f0000001f80)='/dev/vsock\x00', 0x0, 0x0)
mremap(&(0x7f000029a000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f000016b000/0x3000)=nil)
mlockall(0x1)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)={0x0, <r0=>0x0})
ptrace$peeksig(0x4209, r0, &(0x7f0000000580)={0x0, 0x10}, 0x0)
r1 = getpid()
setpgid(r0, r1)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001700)='NLBL_UNLBL\x00')

22:08:40 executing program 0:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00'], 0x1)
sendfile(r1, r0, 0x0, 0xa198)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="000ffff0802bc8369ce73cb6fda400006224541f3780351157b252dd000000009154262a80420801444dd89f6bfd1510066a2128e6c04f112558c8bdac2ae91c22768a299a879ca5ea45ea6189f14f84644589436f645a783aac81cf5bc374f0ac00ef2728cfd3b16ae8a4ec80ebea0a7e8c20a5986a2ab75b34dc27b332714d36cba3ac62ec7100c22eb5d6638b8e1d01468ad3328280706dfc31700ea3fe507bfd0f8169b2187e8d804978b5a6397a1f471a29369349f8dcda480be4b38fb6862fc91512ff53f74ccb2674157b224da1961bbaf18cfe6f399d07607fc5fa"], 0xdf)
sendfile(r3, r2, 0x0, 0xa198)
open(0x0, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)

22:08:40 executing program 5:
perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mknod$loop(0x0, 0x0, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000803, 0x5f)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0)
r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0)
ftruncate(r2, 0x200004)

[  750.737608][T23928] netlink: 2092 bytes leftover after parsing attributes in process `syz-executor.3'.
[  750.824114][   T27] audit: type=1804 audit(1583791720.772:200): pid=23936 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/445/file0" dev="sda1" ino=17121 res=1
22:08:40 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x2002, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={0x0, @in6={{0xa, 0x4e21, 0xe, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0xc1}, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0)
write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x77, 0x2, 0x8}, 0xb)
sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={<r1=>0x0}, 0x0)
ptrace$setopts(0x7abb990919170921, r1, 0x10001, 0x111)
ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio1\x00', 0x81f403e8956afdaf, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = getpgrp(0x0)
r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x404000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={<r4=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000a00)={0x9, 0x108, 0xfa00, {r4, 0x66, "c2658c", "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"}}, 0x110)
setpriority(0x0, r2, 0x100)
read(r0, &(0x7f0000000340)=""/175, 0xaf)
r5 = getpid()
ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000500)=0x1ff)
r6 = getpid()
ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000580)=0x8)
sched_setscheduler(r6, 0x0, &(0x7f0000000380))
ioprio_set$pid(0x0, r6, 0x9)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r7=>0xffffffffffffffff})
r8 = dup(r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$VIDIOC_TRY_EXT_CTRLS(r8, 0xc0205649, &(0x7f0000000700)={0x990000, 0x3, 0x3b, r3, 0x0, &(0x7f00000006c0)={0x990901, 0x1000, [], @value=0x5}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r9=>0xffffffffffffffff})
r10 = dup(r9)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f0000000b40))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r11=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0xffff}, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)='\x00', r11}, 0x30)
perf_event_open(&(0x7f0000000880)={0x5, 0x70, 0x0, 0x0, 0x8, 0xc8, 0x0, 0x107fff, 0x400, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={&(0x7f0000000240), 0x8}, 0x9120, 0x3, 0x6, 0x0, 0x0, 0x3f, 0x8}, r5, 0x4, r0, 0x3)
open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000480)='./file0\x00', &(0x7f0000000840)=[&(0x7f0000000680)='/dev/loop#\x00', &(0x7f0000000440)='system\x00', &(0x7f0000000740)='\x00', &(0x7f00000007c0)='\x00', &(0x7f0000000800)='.cpuset\x1c\x00'], &(0x7f00000002c0)=[&(0x7f0000000040)='selfposix_acl_access&[\x00', &(0x7f0000000080)='/dev/loop#\x00', &(0x7f0000000100)='\\}#(,\x00', 0x0])

[  750.854632][   T27] audit: type=1804 audit(1583791720.782:201): pid=23936 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/445/file0" dev="sda1" ino=17121 res=1
22:08:40 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x2002, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={0x0, @in6={{0xa, 0x4e21, 0xe, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0xc1}, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0)
write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x77, 0x2, 0x8}, 0xb)
sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={<r1=>0x0}, 0x0)
ptrace$setopts(0x7abb990919170921, r1, 0x10001, 0x111)
ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio1\x00', 0x81f403e8956afdaf, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = getpgrp(0x0)
r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x404000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={<r4=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000a00)={0x9, 0x108, 0xfa00, {r4, 0x66, "c2658c", "df70238469aac9d4907464f29c1754324ed168c706fc37ddb86672e2a6601aefe58eaa4d39b08d20f612d04d207f2343d2ef0308ea553d0430ba29fbd1dc0922dbcaffe9325eca46f1b70208570afbe8af8047e6d323df5ba61e374a095723090a2b2ad594c24f8b10ab07ef5ebaad20e82cf58266a90ccd892895df0f01996af75fb0340198b6d6433b54ece705126a96a1ea1801ff0feee26d343f116a9dd5af4f7f5be661a21a9c4ba9458882e4661dcf854d38884f7716dcb67cbfdeb20deddc905882a8c5af02f857e06c1e280f2a8b6c0c608b17c8c57c6984faf6023ade63b1fb0dd0156b61e28445fb337a427f119e9486e690fd06c39968a937154f"}}, 0x110)
setpriority(0x0, r2, 0x100)
read(r0, &(0x7f0000000340)=""/175, 0xaf)
r5 = getpid()
ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000500)=0x1ff)
r6 = getpid()
ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000580)=0x8)
sched_setscheduler(r6, 0x0, &(0x7f0000000380))
ioprio_set$pid(0x0, r6, 0x9)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r7=>0xffffffffffffffff})
r8 = dup(r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$VIDIOC_TRY_EXT_CTRLS(r8, 0xc0205649, &(0x7f0000000700)={0x990000, 0x3, 0x3b, r3, 0x0, &(0x7f00000006c0)={0x990901, 0x1000, [], @value=0x5}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r9=>0xffffffffffffffff})
r10 = dup(r9)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f0000000b40))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r11=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0xffff}, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)='\x00', r11}, 0x30)
perf_event_open(&(0x7f0000000880)={0x5, 0x70, 0x0, 0x0, 0x8, 0xc8, 0x0, 0x107fff, 0x400, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={&(0x7f0000000240), 0x8}, 0x9120, 0x3, 0x6, 0x0, 0x0, 0x3f, 0x8}, r5, 0x4, r0, 0x3)
open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000480)='./file0\x00', &(0x7f0000000840)=[&(0x7f0000000680)='/dev/loop#\x00', &(0x7f0000000440)='system\x00', &(0x7f0000000740)='\x00', &(0x7f00000007c0)='\x00', &(0x7f0000000800)='.cpuset\x1c\x00'], &(0x7f00000002c0)=[&(0x7f0000000040)='selfposix_acl_access&[\x00', &(0x7f0000000080)='/dev/loop#\x00', &(0x7f0000000100)='\\}#(,\x00', 0x0])

22:08:41 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x2002, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={0x0, @in6={{0xa, 0x4e21, 0xe, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0xc1}, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0)
write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x77, 0x2, 0x8}, 0xb)
sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={<r1=>0x0}, 0x0)
ptrace$setopts(0x7abb990919170921, r1, 0x10001, 0x111)
ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio1\x00', 0x81f403e8956afdaf, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = getpgrp(0x0)
r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x404000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={<r4=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000a00)={0x9, 0x108, 0xfa00, {r4, 0x66, "c2658c", "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"}}, 0x110)
setpriority(0x0, r2, 0x100)
read(r0, &(0x7f0000000340)=""/175, 0xaf)
r5 = getpid()
ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000500)=0x1ff)
r6 = getpid()
ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000580)=0x8)
sched_setscheduler(r6, 0x0, &(0x7f0000000380))
ioprio_set$pid(0x0, r6, 0x9)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r7=>0xffffffffffffffff})
r8 = dup(r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$VIDIOC_TRY_EXT_CTRLS(r8, 0xc0205649, &(0x7f0000000700)={0x990000, 0x3, 0x3b, r3, 0x0, &(0x7f00000006c0)={0x990901, 0x1000, [], @value=0x5}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r9=>0xffffffffffffffff})
r10 = dup(r9)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f0000000b40))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r11=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0xffff}, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)='\x00', r11}, 0x30)
perf_event_open(&(0x7f0000000880)={0x5, 0x70, 0x0, 0x0, 0x8, 0xc8, 0x0, 0x107fff, 0x400, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={&(0x7f0000000240), 0x8}, 0x9120, 0x3, 0x6, 0x0, 0x0, 0x3f, 0x8}, r5, 0x4, r0, 0x3)
open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000480)='./file0\x00', &(0x7f0000000840)=[0x0, &(0x7f0000000680)='/dev/loop#\x00', &(0x7f0000000440)='system\x00', &(0x7f0000000740)='\x00', &(0x7f00000007c0)='\x00', &(0x7f0000000800)='.cpuset\x1c\x00'], &(0x7f00000002c0)=[&(0x7f0000000040)='selfposix_acl_access&[\x00', &(0x7f0000000080)='/dev/loop#\x00', &(0x7f0000000100)='\\}#(,\x00', 0x0])

22:08:41 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0x4004ae8b, 0x71b000)

22:08:41 executing program 0:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00'], 0x1)
sendfile(r1, r0, 0x0, 0xa198)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="000ffff0802bc8369ce73cb6fda400006224541f3780351157b252dd000000009154262a80420801444dd89f6bfd1510066a2128e6c04f112558c8bdac2ae91c22768a299a879ca5ea45ea6189f14f84644589436f645a783aac81cf5bc374f0ac00ef2728cfd3b16ae8a4ec80ebea0a7e8c20a5986a2ab75b34dc27b332714d36cba3ac62ec7100c22eb5d6638b8e1d01468ad3328280706dfc31700ea3fe507bfd0f8169b2187e8d804978b5a6397a1f471a29369349f8dcda480be4b38fb6862fc91512ff53f74ccb2674157b224da1961bbaf18cfe6f399d07607fc5fa"], 0xdf)
sendfile(r3, r2, 0x0, 0xa198)
open(0x0, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)

22:08:41 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x2002, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={0x0, @in6={{0xa, 0x4e21, 0xe, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0xc1}, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0)
write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x77, 0x2, 0x8}, 0xb)
sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={<r1=>0x0}, 0x0)
ptrace$setopts(0x7abb990919170921, r1, 0x10001, 0x111)
ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio1\x00', 0x81f403e8956afdaf, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = getpgrp(0x0)
r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x404000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={<r4=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000a00)={0x9, 0x108, 0xfa00, {r4, 0x66, "c2658c", "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"}}, 0x110)
setpriority(0x0, r2, 0x100)
read(r0, &(0x7f0000000340)=""/175, 0xaf)
r5 = getpid()
ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000500)=0x1ff)
r6 = getpid()
ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000580)=0x8)
sched_setscheduler(r6, 0x0, &(0x7f0000000380))
ioprio_set$pid(0x0, r6, 0x9)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r7=>0xffffffffffffffff})
r8 = dup(r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$VIDIOC_TRY_EXT_CTRLS(r8, 0xc0205649, &(0x7f0000000700)={0x990000, 0x3, 0x3b, r3, 0x0, &(0x7f00000006c0)={0x990901, 0x1000, [], @value=0x5}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r9=>0xffffffffffffffff})
r10 = dup(r9)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f0000000b40))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r11=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0xffff}, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)='\x00', r11}, 0x30)
perf_event_open(&(0x7f0000000880)={0x5, 0x70, 0x0, 0x0, 0x8, 0xc8, 0x0, 0x107fff, 0x400, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={&(0x7f0000000240), 0x8}, 0x9120, 0x3, 0x6, 0x0, 0x0, 0x3f, 0x8}, r5, 0x4, r0, 0x3)
open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000480)='./file0\x00', &(0x7f0000000840)=[0x0, &(0x7f0000000680)='/dev/loop#\x00', &(0x7f0000000440)='system\x00', &(0x7f0000000740)='\x00', &(0x7f00000007c0)='\x00', &(0x7f0000000800)='.cpuset\x1c\x00'], &(0x7f00000002c0)=[&(0x7f0000000040)='selfposix_acl_access&[\x00', &(0x7f0000000080)='/dev/loop#\x00', &(0x7f0000000100)='\\}#(,\x00', 0x0])

[  751.576710][   T27] audit: type=1804 audit(1583791721.522:202): pid=23976 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/446/file0" dev="sda1" ino=17128 res=1
[  751.617429][   T27] audit: type=1804 audit(1583791721.532:203): pid=23976 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/446/file0" dev="sda1" ino=17128 res=1
22:08:43 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="6653405cb4aed12f0000000000ae47a825d86800278dcff47d0100005ae64f8f36460234432479aed75d492b41fd983f79e65199615607672c59957ab6ad602ea04db364bf68e6faa53367f05f4ad61421349f2f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca4fafa924edfe92175aaa1c4ecc7aeeb72e0d050feace34b52d9e5f755563698c7e24ab45f0866f15da7f9a6cd1c9ba50f5dd289d81466ec4af1d8bf2e2b773b5ca2e623ed2e65877a87b785aa8aa2eb0f07c986bf605c9335f4a", 0xc8}], 0x4, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff2d}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, 0x0, 0x0, 0x0)

22:08:43 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x2, 0x3, 0x32c, 0x0, 0x1e8, 0x1e8, 0x0, 0x1e8, 0x298, 0x298, 0x298, 0x298, 0x298, 0x3, 0x0, {[{{@ip={@multicast1, @remote, 0x0, 0x0, 'syzkaller0\x00', 'netpci0\x00'}, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'ip6tnl0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@ip={@remote, @empty, 0x0, 0x0, '\x00', 'ipvlan0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x388)

22:08:43 executing program 3:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r2)
socket$inet(0x10, 0x2, 0x0)
bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080025944eeba71a4976e252922c000000002aba000000012e0b3836005404b0e0301a4ce875f2e0ff5f163ee340b7679500800000000000000101013c5891039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffff7f00000000ffefa6f909f7", @ANYRES32=r3, @ANYBLOB="0000000bf1ffffff000000ff7f0001"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

22:08:43 executing program 5:
perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mknod$loop(0x0, 0x0, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000803, 0x5f)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0)
r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0)
ftruncate(r2, 0x200004)

22:08:43 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x2002, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={0x0, @in6={{0xa, 0x4e21, 0xe, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0xc1}, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0)
write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x77, 0x2, 0x8}, 0xb)
sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={<r1=>0x0}, 0x0)
ptrace$setopts(0x7abb990919170921, r1, 0x10001, 0x111)
ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio1\x00', 0x81f403e8956afdaf, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = getpgrp(0x0)
r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x404000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={<r4=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000a00)={0x9, 0x108, 0xfa00, {r4, 0x66, "c2658c", "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"}}, 0x110)
setpriority(0x0, r2, 0x100)
read(r0, &(0x7f0000000340)=""/175, 0xaf)
r5 = getpid()
ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000500)=0x1ff)
r6 = getpid()
ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000580)=0x8)
sched_setscheduler(r6, 0x0, &(0x7f0000000380))
ioprio_set$pid(0x0, r6, 0x9)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r7=>0xffffffffffffffff})
r8 = dup(r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$VIDIOC_TRY_EXT_CTRLS(r8, 0xc0205649, &(0x7f0000000700)={0x990000, 0x3, 0x3b, r3, 0x0, &(0x7f00000006c0)={0x990901, 0x1000, [], @value=0x5}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r9=>0xffffffffffffffff})
r10 = dup(r9)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f0000000b40))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r11=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0xffff}, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)='\x00', r11}, 0x30)
perf_event_open(&(0x7f0000000880)={0x5, 0x70, 0x0, 0x0, 0x8, 0xc8, 0x0, 0x107fff, 0x400, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={&(0x7f0000000240), 0x8}, 0x9120, 0x3, 0x6, 0x0, 0x0, 0x3f, 0x8}, r5, 0x4, r0, 0x3)
open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000480)='./file0\x00', &(0x7f0000000840)=[0x0, &(0x7f0000000680)='/dev/loop#\x00', &(0x7f0000000440)='system\x00', &(0x7f0000000740)='\x00', &(0x7f00000007c0)='\x00', &(0x7f0000000800)='.cpuset\x1c\x00'], &(0x7f00000002c0)=[&(0x7f0000000040)='selfposix_acl_access&[\x00', &(0x7f0000000080)='/dev/loop#\x00', &(0x7f0000000100)='\\}#(,\x00', 0x0])

22:08:43 executing program 0:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00'], 0x1)
sendfile(r1, r0, 0x0, 0xa198)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="000ffff0802bc8369ce73cb6fda400006224541f3780351157b252dd000000009154262a80420801444dd89f6bfd1510066a2128e6c04f112558c8bdac2ae91c22768a299a879ca5ea45ea6189f14f84644589436f645a783aac81cf5bc374f0ac00ef2728cfd3b16ae8a4ec80ebea0a7e8c20a5986a2ab75b34dc27b332714d36cba3ac62ec7100c22eb5d6638b8e1d01468ad3328280706dfc31700ea3fe507bfd0f8169b2187e8d804978b5a6397a1f471a29369349f8dcda480be4b38fb6862fc91512ff53f74ccb2674157b224da1961bbaf18cfe6f399d07607fc5fa"], 0xdf)
sendfile(r3, r2, 0x0, 0xa198)
open(0x0, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)

22:08:43 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
clone(0x4d80c480, 0x0, 0x0, 0x0, 0x0)
statx(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
wait4(0x0, 0x0, 0x0, 0x0)

[  753.826635][T23994] netlink: 2092 bytes leftover after parsing attributes in process `syz-executor.3'.
[  753.916622][T24003] ptrace attach of "/root/syz-executor.2"[24002] was attempted by "/root/syz-executor.2"[24003]
[  753.929153][   T27] audit: type=1804 audit(1583791723.882:204): pid=24005 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/447/file0" dev="sda1" ino=17140 res=1
22:08:43 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x2002, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={0x0, @in6={{0xa, 0x4e21, 0xe, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0xc1}, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0)
write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x77, 0x2, 0x8}, 0xb)
sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={<r1=>0x0}, 0x0)
ptrace$setopts(0x7abb990919170921, r1, 0x10001, 0x111)
ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio1\x00', 0x81f403e8956afdaf, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = getpgrp(0x0)
r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x404000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={<r4=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000a00)={0x9, 0x108, 0xfa00, {r4, 0x66, "c2658c", "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"}}, 0x110)
setpriority(0x0, r2, 0x100)
read(r0, &(0x7f0000000340)=""/175, 0xaf)
r5 = getpid()
ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000500)=0x1ff)
r6 = getpid()
ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000580)=0x8)
sched_setscheduler(r6, 0x0, &(0x7f0000000380))
ioprio_set$pid(0x0, r6, 0x9)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r7=>0xffffffffffffffff})
r8 = dup(r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$VIDIOC_TRY_EXT_CTRLS(r8, 0xc0205649, &(0x7f0000000700)={0x990000, 0x3, 0x3b, r3, 0x0, &(0x7f00000006c0)={0x990901, 0x1000, [], @value=0x5}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r9=>0xffffffffffffffff})
r10 = dup(r9)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f0000000b40))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r11=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0xffff}, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)='\x00', r11}, 0x30)
perf_event_open(&(0x7f0000000880)={0x5, 0x70, 0x0, 0x0, 0x8, 0xc8, 0x0, 0x107fff, 0x400, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={&(0x7f0000000240), 0x8}, 0x9120, 0x3, 0x6, 0x0, 0x0, 0x3f, 0x8}, r5, 0x4, r0, 0x3)
open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000480)='./file0\x00', &(0x7f0000000840)=[&(0x7f0000000600)='(\xe0\xf5\x00', &(0x7f0000000680)='/dev/loop#\x00', &(0x7f0000000440)='system\x00', &(0x7f0000000740)='\x00', &(0x7f00000007c0)='\x00', &(0x7f0000000800)='.cpuset\x1c\x00'], 0x0)

[  753.965450][T24002] IPVS: ftp: loaded support on port[0] = 21
[  753.972670][   T27] audit: type=1804 audit(1583791723.902:205): pid=24005 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/447/file0" dev="sda1" ino=17140 res=1
[  754.038742][T24003] IPVS: ftp: loaded support on port[0] = 21
22:08:44 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
clone(0x4d80c480, 0x0, 0x0, 0x0, 0x0)
statx(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
wait4(0x0, 0x0, 0x0, 0x0)

[  754.138569][   T21] tipc: TX() has been purged, node left!
22:08:44 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x2002, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={0x0, @in6={{0xa, 0x4e21, 0xe, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0xc1}, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0)
write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x77, 0x2, 0x8}, 0xb)
sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={<r1=>0x0}, 0x0)
ptrace$setopts(0x7abb990919170921, r1, 0x10001, 0x111)
ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio1\x00', 0x81f403e8956afdaf, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = getpgrp(0x0)
r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x404000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={<r4=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000a00)={0x9, 0x108, 0xfa00, {r4, 0x66, "c2658c", "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"}}, 0x110)
setpriority(0x0, r2, 0x100)
read(r0, &(0x7f0000000340)=""/175, 0xaf)
r5 = getpid()
ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000500)=0x1ff)
r6 = getpid()
ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000580)=0x8)
sched_setscheduler(r6, 0x0, &(0x7f0000000380))
ioprio_set$pid(0x0, r6, 0x9)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r7=>0xffffffffffffffff})
r8 = dup(r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$VIDIOC_TRY_EXT_CTRLS(r8, 0xc0205649, &(0x7f0000000700)={0x990000, 0x3, 0x3b, r3, 0x0, &(0x7f00000006c0)={0x990901, 0x1000, [], @value=0x5}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r9=>0xffffffffffffffff})
r10 = dup(r9)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f0000000b40))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r11=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0xffff}, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)='\x00', r11}, 0x30)
perf_event_open(&(0x7f0000000880)={0x5, 0x70, 0x0, 0x0, 0x8, 0xc8, 0x0, 0x107fff, 0x400, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={&(0x7f0000000240), 0x8}, 0x9120, 0x3, 0x6, 0x0, 0x0, 0x3f, 0x8}, r5, 0x4, r0, 0x3)
open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000480)='./file0\x00', &(0x7f0000000840)=[&(0x7f0000000600)='(\xe0\xf5\x00', &(0x7f0000000680)='/dev/loop#\x00', &(0x7f0000000440)='system\x00', &(0x7f0000000740)='\x00', &(0x7f00000007c0)='\x00', &(0x7f0000000800)='.cpuset\x1c\x00'], 0x0)

[  754.242144][T24023] IPVS: ftp: loaded support on port[0] = 21
[  754.261307][T24024] ptrace attach of "/root/syz-executor.2"[24023] was attempted by "/root/syz-executor.2"[24024]
22:08:44 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet6(0xa, 0x1, 0x8010000400000084)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
shutdown(r2, 0x0)
setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x8330}, 0x8)
sendto$inet6(r2, &(0x7f0000000180)="bd", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
close(r2)

22:08:44 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x2002, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={0x0, @in6={{0xa, 0x4e21, 0xe, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0xc1}, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0)
write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x77, 0x2, 0x8}, 0xb)
sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={<r1=>0x0}, 0x0)
ptrace$setopts(0x7abb990919170921, r1, 0x10001, 0x111)
ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio1\x00', 0x81f403e8956afdaf, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = getpgrp(0x0)
r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x404000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={<r4=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000a00)={0x9, 0x108, 0xfa00, {r4, 0x66, "c2658c", "df70238469aac9d4907464f29c1754324ed168c706fc37ddb86672e2a6601aefe58eaa4d39b08d20f612d04d207f2343d2ef0308ea553d0430ba29fbd1dc0922dbcaffe9325eca46f1b70208570afbe8af8047e6d323df5ba61e374a095723090a2b2ad594c24f8b10ab07ef5ebaad20e82cf58266a90ccd892895df0f01996af75fb0340198b6d6433b54ece705126a96a1ea1801ff0feee26d343f116a9dd5af4f7f5be661a21a9c4ba9458882e4661dcf854d38884f7716dcb67cbfdeb20deddc905882a8c5af02f857e06c1e280f2a8b6c0c608b17c8c57c6984faf6023ade63b1fb0dd0156b61e28445fb337a427f119e9486e690fd06c39968a937154f"}}, 0x110)
setpriority(0x0, r2, 0x100)
read(r0, &(0x7f0000000340)=""/175, 0xaf)
r5 = getpid()
ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000500)=0x1ff)
r6 = getpid()
ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000580)=0x8)
sched_setscheduler(r6, 0x0, &(0x7f0000000380))
ioprio_set$pid(0x0, r6, 0x9)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r7=>0xffffffffffffffff})
r8 = dup(r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$VIDIOC_TRY_EXT_CTRLS(r8, 0xc0205649, &(0x7f0000000700)={0x990000, 0x3, 0x3b, r3, 0x0, &(0x7f00000006c0)={0x990901, 0x1000, [], @value=0x5}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r9=>0xffffffffffffffff})
r10 = dup(r9)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f0000000b40))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r11=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0xffff}, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)='\x00', r11}, 0x30)
perf_event_open(&(0x7f0000000880)={0x5, 0x70, 0x0, 0x0, 0x8, 0xc8, 0x0, 0x107fff, 0x400, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={&(0x7f0000000240), 0x8}, 0x9120, 0x3, 0x6, 0x0, 0x0, 0x3f, 0x8}, r5, 0x4, r0, 0x3)
open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000480)='./file0\x00', &(0x7f0000000840)=[&(0x7f0000000600)='(\xe0\xf5\x00', &(0x7f0000000680)='/dev/loop#\x00', &(0x7f0000000440)='system\x00', &(0x7f0000000740)='\x00', &(0x7f00000007c0)='\x00', &(0x7f0000000800)='.cpuset\x1c\x00'], 0x0)

[  755.608068][T16924] tipc: TX() has been purged, node left!
22:08:46 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="6653405cb4aed12f0000000000ae47a825d86800278dcff47d0100005ae64f8f36460234432479aed75d492b41fd983f79e65199615607672c59957ab6ad602ea04db364bf68e6faa53367f05f4ad61421349f2f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca4fafa924edfe92175aaa1c4ecc7aeeb72e0d050feace34b52d9e5f755563698c7e24ab45f0866f15da7f9a6cd1c9ba50f5dd289d81466ec4af1d8bf2e2b773b5ca2e623ed2e65877a87b785aa8aa2eb0f07c986bf605c9335f4a", 0xc8}], 0x4, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff2d}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, 0x0, 0x0, 0x0)

22:08:46 executing program 0:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00'], 0x1)
sendfile(r1, r0, 0x0, 0xa198)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="000ffff0802bc8369ce73cb6fda400006224541f3780351157b252dd000000009154262a80420801444dd89f6bfd1510066a2128e6c04f112558c8bdac2ae91c22768a299a879ca5ea45ea6189f14f84644589436f645a783aac81cf5bc374f0ac00ef2728cfd3b16ae8a4ec80ebea0a7e8c20a5986a2ab75b34dc27b332714d36cba3ac62ec7100c22eb5d6638b8e1d01468ad3328280706dfc31700ea3fe507bfd0f8169b2187e8d804978b5a6397a1f471a29369349f8dcda480be4b38fb6862fc91512ff53f74ccb2674157b224da1961bbaf18cfe6f399d07607fc5fa"], 0xdf)
sendfile(r3, r2, 0x0, 0xa198)
open(0x0, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)

22:08:46 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3})

22:08:46 executing program 5:
perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mknod$loop(0x0, 0x0, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000803, 0x5f)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0)
r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0)
sendfile(r0, r2, 0x0, 0x80001d00c0d0)

22:08:46 executing program 3:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r2)
socket$inet(0x10, 0x2, 0x0)
bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080025944eeba71a4976e252922c000000002aba000000012e0b3836005404b0e0301a4ce875f2e0ff5f163ee340b7679500800000000000000101013c5891039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffff7f00000000ffefa6f909f7", @ANYRES32=r3, @ANYBLOB="0000000bf1ffffff000000ff7f0001"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

22:08:46 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x2002, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={0x0, @in6={{0xa, 0x4e21, 0xe, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0xc1}, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0)
write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x77, 0x2, 0x8}, 0xb)
sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={<r1=>0x0}, 0x0)
ptrace$setopts(0x7abb990919170921, r1, 0x10001, 0x111)
ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio1\x00', 0x81f403e8956afdaf, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = getpgrp(0x0)
r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x404000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={<r4=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000a00)={0x9, 0x108, 0xfa00, {r4, 0x66, "c2658c", "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"}}, 0x110)
setpriority(0x0, r2, 0x100)
read(r0, &(0x7f0000000340)=""/175, 0xaf)
r5 = getpid()
ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000500)=0x1ff)
r6 = getpid()
ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000580)=0x8)
sched_setscheduler(r6, 0x0, &(0x7f0000000380))
ioprio_set$pid(0x0, r6, 0x9)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r7=>0xffffffffffffffff})
r8 = dup(r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$VIDIOC_TRY_EXT_CTRLS(r8, 0xc0205649, &(0x7f0000000700)={0x990000, 0x3, 0x3b, r3, 0x0, &(0x7f00000006c0)={0x990901, 0x1000, [], @value=0x5}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r9=>0xffffffffffffffff})
r10 = dup(r9)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f0000000b40))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r11=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0xffff}, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)='\x00', r11}, 0x30)
perf_event_open(&(0x7f0000000880)={0x5, 0x70, 0x0, 0x0, 0x8, 0xc8, 0x0, 0x107fff, 0x400, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={&(0x7f0000000240), 0x8}, 0x9120, 0x3, 0x6, 0x0, 0x0, 0x3f, 0x8}, r5, 0x4, r0, 0x3)
open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000480)='./file0\x00', &(0x7f0000000840)=[&(0x7f0000000600)='(\xe0\xf5\x00', &(0x7f0000000680)='/dev/loop#\x00', &(0x7f0000000440)='system\x00', &(0x7f0000000740)='\x00', &(0x7f00000007c0)='\x00', &(0x7f0000000800)='.cpuset\x1c\x00'], &(0x7f00000002c0)=[&(0x7f0000000040)='selfposix_acl_access&[\x00', &(0x7f0000000080)='/dev/loop#\x00', &(0x7f0000000100)='\\}#(,\x00'])

[  756.970902][T24067] netlink: 2092 bytes leftover after parsing attributes in process `syz-executor.3'.
[  756.998229][   T27] audit: type=1804 audit(1583791726.942:206): pid=24069 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/448/file0" dev="sda1" ino=17166 res=1
[  757.032997][   T27] audit: type=1804 audit(1583791726.972:207): pid=24069 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/448/file0" dev="sda1" ino=17166 res=1
22:08:47 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x2002, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={0x0, @in6={{0xa, 0x4e21, 0xe, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0xc1}, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0)
write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x77, 0x2, 0x8}, 0xb)
sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={<r1=>0x0}, 0x0)
ptrace$setopts(0x7abb990919170921, r1, 0x10001, 0x111)
ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio1\x00', 0x81f403e8956afdaf, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = getpgrp(0x0)
r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x404000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={<r4=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000a00)={0x9, 0x108, 0xfa00, {r4, 0x66, "c2658c", "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"}}, 0x110)
setpriority(0x0, r2, 0x100)
read(r0, &(0x7f0000000340)=""/175, 0xaf)
r5 = getpid()
ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000500)=0x1ff)
r6 = getpid()
ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000580)=0x8)
sched_setscheduler(r6, 0x0, &(0x7f0000000380))
ioprio_set$pid(0x0, r6, 0x9)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r7=>0xffffffffffffffff})
r8 = dup(r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$VIDIOC_TRY_EXT_CTRLS(r8, 0xc0205649, &(0x7f0000000700)={0x990000, 0x3, 0x3b, r3, 0x0, &(0x7f00000006c0)={0x990901, 0x1000, [], @value=0x5}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r9=>0xffffffffffffffff})
r10 = dup(r9)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f0000000b40))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r11=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0xffff}, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)='\x00', r11}, 0x30)
perf_event_open(&(0x7f0000000880)={0x5, 0x70, 0x0, 0x0, 0x8, 0xc8, 0x0, 0x107fff, 0x400, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={&(0x7f0000000240), 0x8}, 0x9120, 0x3, 0x6, 0x0, 0x0, 0x3f, 0x8}, r5, 0x4, r0, 0x3)
open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000480)='./file0\x00', &(0x7f0000000840)=[&(0x7f0000000600)='(\xe0\xf5\x00', &(0x7f0000000680)='/dev/loop#\x00', &(0x7f0000000440)='system\x00', &(0x7f0000000740)='\x00', &(0x7f00000007c0)='\x00', &(0x7f0000000800)='.cpuset\x1c\x00'], &(0x7f00000002c0)=[&(0x7f0000000040)='selfposix_acl_access&[\x00', &(0x7f0000000080)='/dev/loop#\x00', &(0x7f0000000100)='\\}#(,\x00'])

22:08:47 executing program 2:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/route\x00')
sendfile(r0, r1, 0x0, 0xedc0)

22:08:47 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x2002, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={0x0, @in6={{0xa, 0x4e21, 0xe, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0xc1}, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0)
write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x77, 0x2, 0x8}, 0xb)
sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={<r1=>0x0}, 0x0)
ptrace$setopts(0x7abb990919170921, r1, 0x10001, 0x111)
ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio1\x00', 0x81f403e8956afdaf, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = getpgrp(0x0)
r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x404000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={<r4=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000a00)={0x9, 0x108, 0xfa00, {r4, 0x66, "c2658c", "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"}}, 0x110)
setpriority(0x0, r2, 0x100)
read(r0, &(0x7f0000000340)=""/175, 0xaf)
r5 = getpid()
ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000500)=0x1ff)
r6 = getpid()
ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000580)=0x8)
sched_setscheduler(r6, 0x0, &(0x7f0000000380))
ioprio_set$pid(0x0, r6, 0x9)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r7=>0xffffffffffffffff})
r8 = dup(r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$VIDIOC_TRY_EXT_CTRLS(r8, 0xc0205649, &(0x7f0000000700)={0x990000, 0x3, 0x3b, r3, 0x0, &(0x7f00000006c0)={0x990901, 0x1000, [], @value=0x5}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r9=>0xffffffffffffffff})
r10 = dup(r9)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f0000000b40))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r11=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0xffff}, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)='\x00', r11}, 0x30)
perf_event_open(&(0x7f0000000880)={0x5, 0x70, 0x0, 0x0, 0x8, 0xc8, 0x0, 0x107fff, 0x400, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={&(0x7f0000000240), 0x8}, 0x9120, 0x3, 0x6, 0x0, 0x0, 0x3f, 0x8}, r5, 0x4, r0, 0x3)
open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000480)='./file0\x00', &(0x7f0000000840)=[&(0x7f0000000600)='(\xe0\xf5\x00', &(0x7f0000000680)='/dev/loop#\x00', &(0x7f0000000440)='system\x00', &(0x7f0000000740)='\x00', &(0x7f00000007c0)='\x00', &(0x7f0000000800)='.cpuset\x1c\x00'], &(0x7f00000002c0)=[&(0x7f0000000040)='selfposix_acl_access&[\x00', &(0x7f0000000080)='/dev/loop#\x00', &(0x7f0000000100)='\\}#(,\x00'])

22:08:47 executing program 2:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/route\x00')
sendfile(r0, r1, 0x0, 0xedc0)

22:08:47 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x2002, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={0x0, @in6={{0xa, 0x4e21, 0xe, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0xc1}, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0)
write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x77, 0x2, 0x8}, 0xb)
sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={<r1=>0x0}, 0x0)
ptrace$setopts(0x7abb990919170921, r1, 0x10001, 0x111)
ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio1\x00', 0x81f403e8956afdaf, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = getpgrp(0x0)
r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x404000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={<r4=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000a00)={0x9, 0x108, 0xfa00, {r4, 0x66, "c2658c", "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"}}, 0x110)
setpriority(0x0, r2, 0x100)
read(r0, &(0x7f0000000340)=""/175, 0xaf)
r5 = getpid()
ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000500)=0x1ff)
r6 = getpid()
ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000580)=0x8)
sched_setscheduler(r6, 0x0, &(0x7f0000000380))
ioprio_set$pid(0x0, r6, 0x9)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r7=>0xffffffffffffffff})
r8 = dup(r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$VIDIOC_TRY_EXT_CTRLS(r8, 0xc0205649, &(0x7f0000000700)={0x990000, 0x3, 0x3b, r3, 0x0, &(0x7f00000006c0)={0x990901, 0x1000, [], @value=0x5}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r9=>0xffffffffffffffff})
r10 = dup(r9)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f0000000b40))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r11=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0xffff}, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)='\x00', r11}, 0x30)
perf_event_open(&(0x7f0000000880)={0x5, 0x70, 0x0, 0x0, 0x8, 0xc8, 0x0, 0x107fff, 0x400, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={&(0x7f0000000240), 0x8}, 0x9120, 0x3, 0x6, 0x0, 0x0, 0x3f, 0x8}, r5, 0x4, r0, 0x3)
open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000480)='./file0\x00', &(0x7f0000000840)=[&(0x7f0000000600)='(\xe0\xf5\x00', &(0x7f0000000680)='/dev/loop#\x00', &(0x7f0000000440)='system\x00', &(0x7f0000000740)='\x00', &(0x7f00000007c0)='\x00', &(0x7f0000000800)='.cpuset\x1c\x00'], &(0x7f00000002c0)=[&(0x7f0000000040)='selfposix_acl_access&[\x00', &(0x7f0000000080)='/dev/loop#\x00', 0x0])

22:08:47 executing program 0:
fchdir(0xffffffffffffffff)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00'], 0x1)
sendfile(r1, r0, 0x0, 0xa198)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="000ffff0802bc8369ce73cb6fda400006224541f3780351157b252dd000000009154262a80420801444dd89f6bfd1510066a2128e6c04f112558c8bdac2ae91c22768a299a879ca5ea45ea6189f14f84644589436f645a783aac81cf5bc374f0ac00ef2728cfd3b16ae8a4ec80ebea0a7e8c20a5986a2ab75b34dc27b332714d36cba3ac62ec7100c22eb5d6638b8e1d01468ad3328280706dfc31700ea3fe507bfd0f8169b2187e8d804978b5a6397a1f471a29369349f8dcda480be4b38fb6862fc91512ff53f74ccb2674157b224da1961bbaf18cfe6f399d07607fc5fa"], 0xdf)
sendfile(r3, r2, 0x0, 0xa198)
open(0x0, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)

[  757.744915][   T27] audit: type=1804 audit(1583791727.692:208): pid=24111 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/449/file0" dev="sda1" ino=17166 res=1
[  757.805578][   T27] audit: type=1804 audit(1583791727.732:209): pid=24111 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/449/file0" dev="sda1" ino=17166 res=1
22:08:49 executing program 0:
fchdir(0xffffffffffffffff)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00'], 0x1)
sendfile(r1, r0, 0x0, 0xa198)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="000ffff0802bc8369ce73cb6fda400006224541f3780351157b252dd000000009154262a80420801444dd89f6bfd1510066a2128e6c04f112558c8bdac2ae91c22768a299a879ca5ea45ea6189f14f84644589436f645a783aac81cf5bc374f0ac00ef2728cfd3b16ae8a4ec80ebea0a7e8c20a5986a2ab75b34dc27b332714d36cba3ac62ec7100c22eb5d6638b8e1d01468ad3328280706dfc31700ea3fe507bfd0f8169b2187e8d804978b5a6397a1f471a29369349f8dcda480be4b38fb6862fc91512ff53f74ccb2674157b224da1961bbaf18cfe6f399d07607fc5fa"], 0xdf)
sendfile(r3, r2, 0x0, 0xa198)
open(0x0, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)

22:08:49 executing program 2:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/route\x00')
sendfile(r0, r1, 0x0, 0xedc0)

22:08:49 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x2002, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={0x0, @in6={{0xa, 0x4e21, 0xe, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0xc1}, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0)
write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x77, 0x2, 0x8}, 0xb)
sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={<r1=>0x0}, 0x0)
ptrace$setopts(0x7abb990919170921, r1, 0x10001, 0x111)
ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio1\x00', 0x81f403e8956afdaf, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = getpgrp(0x0)
r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x404000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={<r4=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000a00)={0x9, 0x108, 0xfa00, {r4, 0x66, "c2658c", "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"}}, 0x110)
setpriority(0x0, r2, 0x100)
read(r0, &(0x7f0000000340)=""/175, 0xaf)
r5 = getpid()
ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000500)=0x1ff)
r6 = getpid()
ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000580)=0x8)
sched_setscheduler(r6, 0x0, &(0x7f0000000380))
ioprio_set$pid(0x0, r6, 0x9)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r7=>0xffffffffffffffff})
r8 = dup(r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$VIDIOC_TRY_EXT_CTRLS(r8, 0xc0205649, &(0x7f0000000700)={0x990000, 0x3, 0x3b, r3, 0x0, &(0x7f00000006c0)={0x990901, 0x1000, [], @value=0x5}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r9=>0xffffffffffffffff})
r10 = dup(r9)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f0000000b40))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r11=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0xffff}, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)='\x00', r11}, 0x30)
perf_event_open(&(0x7f0000000880)={0x5, 0x70, 0x0, 0x0, 0x8, 0xc8, 0x0, 0x107fff, 0x400, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={&(0x7f0000000240), 0x8}, 0x9120, 0x3, 0x6, 0x0, 0x0, 0x3f, 0x8}, r5, 0x4, r0, 0x3)
open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000480)='./file0\x00', &(0x7f0000000840)=[&(0x7f0000000600)='(\xe0\xf5\x00', &(0x7f0000000680)='/dev/loop#\x00', &(0x7f0000000440)='system\x00', &(0x7f0000000740)='\x00', &(0x7f00000007c0)='\x00', &(0x7f0000000800)='.cpuset\x1c\x00'], &(0x7f00000002c0)=[&(0x7f0000000040)='selfposix_acl_access&[\x00', &(0x7f0000000080)='/dev/loop#\x00', 0x0])

22:08:49 executing program 3:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r2)
socket$inet(0x10, 0x2, 0x0)
bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080025944eeba71a4976e252922c000000002aba000000012e0b3836005404b0e0301a4ce875f2e0ff5f163ee340b7679500800000000000000101013c5891039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffff7f00000000ffefa6f909f7", @ANYRES32=r3, @ANYBLOB="0000000bf1ffffff000000ff7f0001"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

22:08:49 executing program 5:
perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mknod$loop(0x0, 0x0, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000803, 0x5f)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0)
r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0)
sendfile(r0, r2, 0x0, 0x80001d00c0d0)

22:08:49 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/route\x00')
sendfile(r0, r1, 0x0, 0xedc0)

[  760.015637][T24135] netlink: 2092 bytes leftover after parsing attributes in process `syz-executor.3'.
22:08:50 executing program 4:
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet6(0xa, 0x80003, 0x27)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000500)=ANY=[@ANYBLOB="726177000302000000f2ffffff000000000000000000000000000000000000000020000003000000d803000000000000900200000400000060030000000000006003000060030000600300006003000060030000030000000000000000000000fe8000000000000000000000000000bbff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000076657468315f746f5f626f6e640000006e6574706369300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f80138020000000000000000000000000000000000000000000000005001686173686c696d69740000000000000000000000000000000000000000027465616d5f736c6176655f310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000fe18b61a00080000000000000000000000000000400052415445455354000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800434c4153534946590000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d000000000000000000000000000000000000000000000000000280000000000000000000000000000000000000000000000000f000000000000fe"], 0x1)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x28, 0x209e1e, 0x1, 0x1}, 0x3c)

[  760.045623][   T27] audit: type=1804 audit(1583791729.992:210): pid=24137 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/450/file0" dev="sda1" ino=17182 res=1
22:08:50 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="002000000000005d564c90c200"/24, 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010)
recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x14}, 0x14}}, 0x0)

[  760.095486][   T27] audit: type=1804 audit(1583791730.022:211): pid=24137 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/450/file0" dev="sda1" ino=17182 res=1
22:08:50 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x2002, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={0x0, @in6={{0xa, 0x4e21, 0xe, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0xc1}, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0)
write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x77, 0x2, 0x8}, 0xb)
sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={<r1=>0x0}, 0x0)
ptrace$setopts(0x7abb990919170921, r1, 0x10001, 0x111)
ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio1\x00', 0x81f403e8956afdaf, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = getpgrp(0x0)
r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x404000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={<r4=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000a00)={0x9, 0x108, 0xfa00, {r4, 0x66, "c2658c", "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"}}, 0x110)
setpriority(0x0, r2, 0x100)
read(r0, &(0x7f0000000340)=""/175, 0xaf)
r5 = getpid()
ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000500)=0x1ff)
r6 = getpid()
ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000580)=0x8)
sched_setscheduler(r6, 0x0, &(0x7f0000000380))
ioprio_set$pid(0x0, r6, 0x9)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r7=>0xffffffffffffffff})
r8 = dup(r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$VIDIOC_TRY_EXT_CTRLS(r8, 0xc0205649, &(0x7f0000000700)={0x990000, 0x3, 0x3b, r3, 0x0, &(0x7f00000006c0)={0x990901, 0x1000, [], @value=0x5}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r9=>0xffffffffffffffff})
r10 = dup(r9)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f0000000b40))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r11=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0xffff}, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)='\x00', r11}, 0x30)
perf_event_open(&(0x7f0000000880)={0x5, 0x70, 0x0, 0x0, 0x8, 0xc8, 0x0, 0x107fff, 0x400, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={&(0x7f0000000240), 0x8}, 0x9120, 0x3, 0x6, 0x0, 0x0, 0x3f, 0x8}, r5, 0x4, r0, 0x3)
open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000480)='./file0\x00', &(0x7f0000000840)=[&(0x7f0000000600)='(\xe0\xf5\x00', &(0x7f0000000680)='/dev/loop#\x00', &(0x7f0000000440)='system\x00', &(0x7f0000000740)='\x00', &(0x7f00000007c0)='\x00', &(0x7f0000000800)='.cpuset\x1c\x00'], &(0x7f00000002c0)=[&(0x7f0000000040)='selfposix_acl_access&[\x00', &(0x7f0000000080)='/dev/loop#\x00', 0x0])

22:08:50 executing program 2:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/route\x00')
sendfile(r0, r1, 0x0, 0xedc0)

22:08:50 executing program 4:
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x0)
recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7115}, 0x0)
pipe2(0x0, 0x0)
setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000140)='tls\x00', 0x4)

22:08:50 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x2002, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={0x0, @in6={{0xa, 0x4e21, 0xe, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0xc1}, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0)
write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x77, 0x2, 0x8}, 0xb)
sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={<r1=>0x0}, 0x0)
ptrace$setopts(0x7abb990919170921, r1, 0x10001, 0x111)
ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio1\x00', 0x81f403e8956afdaf, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = getpgrp(0x0)
r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x404000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={<r4=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000a00)={0x9, 0x108, 0xfa00, {r4, 0x66, "c2658c", "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"}}, 0x110)
setpriority(0x0, r2, 0x100)
read(r0, &(0x7f0000000340)=""/175, 0xaf)
r5 = getpid()
ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000500)=0x1ff)
r6 = getpid()
ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000580)=0x8)
sched_setscheduler(r6, 0x0, &(0x7f0000000380))
ioprio_set$pid(0x0, r6, 0x9)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r7=>0xffffffffffffffff})
r8 = dup(r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$VIDIOC_TRY_EXT_CTRLS(r8, 0xc0205649, &(0x7f0000000700)={0x990000, 0x3, 0x3b, r3, 0x0, &(0x7f00000006c0)={0x990901, 0x1000, [], @value=0x5}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r9=>0xffffffffffffffff})
r10 = dup(r9)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f0000000b40))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r11=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0xffff}, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)='\x00', r11}, 0x30)
perf_event_open(&(0x7f0000000880)={0x5, 0x70, 0x0, 0x0, 0x8, 0xc8, 0x0, 0x107fff, 0x400, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={&(0x7f0000000240), 0x8}, 0x9120, 0x3, 0x6, 0x0, 0x0, 0x3f, 0x8}, r5, 0x4, r0, 0x3)
open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000480)='./file0\x00', &(0x7f0000000840)=[&(0x7f0000000600)='(\xe0\xf5\x00', &(0x7f0000000680)='/dev/loop#\x00', &(0x7f0000000440)='system\x00', &(0x7f0000000740)='\x00', &(0x7f00000007c0)='\x00', &(0x7f0000000800)='.cpuset\x1c\x00'], &(0x7f00000002c0)=[&(0x7f0000000040)='selfposix_acl_access&[\x00', &(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0])

[  760.446514][T24156] cgroup: fork rejected by pids controller in /syz2
22:08:50 executing program 0:
fchdir(0xffffffffffffffff)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00'], 0x1)
sendfile(r1, r0, 0x0, 0xa198)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="000ffff0802bc8369ce73cb6fda400006224541f3780351157b252dd000000009154262a80420801444dd89f6bfd1510066a2128e6c04f112558c8bdac2ae91c22768a299a879ca5ea45ea6189f14f84644589436f645a783aac81cf5bc374f0ac00ef2728cfd3b16ae8a4ec80ebea0a7e8c20a5986a2ab75b34dc27b332714d36cba3ac62ec7100c22eb5d6638b8e1d01468ad3328280706dfc31700ea3fe507bfd0f8169b2187e8d804978b5a6397a1f471a29369349f8dcda480be4b38fb6862fc91512ff53f74ccb2674157b224da1961bbaf18cfe6f399d07607fc5fa"], 0xdf)
sendfile(r3, r2, 0x0, 0xa198)
open(0x0, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)

22:08:50 executing program 4:
perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
io_submit(0x0, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000001c0)={{{@in, @in=@broadcast}}, {{@in=@loopback}, 0x0, @in=@initdev}}, &(0x7f0000000140)=0xe8)
socket$inet_udplite(0x2, 0x2, 0x88)
setreuid(0x0, 0x0)
mount$overlay(0x0, 0x0, 0x0, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB='upperdir=./file0,index=on,metacopy=off,lowerdir=./file0,xino=off,nfs_export=off,nfs_export=on,index=oN,obj_role=nfs_export=off,smackfshat=/dei/kvm\x00,defcontext=', @ANYRESDEC])
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000003, 0x5c831, 0xffffffffffffffff, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
pipe(0x0)
r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm_plock\x00', 0x0, 0x0)
creat(0x0, 0x0)
fanotify_mark(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000440)={0xa, {0x6, 0x2}}, 0xa)
close(0xffffffffffffffff)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x100000000, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000d40)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffc01, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x400, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x45c)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000)

22:08:50 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x2002, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={0x0, @in6={{0xa, 0x4e21, 0xe, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0xc1}, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0)
write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x77, 0x2, 0x8}, 0xb)
sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={<r1=>0x0}, 0x0)
ptrace$setopts(0x7abb990919170921, r1, 0x10001, 0x111)
ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio1\x00', 0x81f403e8956afdaf, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = getpgrp(0x0)
r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x404000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={<r4=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000a00)={0x9, 0x108, 0xfa00, {r4, 0x66, "c2658c", "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"}}, 0x110)
setpriority(0x0, r2, 0x100)
read(r0, &(0x7f0000000340)=""/175, 0xaf)
r5 = getpid()
ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000500)=0x1ff)
r6 = getpid()
ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000580)=0x8)
sched_setscheduler(r6, 0x0, &(0x7f0000000380))
ioprio_set$pid(0x0, r6, 0x9)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r7=>0xffffffffffffffff})
r8 = dup(r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$VIDIOC_TRY_EXT_CTRLS(r8, 0xc0205649, &(0x7f0000000700)={0x990000, 0x3, 0x3b, r3, 0x0, &(0x7f00000006c0)={0x990901, 0x1000, [], @value=0x5}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r9=>0xffffffffffffffff})
r10 = dup(r9)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f0000000b40))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r11=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0xffff}, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)='\x00', r11}, 0x30)
perf_event_open(&(0x7f0000000880)={0x5, 0x70, 0x0, 0x0, 0x8, 0xc8, 0x0, 0x107fff, 0x400, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={&(0x7f0000000240), 0x8}, 0x9120, 0x3, 0x6, 0x0, 0x0, 0x3f, 0x8}, r5, 0x4, r0, 0x3)
open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000480)='./file0\x00', &(0x7f0000000840)=[&(0x7f0000000600)='(\xe0\xf5\x00', &(0x7f0000000680)='/dev/loop#\x00', &(0x7f0000000440)='system\x00', &(0x7f0000000740)='\x00', &(0x7f00000007c0)='\x00', &(0x7f0000000800)='.cpuset\x1c\x00'], &(0x7f00000002c0)=[&(0x7f0000000040)='selfposix_acl_access&[\x00', &(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0])

22:08:50 executing program 2:
sched_setscheduler(0x0, 0x5, 0x0)
capget(0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$unix(0x1, 0x0, 0x0)
keyctl$get_security(0x11, 0x0, &(0x7f00000001c0)=""/84, 0x54)
syz_open_dev$mouse(0x0, 0xfffffffffffffffd, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0)

22:08:50 executing program 5:
perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mknod$loop(0x0, 0x0, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000803, 0x5f)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0)
r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0)
sendfile(r0, r2, 0x0, 0x80001d00c0d0)

22:08:50 executing program 3:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r2)
r3 = socket(0x11, 0x800000003, 0x0)
bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080025944eeba71a4976e252922c000000002aba000000012e0b3836005404b0e0301a4ce875f2e0ff5f163ee340b7679500800000000000000101013c5891039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffff7f00000000ffefa6f909f7", @ANYRES32=r4, @ANYBLOB="0000000bf1ffffff000000ff7f0001"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

[  760.895225][T24285] mmap: syz-executor.2 (24285) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
[  760.936980][   T27] audit: type=1804 audit(1583791730.882:212): pid=24291 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/451/file0" dev="sda1" ino=17168 res=1
[  761.060444][   T27] audit: type=1804 audit(1583791730.892:213): pid=24291 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/451/file0" dev="sda1" ino=17168 res=1
22:08:51 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x7, @dev, 'macvlan1\x00'}}, 0x1e)
sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0)

22:08:51 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x2002, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={0x0, @in6={{0xa, 0x4e21, 0xe, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0xc1}, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0)
write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x77, 0x2, 0x8}, 0xb)
sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={<r1=>0x0}, 0x0)
ptrace$setopts(0x7abb990919170921, r1, 0x10001, 0x111)
ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio1\x00', 0x81f403e8956afdaf, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = getpgrp(0x0)
r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x404000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={<r4=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000a00)={0x9, 0x108, 0xfa00, {r4, 0x66, "c2658c", "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"}}, 0x110)
setpriority(0x0, r2, 0x100)
read(r0, &(0x7f0000000340)=""/175, 0xaf)
r5 = getpid()
ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000500)=0x1ff)
r6 = getpid()
ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000580)=0x8)
sched_setscheduler(r6, 0x0, &(0x7f0000000380))
ioprio_set$pid(0x0, r6, 0x9)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r7=>0xffffffffffffffff})
r8 = dup(r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$VIDIOC_TRY_EXT_CTRLS(r8, 0xc0205649, &(0x7f0000000700)={0x990000, 0x3, 0x3b, r3, 0x0, &(0x7f00000006c0)={0x990901, 0x1000, [], @value=0x5}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r9=>0xffffffffffffffff})
r10 = dup(r9)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f0000000b40))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r11=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0xffff}, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)='\x00', r11}, 0x30)
perf_event_open(&(0x7f0000000880)={0x5, 0x70, 0x0, 0x0, 0x8, 0xc8, 0x0, 0x107fff, 0x400, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={&(0x7f0000000240), 0x8}, 0x9120, 0x3, 0x6, 0x0, 0x0, 0x3f, 0x8}, r5, 0x4, r0, 0x3)
open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000480)='./file0\x00', &(0x7f0000000840)=[&(0x7f0000000600)='(\xe0\xf5\x00', &(0x7f0000000680)='/dev/loop#\x00', &(0x7f0000000440)='system\x00', &(0x7f0000000740)='\x00', &(0x7f00000007c0)='\x00', &(0x7f0000000800)='.cpuset\x1c\x00'], &(0x7f00000002c0)=[&(0x7f0000000040)='selfposix_acl_access&[\x00', &(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0])

22:08:51 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x7, @dev, 'macvlan1\x00'}}, 0x1e)
sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0)

22:08:51 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0)
write$uinput_user_dev(r2, &(0x7f0000000400)={'syz1\x00'}, 0x45c)

22:08:51 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x2002, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={0x0, @in6={{0xa, 0x4e21, 0xe, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0xc1}, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0)
write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x77, 0x2, 0x8}, 0xb)
sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={<r1=>0x0}, 0x0)
ptrace$setopts(0x7abb990919170921, r1, 0x10001, 0x111)
ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio1\x00', 0x81f403e8956afdaf, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = getpgrp(0x0)
r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x404000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={<r4=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000a00)={0x9, 0x108, 0xfa00, {r4, 0x66, "c2658c", "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"}}, 0x110)
setpriority(0x0, r2, 0x100)
read(r0, &(0x7f0000000340)=""/175, 0xaf)
r5 = getpid()
ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000500)=0x1ff)
r6 = getpid()
ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000580)=0x8)
sched_setscheduler(r6, 0x0, &(0x7f0000000380))
ioprio_set$pid(0x0, r6, 0x9)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r7=>0xffffffffffffffff})
r8 = dup(r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$VIDIOC_TRY_EXT_CTRLS(r8, 0xc0205649, &(0x7f0000000700)={0x990000, 0x3, 0x3b, r3, 0x0, &(0x7f00000006c0)={0x990901, 0x1000, [], @value=0x5}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r9=>0xffffffffffffffff})
r10 = dup(r9)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f0000000b40))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r11=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0xffff}, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)='\x00', r11}, 0x30)
perf_event_open(&(0x7f0000000880)={0x5, 0x70, 0x0, 0x0, 0x8, 0xc8, 0x0, 0x107fff, 0x400, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={&(0x7f0000000240), 0x8}, 0x9120, 0x3, 0x6, 0x0, 0x0, 0x3f, 0x8}, r5, 0x4, r0, 0x3)
open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000480)='./file0\x00', &(0x7f0000000840)=[&(0x7f0000000600)='(\xe0\xf5\x00', &(0x7f0000000680)='/dev/loop#\x00', &(0x7f0000000440)='system\x00', &(0x7f0000000740)='\x00', &(0x7f00000007c0)='\x00', &(0x7f0000000800)='.cpuset\x1c\x00'], &(0x7f00000002c0)=[&(0x7f0000000040)='selfposix_acl_access&[\x00', &(0x7f0000000100)='\\}#(,\x00', 0x0])

22:08:51 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)

22:08:51 executing program 0:
syz_mount_image$msdos(0x0, &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00'], 0x1)
sendfile(r1, r0, 0x0, 0xa198)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="000ffff0802bc8369ce73cb6fda400006224541f3780351157b252dd000000009154262a80420801444dd89f6bfd1510066a2128e6c04f112558c8bdac2ae91c22768a299a879ca5ea45ea6189f14f84644589436f645a783aac81cf5bc374f0ac00ef2728cfd3b16ae8a4ec80ebea0a7e8c20a5986a2ab75b34dc27b332714d36cba3ac62ec7100c22eb5d6638b8e1d01468ad3328280706dfc31700ea3fe507bfd0f8169b2187e8d804978b5a6397a1f471a29369349f8dcda480be4b38fb6862fc91512ff53f74ccb2674157b224da1961bbaf18cfe6f399d07607fc5fa"], 0xdf)
sendfile(r3, r2, 0x0, 0xa198)
open(0x0, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)

22:08:51 executing program 4:
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ttyS3\x00', 0x0, 0x0)
ioctl$TCSETSF(r0, 0x545c, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup3(r2, r1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

22:08:51 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
close(0xffffffffffffffff)
syz_open_dev$mice(0x0, 0x0, 0x0)
mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
syz_mount_image$minix(&(0x7f0000000340)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x4c00, 0x1, &(0x7f0000000000)=[{&(0x7f0000000140)="600b42e006000a0090040300001af5c96824", 0x12, 0x400}], 0x0, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

[  761.732026][T24432] MINIX-fs: mounting unchecked file system, running fsck is recommended
[  761.748813][T24432] minix_free_inode: bit 1 already cleared
22:08:51 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x2002, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={0x0, @in6={{0xa, 0x4e21, 0xe, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0xc1}, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0)
write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x77, 0x2, 0x8}, 0xb)
sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={<r1=>0x0}, 0x0)
ptrace$setopts(0x7abb990919170921, r1, 0x10001, 0x111)
ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio1\x00', 0x81f403e8956afdaf, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = getpgrp(0x0)
r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x404000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={<r4=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000a00)={0x9, 0x108, 0xfa00, {r4, 0x66, "c2658c", "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"}}, 0x110)
setpriority(0x0, r2, 0x100)
read(r0, &(0x7f0000000340)=""/175, 0xaf)
r5 = getpid()
ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000500)=0x1ff)
r6 = getpid()
ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000580)=0x8)
sched_setscheduler(r6, 0x0, &(0x7f0000000380))
ioprio_set$pid(0x0, r6, 0x9)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r7=>0xffffffffffffffff})
r8 = dup(r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$VIDIOC_TRY_EXT_CTRLS(r8, 0xc0205649, &(0x7f0000000700)={0x990000, 0x3, 0x3b, r3, 0x0, &(0x7f00000006c0)={0x990901, 0x1000, [], @value=0x5}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r9=>0xffffffffffffffff})
r10 = dup(r9)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f0000000b40))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r11=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0xffff}, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)='\x00', r11}, 0x30)
perf_event_open(&(0x7f0000000880)={0x5, 0x70, 0x0, 0x0, 0x8, 0xc8, 0x0, 0x107fff, 0x400, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={&(0x7f0000000240), 0x8}, 0x9120, 0x3, 0x6, 0x0, 0x0, 0x3f, 0x8}, r5, 0x4, r0, 0x3)
open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000480)='./file0\x00', &(0x7f0000000840)=[&(0x7f0000000600)='(\xe0\xf5\x00', &(0x7f0000000680)='/dev/loop#\x00', &(0x7f0000000440)='system\x00', &(0x7f0000000740)='\x00', &(0x7f00000007c0)='\x00', &(0x7f0000000800)='.cpuset\x1c\x00'], &(0x7f00000002c0)=[&(0x7f0000000040)='selfposix_acl_access&[\x00', &(0x7f0000000100)='\\}#(,\x00', 0x0])

22:08:51 executing program 5:
perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mknod$loop(0x0, 0x0, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000803, 0x5f)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0)
ftruncate(0xffffffffffffffff, 0x200004)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x80001d00c0d0)

[  761.763533][   T27] audit: type=1804 audit(1583791731.712:214): pid=24438 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/452/file0" dev="sda1" ino=17176 res=1
[  761.792697][   T27] audit: type=1804 audit(1583791731.742:215): pid=24438 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/452/file0" dev="sda1" ino=17176 res=1
[  761.880341][T24440] MINIX-fs: mounting unchecked file system, running fsck is recommended
22:08:51 executing program 3:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r2)
r3 = socket(0x11, 0x800000003, 0x0)
bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080025944eeba71a4976e252922c000000002aba000000012e0b3836005404b0e0301a4ce875f2e0ff5f163ee340b7679500800000000000000101013c5891039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffff7f00000000ffefa6f909f7", @ANYRES32=r4, @ANYBLOB="0000000bf1ffffff000000ff7f0001"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

22:08:52 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
close(0xffffffffffffffff)
syz_open_dev$mice(0x0, 0x0, 0x0)
mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
syz_mount_image$minix(&(0x7f0000000340)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x4c00, 0x1, &(0x7f0000000000)=[{&(0x7f0000000140)="600b42e006000a0090040300001af5c96824", 0x12, 0x400}], 0x0, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

22:08:52 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x2002, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={0x0, @in6={{0xa, 0x4e21, 0xe, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0xc1}, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0)
write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x77, 0x2, 0x8}, 0xb)
sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={<r1=>0x0}, 0x0)
ptrace$setopts(0x7abb990919170921, r1, 0x10001, 0x111)
ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio1\x00', 0x81f403e8956afdaf, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = getpgrp(0x0)
r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x404000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={<r4=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000a00)={0x9, 0x108, 0xfa00, {r4, 0x66, "c2658c", "df70238469aac9d4907464f29c1754324ed168c706fc37ddb86672e2a6601aefe58eaa4d39b08d20f612d04d207f2343d2ef0308ea553d0430ba29fbd1dc0922dbcaffe9325eca46f1b70208570afbe8af8047e6d323df5ba61e374a095723090a2b2ad594c24f8b10ab07ef5ebaad20e82cf58266a90ccd892895df0f01996af75fb0340198b6d6433b54ece705126a96a1ea1801ff0feee26d343f116a9dd5af4f7f5be661a21a9c4ba9458882e4661dcf854d38884f7716dcb67cbfdeb20deddc905882a8c5af02f857e06c1e280f2a8b6c0c608b17c8c57c6984faf6023ade63b1fb0dd0156b61e28445fb337a427f119e9486e690fd06c39968a937154f"}}, 0x110)
setpriority(0x0, r2, 0x100)
read(r0, &(0x7f0000000340)=""/175, 0xaf)
r5 = getpid()
ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000500)=0x1ff)
r6 = getpid()
ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000580)=0x8)
sched_setscheduler(r6, 0x0, &(0x7f0000000380))
ioprio_set$pid(0x0, r6, 0x9)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r7=>0xffffffffffffffff})
r8 = dup(r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$VIDIOC_TRY_EXT_CTRLS(r8, 0xc0205649, &(0x7f0000000700)={0x990000, 0x3, 0x3b, r3, 0x0, &(0x7f00000006c0)={0x990901, 0x1000, [], @value=0x5}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r9=>0xffffffffffffffff})
r10 = dup(r9)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f0000000b40))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r11=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0xffff}, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)='\x00', r11}, 0x30)
perf_event_open(&(0x7f0000000880)={0x5, 0x70, 0x0, 0x0, 0x8, 0xc8, 0x0, 0x107fff, 0x400, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={&(0x7f0000000240), 0x8}, 0x9120, 0x3, 0x6, 0x0, 0x0, 0x3f, 0x8}, r5, 0x4, r0, 0x3)
open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000480)='./file0\x00', &(0x7f0000000840)=[&(0x7f0000000600)='(\xe0\xf5\x00', &(0x7f0000000680)='/dev/loop#\x00', &(0x7f0000000440)='system\x00', &(0x7f0000000740)='\x00', &(0x7f00000007c0)='\x00', &(0x7f0000000800)='.cpuset\x1c\x00'], &(0x7f00000002c0)=[&(0x7f0000000040)='selfposix_acl_access&[\x00', &(0x7f0000000100)='\\}#(,\x00', 0x0])

[  762.062587][ T7879] minix_free_inode: bit 1 already cleared
22:08:52 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x2002, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={0x0, @in6={{0xa, 0x4e21, 0xe, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0xc1}, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0)
write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x77, 0x2, 0x8}, 0xb)
sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={<r1=>0x0}, 0x0)
ptrace$setopts(0x7abb990919170921, r1, 0x10001, 0x111)
ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio1\x00', 0x81f403e8956afdaf, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = getpgrp(0x0)
r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x404000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={<r4=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000a00)={0x9, 0x108, 0xfa00, {r4, 0x66, "c2658c", "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"}}, 0x110)
setpriority(0x0, r2, 0x100)
read(r0, &(0x7f0000000340)=""/175, 0xaf)
r5 = getpid()
ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000500)=0x1ff)
r6 = getpid()
ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000580)=0x8)
sched_setscheduler(r6, 0x0, &(0x7f0000000380))
ioprio_set$pid(0x0, r6, 0x9)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r7=>0xffffffffffffffff})
r8 = dup(r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$VIDIOC_TRY_EXT_CTRLS(r8, 0xc0205649, &(0x7f0000000700)={0x990000, 0x3, 0x3b, r3, 0x0, &(0x7f00000006c0)={0x990901, 0x1000, [], @value=0x5}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r9=>0xffffffffffffffff})
r10 = dup(r9)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f0000000b40))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r11=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0xffff}, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)='\x00', r11}, 0x30)
perf_event_open(&(0x7f0000000880)={0x5, 0x70, 0x0, 0x0, 0x8, 0xc8, 0x0, 0x107fff, 0x400, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={&(0x7f0000000240), 0x8}, 0x9120, 0x3, 0x6, 0x0, 0x0, 0x3f, 0x8}, r5, 0x4, r0, 0x3)
open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000480)='./file0\x00', &(0x7f0000000840)=[&(0x7f0000000600)='(\xe0\xf5\x00', &(0x7f0000000680)='/dev/loop#\x00', &(0x7f0000000440)='system\x00', &(0x7f0000000740)='\x00', &(0x7f00000007c0)='\x00', &(0x7f0000000800)='.cpuset\x1c\x00'], &(0x7f00000002c0)=[&(0x7f0000000040)='selfposix_acl_access&[\x00', 0x0, &(0x7f0000000100)='\\}#(,\x00', 0x0])

[  762.279204][T24469] MINIX-fs: mounting unchecked file system, running fsck is recommended
[  762.344498][T24469] minix_free_inode: bit 1 already cleared
22:08:52 executing program 0:
syz_mount_image$msdos(0x0, &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00'], 0x1)
sendfile(r1, r0, 0x0, 0xa198)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="000ffff0802bc8369ce73cb6fda400006224541f3780351157b252dd000000009154262a80420801444dd89f6bfd1510066a2128e6c04f112558c8bdac2ae91c22768a299a879ca5ea45ea6189f14f84644589436f645a783aac81cf5bc374f0ac00ef2728cfd3b16ae8a4ec80ebea0a7e8c20a5986a2ab75b34dc27b332714d36cba3ac62ec7100c22eb5d6638b8e1d01468ad3328280706dfc31700ea3fe507bfd0f8169b2187e8d804978b5a6397a1f471a29369349f8dcda480be4b38fb6862fc91512ff53f74ccb2674157b224da1961bbaf18cfe6f399d07607fc5fa"], 0xdf)
sendfile(r3, r2, 0x0, 0xa198)
open(0x0, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)

22:08:52 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
close(0xffffffffffffffff)
syz_open_dev$mice(0x0, 0x0, 0x0)
mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
syz_mount_image$minix(&(0x7f0000000340)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x4c00, 0x1, &(0x7f0000000000)=[{&(0x7f0000000140)="600b42e006000a0090040300001af5c96824", 0x12, 0x400}], 0x0, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

22:08:52 executing program 4:
getpid()
capget(0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc)
syz_open_dev$mouse(0x0, 0xfffffffffffffffd, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10)
accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x1000000000002, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0)

[  762.577956][   T27] audit: type=1804 audit(1583791732.522:216): pid=24490 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/453/file0" dev="sda1" ino=17175 res=1
22:08:52 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x2002, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={0x0, @in6={{0xa, 0x4e21, 0xe, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0xc1}, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0)
write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x77, 0x2, 0x8}, 0xb)
sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={<r1=>0x0}, 0x0)
ptrace$setopts(0x7abb990919170921, r1, 0x10001, 0x111)
ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio1\x00', 0x81f403e8956afdaf, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = getpgrp(0x0)
r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x404000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={<r4=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000a00)={0x9, 0x108, 0xfa00, {r4, 0x66, "c2658c", "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"}}, 0x110)
setpriority(0x0, r2, 0x100)
read(r0, &(0x7f0000000340)=""/175, 0xaf)
r5 = getpid()
ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000500)=0x1ff)
r6 = getpid()
ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000580)=0x8)
sched_setscheduler(r6, 0x0, &(0x7f0000000380))
ioprio_set$pid(0x0, r6, 0x9)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r7=>0xffffffffffffffff})
r8 = dup(r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$VIDIOC_TRY_EXT_CTRLS(r8, 0xc0205649, &(0x7f0000000700)={0x990000, 0x3, 0x3b, r3, 0x0, &(0x7f00000006c0)={0x990901, 0x1000, [], @value=0x5}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r9=>0xffffffffffffffff})
r10 = dup(r9)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f0000000b40))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r11=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0xffff}, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)='\x00', r11}, 0x30)
perf_event_open(&(0x7f0000000880)={0x5, 0x70, 0x0, 0x0, 0x8, 0xc8, 0x0, 0x107fff, 0x400, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={&(0x7f0000000240), 0x8}, 0x9120, 0x3, 0x6, 0x0, 0x0, 0x3f, 0x8}, r5, 0x4, r0, 0x3)
open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000480)='./file0\x00', &(0x7f0000000840)=[&(0x7f0000000600)='(\xe0\xf5\x00', &(0x7f0000000680)='/dev/loop#\x00', &(0x7f0000000440)='system\x00', &(0x7f0000000740)='\x00', &(0x7f00000007c0)='\x00', &(0x7f0000000800)='.cpuset\x1c\x00'], &(0x7f00000002c0)=[&(0x7f0000000040)='selfposix_acl_access&[\x00', 0x0, &(0x7f0000000100)='\\}#(,\x00', 0x0])

[  762.627709][T24488] MINIX-fs: mounting unchecked file system, running fsck is recommended
[  762.693322][   T27] audit: type=1804 audit(1583791732.562:217): pid=24490 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/453/file0" dev="sda1" ino=17175 res=1
[  762.742488][T24488] minix_free_inode: bit 1 already cleared
22:08:52 executing program 5:
perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mknod$loop(0x0, 0x0, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000803, 0x5f)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0)
ftruncate(0xffffffffffffffff, 0x200004)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x80001d00c0d0)

22:08:52 executing program 3:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r2)
r3 = socket(0x11, 0x800000003, 0x0)
bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080025944eeba71a4976e252922c000000002aba000000012e0b3836005404b0e0301a4ce875f2e0ff5f163ee340b7679500800000000000000101013c5891039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffff7f00000000ffefa6f909f7", @ANYRES32=r4, @ANYBLOB="0000000bf1ffffff000000ff7f0001"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

22:08:52 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
close(0xffffffffffffffff)
syz_open_dev$mice(0x0, 0x0, 0x0)
mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
syz_mount_image$minix(&(0x7f0000000340)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x4c00, 0x1, &(0x7f0000000000)=[{&(0x7f0000000140)="600b42e006000a0090040300001af5c96824", 0x12, 0x400}], 0x0, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

22:08:52 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x2002, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={0x0, @in6={{0xa, 0x4e21, 0xe, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0xc1}, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0)
write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x77, 0x2, 0x8}, 0xb)
sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={<r1=>0x0}, 0x0)
ptrace$setopts(0x7abb990919170921, r1, 0x10001, 0x111)
ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio1\x00', 0x81f403e8956afdaf, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = getpgrp(0x0)
r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x404000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={<r4=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000a00)={0x9, 0x108, 0xfa00, {r4, 0x66, "c2658c", "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"}}, 0x110)
setpriority(0x0, r2, 0x100)
read(r0, &(0x7f0000000340)=""/175, 0xaf)
r5 = getpid()
ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000500)=0x1ff)
r6 = getpid()
ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000580)=0x8)
sched_setscheduler(r6, 0x0, &(0x7f0000000380))
ioprio_set$pid(0x0, r6, 0x9)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r7=>0xffffffffffffffff})
r8 = dup(r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$VIDIOC_TRY_EXT_CTRLS(r8, 0xc0205649, &(0x7f0000000700)={0x990000, 0x3, 0x3b, r3, 0x0, &(0x7f00000006c0)={0x990901, 0x1000, [], @value=0x5}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r9=>0xffffffffffffffff})
r10 = dup(r9)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f0000000b40))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r11=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0xffff}, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)='\x00', r11}, 0x30)
perf_event_open(&(0x7f0000000880)={0x5, 0x70, 0x0, 0x0, 0x8, 0xc8, 0x0, 0x107fff, 0x400, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={&(0x7f0000000240), 0x8}, 0x9120, 0x3, 0x6, 0x0, 0x0, 0x3f, 0x8}, r5, 0x4, r0, 0x3)
open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000480)='./file0\x00', &(0x7f0000000840)=[&(0x7f0000000600)='(\xe0\xf5\x00', &(0x7f0000000680)='/dev/loop#\x00', &(0x7f0000000440)='system\x00', &(0x7f0000000740)='\x00', &(0x7f00000007c0)='\x00', &(0x7f0000000800)='.cpuset\x1c\x00'], &(0x7f00000002c0)=[&(0x7f0000000040)='selfposix_acl_access&[\x00', 0x0, &(0x7f0000000100)='\\}#(,\x00', 0x0])

22:08:52 executing program 4:
getpid()
capget(0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc)
syz_open_dev$mouse(0x0, 0xfffffffffffffffd, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10)
accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x1000000000002, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0)

[  763.196219][T24520] MINIX-fs: mounting unchecked file system, running fsck is recommended
22:08:53 executing program 0:
syz_mount_image$msdos(0x0, &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00'], 0x1)
sendfile(r1, r0, 0x0, 0xa198)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="000ffff0802bc8369ce73cb6fda400006224541f3780351157b252dd000000009154262a80420801444dd89f6bfd1510066a2128e6c04f112558c8bdac2ae91c22768a299a879ca5ea45ea6189f14f84644589436f645a783aac81cf5bc374f0ac00ef2728cfd3b16ae8a4ec80ebea0a7e8c20a5986a2ab75b34dc27b332714d36cba3ac62ec7100c22eb5d6638b8e1d01468ad3328280706dfc31700ea3fe507bfd0f8169b2187e8d804978b5a6397a1f471a29369349f8dcda480be4b38fb6862fc91512ff53f74ccb2674157b224da1961bbaf18cfe6f399d07607fc5fa"], 0xdf)
sendfile(r3, r2, 0x0, 0xa198)
open(0x0, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)

[  763.252627][T24520] minix_free_inode: bit 1 already cleared
22:08:53 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x2002, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={0x0, @in6={{0xa, 0x4e21, 0xe, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0xc1}, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0)
write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x77, 0x2, 0x8}, 0xb)
sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={<r1=>0x0}, 0x0)
ptrace$setopts(0x7abb990919170921, r1, 0x10001, 0x111)
ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio1\x00', 0x81f403e8956afdaf, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = getpgrp(0x0)
r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x404000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={<r4=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000a00)={0x9, 0x108, 0xfa00, {r4, 0x66, "c2658c", "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"}}, 0x110)
setpriority(0x0, r2, 0x100)
read(r0, &(0x7f0000000340)=""/175, 0xaf)
r5 = getpid()
ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000500)=0x1ff)
r6 = getpid()
ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000580)=0x8)
sched_setscheduler(r6, 0x0, &(0x7f0000000380))
ioprio_set$pid(0x0, r6, 0x9)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r7=>0xffffffffffffffff})
r8 = dup(r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$VIDIOC_TRY_EXT_CTRLS(r8, 0xc0205649, &(0x7f0000000700)={0x990000, 0x3, 0x3b, r3, 0x0, &(0x7f00000006c0)={0x990901, 0x1000, [], @value=0x5}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r9=>0xffffffffffffffff})
r10 = dup(r9)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f0000000b40))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r11=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0xffff}, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)='\x00', r11}, 0x30)
perf_event_open(&(0x7f0000000880)={0x5, 0x70, 0x0, 0x0, 0x8, 0xc8, 0x0, 0x107fff, 0x400, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={&(0x7f0000000240), 0x8}, 0x9120, 0x3, 0x6, 0x0, 0x0, 0x3f, 0x8}, r5, 0x4, r0, 0x3)
open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000480)='./file0\x00', &(0x7f0000000840)=[&(0x7f0000000600)='(\xe0\xf5\x00', &(0x7f0000000680)='/dev/loop#\x00', &(0x7f0000000440)='system\x00', &(0x7f0000000740)='\x00', &(0x7f00000007c0)='\x00', &(0x7f0000000800)='.cpuset\x1c\x00'], &(0x7f00000002c0)=[&(0x7f0000000080)='/dev/loop#\x00', &(0x7f0000000100)='\\}#(,\x00', 0x0])

22:08:53 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
close(0xffffffffffffffff)
syz_open_dev$mice(0x0, 0x0, 0x0)
mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

22:08:53 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/route\x00')
sendfile(r0, r1, 0x0, 0xedc0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)

[  763.530186][   T27] audit: type=1804 audit(1583791733.482:218): pid=24544 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/454/file0" dev="sda1" ino=17175 res=1
22:08:53 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x2002, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={0x0, @in6={{0xa, 0x4e21, 0xe, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0xc1}, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0)
write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x77, 0x2, 0x8}, 0xb)
sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={<r1=>0x0}, 0x0)
ptrace$setopts(0x7abb990919170921, r1, 0x10001, 0x111)
ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio1\x00', 0x81f403e8956afdaf, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = getpgrp(0x0)
r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x404000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={<r4=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000a00)={0x9, 0x108, 0xfa00, {r4, 0x66, "c2658c", "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"}}, 0x110)
setpriority(0x0, r2, 0x100)
read(r0, &(0x7f0000000340)=""/175, 0xaf)
r5 = getpid()
ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000500)=0x1ff)
r6 = getpid()
ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000580)=0x8)
sched_setscheduler(r6, 0x0, &(0x7f0000000380))
ioprio_set$pid(0x0, r6, 0x9)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r7=>0xffffffffffffffff})
r8 = dup(r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$VIDIOC_TRY_EXT_CTRLS(r8, 0xc0205649, &(0x7f0000000700)={0x990000, 0x3, 0x3b, r3, 0x0, &(0x7f00000006c0)={0x990901, 0x1000, [], @value=0x5}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r9=>0xffffffffffffffff})
r10 = dup(r9)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f0000000b40))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r11=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0xffff}, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)='\x00', r11}, 0x30)
perf_event_open(&(0x7f0000000880)={0x5, 0x70, 0x0, 0x0, 0x8, 0xc8, 0x0, 0x107fff, 0x400, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={&(0x7f0000000240), 0x8}, 0x9120, 0x3, 0x6, 0x0, 0x0, 0x3f, 0x8}, r5, 0x4, r0, 0x3)
open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000480)='./file0\x00', &(0x7f0000000840)=[&(0x7f0000000600)='(\xe0\xf5\x00', &(0x7f0000000680)='/dev/loop#\x00', &(0x7f0000000440)='system\x00', &(0x7f0000000740)='\x00', &(0x7f00000007c0)='\x00', &(0x7f0000000800)='.cpuset\x1c\x00'], &(0x7f00000002c0)=[&(0x7f0000000080)='/dev/loop#\x00', &(0x7f0000000100)='\\}#(,\x00', 0x0])

22:08:53 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
close(0xffffffffffffffff)
syz_open_dev$mice(0x0, 0x0, 0x0)
mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

[  763.638105][   T27] audit: type=1804 audit(1583791733.522:219): pid=24544 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/454/file0" dev="sda1" ino=17175 res=1
22:08:53 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/route\x00')
sendfile(r0, r1, 0x0, 0xedc0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)

22:08:53 executing program 5:
perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mknod$loop(0x0, 0x0, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000803, 0x5f)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0)
ftruncate(0xffffffffffffffff, 0x200004)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x80001d00c0d0)

22:08:54 executing program 3:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
socket$inet(0x10, 0x2, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080025944eeba71a4976e252922c000000002aba000000012e0b3836005404b0e0301a4ce875f2e0ff5f163ee340b7679500800000000000000101013c5891039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffff7f00000000ffefa6f909f7", @ANYRES32=r4, @ANYBLOB="0000000bf1ffffff000000ff7f0001"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

22:08:54 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
close(0xffffffffffffffff)
syz_open_dev$mice(0x0, 0x0, 0x0)
mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

22:08:54 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x2002, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={0x0, @in6={{0xa, 0x4e21, 0xe, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0xc1}, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0)
write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x77, 0x2, 0x8}, 0xb)
sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={<r1=>0x0}, 0x0)
ptrace$setopts(0x7abb990919170921, r1, 0x10001, 0x111)
ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio1\x00', 0x81f403e8956afdaf, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = getpgrp(0x0)
r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x404000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={<r4=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000a00)={0x9, 0x108, 0xfa00, {r4, 0x66, "c2658c", "df70238469aac9d4907464f29c1754324ed168c706fc37ddb86672e2a6601aefe58eaa4d39b08d20f612d04d207f2343d2ef0308ea553d0430ba29fbd1dc0922dbcaffe9325eca46f1b70208570afbe8af8047e6d323df5ba61e374a095723090a2b2ad594c24f8b10ab07ef5ebaad20e82cf58266a90ccd892895df0f01996af75fb0340198b6d6433b54ece705126a96a1ea1801ff0feee26d343f116a9dd5af4f7f5be661a21a9c4ba9458882e4661dcf854d38884f7716dcb67cbfdeb20deddc905882a8c5af02f857e06c1e280f2a8b6c0c608b17c8c57c6984faf6023ade63b1fb0dd0156b61e28445fb337a427f119e9486e690fd06c39968a937154f"}}, 0x110)
setpriority(0x0, r2, 0x100)
read(r0, &(0x7f0000000340)=""/175, 0xaf)
r5 = getpid()
ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000500)=0x1ff)
r6 = getpid()
ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000580)=0x8)
sched_setscheduler(r6, 0x0, &(0x7f0000000380))
ioprio_set$pid(0x0, r6, 0x9)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r7=>0xffffffffffffffff})
r8 = dup(r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$VIDIOC_TRY_EXT_CTRLS(r8, 0xc0205649, &(0x7f0000000700)={0x990000, 0x3, 0x3b, r3, 0x0, &(0x7f00000006c0)={0x990901, 0x1000, [], @value=0x5}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r9=>0xffffffffffffffff})
r10 = dup(r9)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f0000000b40))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r11=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0xffff}, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)='\x00', r11}, 0x30)
perf_event_open(&(0x7f0000000880)={0x5, 0x70, 0x0, 0x0, 0x8, 0xc8, 0x0, 0x107fff, 0x400, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={&(0x7f0000000240), 0x8}, 0x9120, 0x3, 0x6, 0x0, 0x0, 0x3f, 0x8}, r5, 0x4, r0, 0x3)
open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000480)='./file0\x00', &(0x7f0000000840)=[&(0x7f0000000600)='(\xe0\xf5\x00', &(0x7f0000000680)='/dev/loop#\x00', &(0x7f0000000440)='system\x00', &(0x7f0000000740)='\x00', &(0x7f00000007c0)='\x00', &(0x7f0000000800)='.cpuset\x1c\x00'], &(0x7f00000002c0)=[&(0x7f0000000080)='/dev/loop#\x00', &(0x7f0000000100)='\\}#(,\x00', 0x0])

22:08:54 executing program 0:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', 0x0, 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00'], 0x1)
sendfile(r1, r0, 0x0, 0xa198)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="000ffff0802bc8369ce73cb6fda400006224541f3780351157b252dd000000009154262a80420801444dd89f6bfd1510066a2128e6c04f112558c8bdac2ae91c22768a299a879ca5ea45ea6189f14f84644589436f645a783aac81cf5bc374f0ac00ef2728cfd3b16ae8a4ec80ebea0a7e8c20a5986a2ab75b34dc27b332714d36cba3ac62ec7100c22eb5d6638b8e1d01468ad3328280706dfc31700ea3fe507bfd0f8169b2187e8d804978b5a6397a1f471a29369349f8dcda480be4b38fb6862fc91512ff53f74ccb2674157b224da1961bbaf18cfe6f399d07607fc5fa"], 0xdf)
sendfile(r3, r2, 0x0, 0xa198)
open(0x0, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)

22:08:54 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
close(0xffffffffffffffff)
syz_open_dev$mice(0x0, 0x0, 0x0)
syz_mount_image$minix(&(0x7f0000000340)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x4c00, 0x1, &(0x7f0000000000)=[{&(0x7f0000000140)="600b42e006000a0090040300001af5c96824", 0x12, 0x400}], 0x0, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

22:08:54 executing program 4:
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="fe", 0x1}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/176, 0xb0}], 0x1}}, {{0x0, 0x0, &(0x7f0000002740)=[{0x0, 0x70}], 0x1}}], 0x2, 0x122, 0x0)

22:08:54 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x2002, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={0x0, @in6={{0xa, 0x4e21, 0xe, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0xc1}, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0)
write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x77, 0x2, 0x8}, 0xb)
sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={<r1=>0x0}, 0x0)
ptrace$setopts(0x7abb990919170921, r1, 0x10001, 0x111)
ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio1\x00', 0x81f403e8956afdaf, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = getpgrp(0x0)
r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x404000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={<r4=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000a00)={0x9, 0x108, 0xfa00, {r4, 0x66, "c2658c", "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"}}, 0x110)
setpriority(0x0, r2, 0x100)
read(r0, &(0x7f0000000340)=""/175, 0xaf)
r5 = getpid()
ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000500)=0x1ff)
r6 = getpid()
ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000580)=0x8)
sched_setscheduler(r6, 0x0, &(0x7f0000000380))
ioprio_set$pid(0x0, r6, 0x9)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r7=>0xffffffffffffffff})
r8 = dup(r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$VIDIOC_TRY_EXT_CTRLS(r8, 0xc0205649, &(0x7f0000000700)={0x990000, 0x3, 0x3b, r3, 0x0, &(0x7f00000006c0)={0x990901, 0x1000, [], @value=0x5}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r9=>0xffffffffffffffff})
r10 = dup(r9)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f0000000b40))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r11=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0xffff}, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)='\x00', r11}, 0x30)
perf_event_open(&(0x7f0000000880)={0x5, 0x70, 0x0, 0x0, 0x8, 0xc8, 0x0, 0x107fff, 0x400, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={&(0x7f0000000240), 0x8}, 0x9120, 0x3, 0x6, 0x0, 0x0, 0x3f, 0x8}, r5, 0x4, r0, 0x3)
open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000480)='./file0\x00', &(0x7f0000000840)=[&(0x7f0000000600)='(\xe0\xf5\x00', &(0x7f0000000680)='/dev/loop#\x00', &(0x7f0000000440)='system\x00', &(0x7f0000000740)='\x00', &(0x7f00000007c0)='\x00', &(0x7f0000000800)='.cpuset\x1c\x00'], &(0x7f00000002c0)=[0x0, &(0x7f0000000080)='/dev/loop#\x00', &(0x7f0000000100)='\\}#(,\x00', 0x0])

22:08:54 executing program 4:
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="fe", 0x1}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/176, 0xb0}], 0x1}}, {{0x0, 0x0, &(0x7f0000002740)=[{0x0, 0x70}], 0x1}}], 0x2, 0x122, 0x0)

[  764.368958][T24692] MINIX-fs: mounting unchecked file system, running fsck is recommended
[  764.398687][T24692] minix_free_inode: bit 1 already cleared
[  764.495428][   T27] audit: type=1804 audit(1583791734.442:220): pid=24704 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/455/file0" dev="sda1" ino=17203 res=1
22:08:54 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x2002, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={0x0, @in6={{0xa, 0x4e21, 0xe, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0xc1}, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0)
write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x77, 0x2, 0x8}, 0xb)
sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={<r1=>0x0}, 0x0)
ptrace$setopts(0x7abb990919170921, r1, 0x10001, 0x111)
ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio1\x00', 0x81f403e8956afdaf, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = getpgrp(0x0)
r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x404000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={<r4=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000a00)={0x9, 0x108, 0xfa00, {r4, 0x66, "c2658c", "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"}}, 0x110)
setpriority(0x0, r2, 0x100)
read(r0, &(0x7f0000000340)=""/175, 0xaf)
r5 = getpid()
ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000500)=0x1ff)
r6 = getpid()
ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000580)=0x8)
sched_setscheduler(r6, 0x0, &(0x7f0000000380))
ioprio_set$pid(0x0, r6, 0x9)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r7=>0xffffffffffffffff})
r8 = dup(r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$VIDIOC_TRY_EXT_CTRLS(r8, 0xc0205649, &(0x7f0000000700)={0x990000, 0x3, 0x3b, r3, 0x0, &(0x7f00000006c0)={0x990901, 0x1000, [], @value=0x5}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r9=>0xffffffffffffffff})
r10 = dup(r9)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f0000000b40))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r11=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0xffff}, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)='\x00', r11}, 0x30)
perf_event_open(&(0x7f0000000880)={0x5, 0x70, 0x0, 0x0, 0x8, 0xc8, 0x0, 0x107fff, 0x400, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={&(0x7f0000000240), 0x8}, 0x9120, 0x3, 0x6, 0x0, 0x0, 0x3f, 0x8}, r5, 0x4, r0, 0x3)
open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000480)='./file0\x00', &(0x7f0000000840)=[&(0x7f0000000600)='(\xe0\xf5\x00', &(0x7f0000000680)='/dev/loop#\x00', &(0x7f0000000440)='system\x00', &(0x7f0000000740)='\x00', &(0x7f00000007c0)='\x00', &(0x7f0000000800)='.cpuset\x1c\x00'], &(0x7f00000002c0)=[0x0, &(0x7f0000000080)='/dev/loop#\x00', &(0x7f0000000100)='\\}#(,\x00', 0x0])

22:08:54 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
close(0xffffffffffffffff)
syz_open_dev$mice(0x0, 0x0, 0x0)
syz_mount_image$minix(&(0x7f0000000340)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x4c00, 0x1, &(0x7f0000000000)=[{&(0x7f0000000140)="600b42e006000a0090040300001af5c96824", 0x12, 0x400}], 0x0, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

[  764.554799][   T27] audit: type=1804 audit(1583791734.482:221): pid=24707 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/455/file0" dev="sda1" ino=17203 res=1
22:08:54 executing program 4:
r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video37\x00', 0x2, 0x0)
ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0x2, 0x2, 0x0, "c3e6d0257093668c372180684bb59057ccdf0a9973dec8750586c0283dc0f7b5"})

22:08:54 executing program 5:
perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mknod$loop(0x0, 0x0, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000803, 0x5f)
close(r0)
recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0)
r1 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0)
ftruncate(r1, 0x200004)
sendfile(r0, r1, 0x0, 0x80001d00c0d0)

[  764.721551][T24715] MINIX-fs: mounting unchecked file system, running fsck is recommended
[  764.755662][T24715] minix_free_inode: bit 1 already cleared
22:08:55 executing program 3:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
socket$inet(0x10, 0x2, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080025944eeba71a4976e252922c000000002aba000000012e0b3836005404b0e0301a4ce875f2e0ff5f163ee340b7679500800000000000000101013c5891039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffff7f00000000ffefa6f909f7", @ANYRES32=r4, @ANYBLOB="0000000bf1ffffff000000ff7f0001"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

22:08:55 executing program 4:
syz_mount_image$gfs2(&(0x7f00000003c0)='gfs2\x00', &(0x7f0000000400)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@commit={'commit'}}]})

22:08:55 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
close(0xffffffffffffffff)
syz_open_dev$mice(0x0, 0x0, 0x0)
syz_mount_image$minix(&(0x7f0000000340)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x4c00, 0x1, &(0x7f0000000000)=[{&(0x7f0000000140)="600b42e006000a0090040300001af5c96824", 0x12, 0x400}], 0x0, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

[  765.123024][T24736] gfs2: commit mount option requires a positive numeric argument
22:08:55 executing program 0:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', 0x0, 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00'], 0x1)
sendfile(r1, r0, 0x0, 0xa198)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="000ffff0802bc8369ce73cb6fda400006224541f3780351157b252dd000000009154262a80420801444dd89f6bfd1510066a2128e6c04f112558c8bdac2ae91c22768a299a879ca5ea45ea6189f14f84644589436f645a783aac81cf5bc374f0ac00ef2728cfd3b16ae8a4ec80ebea0a7e8c20a5986a2ab75b34dc27b332714d36cba3ac62ec7100c22eb5d6638b8e1d01468ad3328280706dfc31700ea3fe507bfd0f8169b2187e8d804978b5a6397a1f471a29369349f8dcda480be4b38fb6862fc91512ff53f74ccb2674157b224da1961bbaf18cfe6f399d07607fc5fa"], 0xdf)
sendfile(r3, r2, 0x0, 0xa198)
open(0x0, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)

22:08:55 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x2002, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={0x0, @in6={{0xa, 0x4e21, 0xe, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0xc1}, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0)
write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x77, 0x2, 0x8}, 0xb)
sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={<r1=>0x0}, 0x0)
ptrace$setopts(0x7abb990919170921, r1, 0x10001, 0x111)
ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio1\x00', 0x81f403e8956afdaf, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = getpgrp(0x0)
r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x404000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={<r4=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000a00)={0x9, 0x108, 0xfa00, {r4, 0x66, "c2658c", "df70238469aac9d4907464f29c1754324ed168c706fc37ddb86672e2a6601aefe58eaa4d39b08d20f612d04d207f2343d2ef0308ea553d0430ba29fbd1dc0922dbcaffe9325eca46f1b70208570afbe8af8047e6d323df5ba61e374a095723090a2b2ad594c24f8b10ab07ef5ebaad20e82cf58266a90ccd892895df0f01996af75fb0340198b6d6433b54ece705126a96a1ea1801ff0feee26d343f116a9dd5af4f7f5be661a21a9c4ba9458882e4661dcf854d38884f7716dcb67cbfdeb20deddc905882a8c5af02f857e06c1e280f2a8b6c0c608b17c8c57c6984faf6023ade63b1fb0dd0156b61e28445fb337a427f119e9486e690fd06c39968a937154f"}}, 0x110)
setpriority(0x0, r2, 0x100)
read(r0, &(0x7f0000000340)=""/175, 0xaf)
r5 = getpid()
ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000500)=0x1ff)
r6 = getpid()
ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000580)=0x8)
sched_setscheduler(r6, 0x0, &(0x7f0000000380))
ioprio_set$pid(0x0, r6, 0x9)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r7=>0xffffffffffffffff})
r8 = dup(r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$VIDIOC_TRY_EXT_CTRLS(r8, 0xc0205649, &(0x7f0000000700)={0x990000, 0x3, 0x3b, r3, 0x0, &(0x7f00000006c0)={0x990901, 0x1000, [], @value=0x5}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r9=>0xffffffffffffffff})
r10 = dup(r9)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f0000000b40))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r11=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0xffff}, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)='\x00', r11}, 0x30)
perf_event_open(&(0x7f0000000880)={0x5, 0x70, 0x0, 0x0, 0x8, 0xc8, 0x0, 0x107fff, 0x400, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={&(0x7f0000000240), 0x8}, 0x9120, 0x3, 0x6, 0x0, 0x0, 0x3f, 0x8}, r5, 0x4, r0, 0x3)
open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000480)='./file0\x00', &(0x7f0000000840)=[&(0x7f0000000600)='(\xe0\xf5\x00', &(0x7f0000000680)='/dev/loop#\x00', &(0x7f0000000440)='system\x00', &(0x7f0000000740)='\x00', &(0x7f00000007c0)='\x00', &(0x7f0000000800)='.cpuset\x1c\x00'], &(0x7f00000002c0)=[0x0, &(0x7f0000000080)='/dev/loop#\x00', &(0x7f0000000100)='\\}#(,\x00', 0x0])

[  765.281692][T24736] gfs2: commit mount option requires a positive numeric argument
[  765.312313][T24740] MINIX-fs: mounting unchecked file system, running fsck is recommended
[  765.337846][T24740] minix_free_inode: bit 1 already cleared
22:08:55 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x7, @dev={[], 0x34}, 'macvlan1\x00'}}, 0x1e)
socket$packet(0x11, 0x0, 0x300)
dup(0xffffffffffffffff)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000006ffc), 0x26d)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0)

22:08:55 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
close(0xffffffffffffffff)
mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
syz_mount_image$minix(&(0x7f0000000340)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x4c00, 0x1, &(0x7f0000000000)=[{&(0x7f0000000140)="600b42e006000a0090040300001af5c96824", 0x12, 0x400}], 0x0, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

[  765.542204][   T27] audit: type=1804 audit(1583791735.492:222): pid=24758 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/456/file0" dev="sda1" ino=16532 res=1
22:08:55 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$unix(0x1, 0x0, 0x0)
add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$get_security(0x11, 0x0, &(0x7f00000001c0)=""/84, 0x54)
socket(0x10, 0x0, 0x0)
ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000019100)={0x0, 'veth1_macvtap\x00'}, 0x18)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0)

[  765.672589][   T27] audit: type=1804 audit(1583791735.492:223): pid=24758 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/456/file0" dev="sda1" ino=16532 res=1
22:08:55 executing program 5:
perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mknod$loop(0x0, 0x0, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000803, 0x5f)
close(r0)
recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0)
r1 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0)
ftruncate(r1, 0x200004)
sendfile(r0, r1, 0x0, 0x80001d00c0d0)

22:08:55 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x7, @dev={[], 0x34}, 'macvlan1\x00'}}, 0x1e)
socket$packet(0x11, 0x0, 0x300)
dup(0xffffffffffffffff)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000006ffc), 0x26d)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0)

[  765.869762][T24870] MINIX-fs: mounting unchecked file system, running fsck is recommended
22:08:55 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x7, @dev={[], 0x34}, 'macvlan1\x00'}}, 0x1e)
socket$packet(0x11, 0x0, 0x300)
dup(0xffffffffffffffff)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000006ffc), 0x26d)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0)

[  765.920930][T24878] minix_free_inode: bit 1 already cleared
22:08:56 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
syz_mount_image$minix(&(0x7f0000000340)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x4c00, 0x1, &(0x7f0000000000)=[{&(0x7f0000000140)="600b42e006000a0090040300001af5c96824", 0x12, 0x400}], 0x0, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

22:08:56 executing program 3:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
socket$inet(0x10, 0x2, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080025944eeba71a4976e252922c000000002aba000000012e0b3836005404b0e0301a4ce875f2e0ff5f163ee340b7679500800000000000000101013c5891039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffff7f00000000ffefa6f909f7", @ANYRES32=r4, @ANYBLOB="0000000bf1ffffff000000ff7f0001"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

22:08:56 executing program 0:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', 0x0, 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00'], 0x1)
sendfile(r1, r0, 0x0, 0xa198)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="000ffff0802bc8369ce73cb6fda400006224541f3780351157b252dd000000009154262a80420801444dd89f6bfd1510066a2128e6c04f112558c8bdac2ae91c22768a299a879ca5ea45ea6189f14f84644589436f645a783aac81cf5bc374f0ac00ef2728cfd3b16ae8a4ec80ebea0a7e8c20a5986a2ab75b34dc27b332714d36cba3ac62ec7100c22eb5d6638b8e1d01468ad3328280706dfc31700ea3fe507bfd0f8169b2187e8d804978b5a6397a1f471a29369349f8dcda480be4b38fb6862fc91512ff53f74ccb2674157b224da1961bbaf18cfe6f399d07607fc5fa"], 0xdf)
sendfile(r3, r2, 0x0, 0xa198)
open(0x0, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)

22:08:56 executing program 1:
syz_mount_image$minix(&(0x7f0000000340)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x4c00, 0x1, &(0x7f0000000000)=[{&(0x7f0000000140)="600b42e006000a0090040300001af5c96824", 0x12, 0x400}], 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")

22:08:56 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$unix(0x1, 0x0, 0x0)
add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$get_security(0x11, 0x0, &(0x7f00000001c0)=""/84, 0x54)
socket(0x10, 0x0, 0x0)
ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000019100)={0x0, 'veth1_macvtap\x00'}, 0x18)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0)

[  766.304819][T24889] MINIX-fs: mounting unchecked file system, running fsck is recommended
[  766.330383][T24889] minix_free_inode: bit 1 already cleared
[  766.488314][T24901] MINIX-fs: mounting unchecked file system, running fsck is recommended
[  766.500231][   T27] audit: type=1804 audit(1583791736.452:224): pid=24904 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/457/file0" dev="sda1" ino=16537 res=1
[  766.515973][T24901] minix_free_inode: bit 1 already cleared
22:08:56 executing program 2:
mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
syz_mount_image$minix(&(0x7f0000000340)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x4c00, 0x1, &(0x7f0000000000)=[{&(0x7f0000000140)="600b42e006000a0090040300001af5c96824", 0x12, 0x400}], 0x0, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

22:08:56 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$unix(0x1, 0x0, 0x0)
add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$get_security(0x11, 0x0, &(0x7f00000001c0)=""/84, 0x54)
socket(0x10, 0x0, 0x0)
ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000019100)={0x0, 'veth1_macvtap\x00'}, 0x18)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0)

[  766.677447][   T27] audit: type=1804 audit(1583791736.452:225): pid=24904 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/457/file0" dev="sda1" ino=16537 res=1
22:08:56 executing program 5:
perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mknod$loop(0x0, 0x0, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000803, 0x5f)
close(r0)
recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0)
r1 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0)
ftruncate(r1, 0x200004)
sendfile(r0, r1, 0x0, 0x80001d00c0d0)

[  766.869313][T25012] MINIX-fs: mounting unchecked file system, running fsck is recommended
[  766.893887][T25012] minix_free_inode: bit 1 already cleared
22:08:57 executing program 2:
mknod(0x0, 0x0, 0x0)
syz_mount_image$minix(&(0x7f0000000340)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x4c00, 0x1, &(0x7f0000000000)=[{&(0x7f0000000140)="600b42e006000a0090040300001af5c96824", 0x12, 0x400}], 0x0, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

22:08:57 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$unix(0x1, 0x0, 0x0)
add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$get_security(0x11, 0x0, &(0x7f00000001c0)=""/84, 0x54)
socket(0x10, 0x0, 0x0)
ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000019100)={0x0, 'veth1_macvtap\x00'}, 0x18)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0)

22:08:57 executing program 3:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$inet(0x10, 0x2, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080025944eeba71a4976e252922c000000002aba000000012e0b3836005404b0e0301a4ce875f2e0ff5f163ee340b7679500800000000000000101013c5891039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffff7f00000000ffefa6f909f7", @ANYRES32=r4, @ANYBLOB="0000000bf1ffffff000000ff7f0001"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

[  767.262038][T25022] MINIX-fs: mounting unchecked file system, running fsck is recommended
22:08:57 executing program 0:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00'], 0x1)
sendfile(r1, r0, 0x0, 0xa198)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="000ffff0802bc8369ce73cb6fda400006224541f3780351157b252dd000000009154262a80420801444dd89f6bfd1510066a2128e6c04f112558c8bdac2ae91c22768a299a879ca5ea45ea6189f14f84644589436f645a783aac81cf5bc374f0ac00ef2728cfd3b16ae8a4ec80ebea0a7e8c20a5986a2ab75b34dc27b332714d36cba3ac62ec7100c22eb5d6638b8e1d01468ad3328280706dfc31700ea3fe507bfd0f8169b2187e8d804978b5a6397a1f471a29369349f8dcda480be4b38fb6862fc91512ff53f74ccb2674157b224da1961bbaf18cfe6f399d07607fc5fa"], 0xdf)
sendfile(r3, r2, 0x0, 0xa198)
open(0x0, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)

[  767.362538][T25022] minix_free_inode: bit 1 already cleared
22:08:57 executing program 2:
mknod(0x0, 0x0, 0x0)
syz_mount_image$minix(&(0x7f0000000340)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x4c00, 0x1, &(0x7f0000000000)=[{&(0x7f0000000140)="600b42e006000a0090040300001af5c96824", 0x12, 0x400}], 0x0, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

22:08:57 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$unix(0x1, 0x0, 0x0)
add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$get_security(0x11, 0x0, &(0x7f00000001c0)=""/84, 0x54)
socket(0x10, 0x0, 0x0)
ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000019100)={0x0, 'veth1_macvtap\x00'}, 0x18)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0)

22:08:57 executing program 4:
capget(0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$unix(0x1, 0x0, 0x0)
r0 = add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$chown(0x4, r0, 0x0, 0xee01)
ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0)

[  767.597463][   T27] audit: type=1804 audit(1583791737.542:226): pid=25144 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/458/file0" dev="sda1" ino=16530 res=1
[  767.637510][T25142] MINIX-fs: mounting unchecked file system, running fsck is recommended
[  767.682008][T25142] minix_free_inode: bit 1 already cleared
[  767.700349][   T27] audit: type=1804 audit(1583791737.572:227): pid=25144 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/458/file0" dev="sda1" ino=16530 res=1
22:08:57 executing program 5:
perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mknod$loop(0x0, 0x0, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000803, 0x5f)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0)
r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0)
ftruncate(r2, 0x200004)
sendfile(r0, r2, 0x0, 0x80001d00c0d0)

22:08:57 executing program 2:
mknod(0x0, 0x0, 0x0)
syz_mount_image$minix(&(0x7f0000000340)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x4c00, 0x1, &(0x7f0000000000)=[{&(0x7f0000000140)="600b42e006000a0090040300001af5c96824", 0x12, 0x400}], 0x0, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

22:08:57 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$unix(0x1, 0x0, 0x0)
add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$get_security(0x11, 0x0, &(0x7f00000001c0)=""/84, 0x54)
socket(0x10, 0x0, 0x0)
ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000019100)={0x0, 'veth1_macvtap\x00'}, 0x18)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0)

[  767.985126][T25257] MINIX-fs: mounting unchecked file system, running fsck is recommended
[  768.001762][T25257] minix_free_inode: bit 1 already cleared
22:08:58 executing program 2:
mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
syz_mount_image$minix(0x0, &(0x7f0000000100)='./file0\x00', 0x4c00, 0x1, &(0x7f0000000000)=[{&(0x7f0000000140)="600b42e006000a0090040300001af5c96824", 0x12, 0x400}], 0x0, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

22:08:58 executing program 3:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$inet(0x10, 0x2, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080025944eeba71a4976e252922c000000002aba000000012e0b3836005404b0e0301a4ce875f2e0ff5f163ee340b7679500800000000000000101013c5891039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffff7f00000000ffefa6f909f7", @ANYRES32=r4, @ANYBLOB="0000000bf1ffffff000000ff7f0001"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

22:08:58 executing program 0:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00'], 0x1)
sendfile(r1, r0, 0x0, 0xa198)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="000ffff0802bc8369ce73cb6fda400006224541f3780351157b252dd000000009154262a80420801444dd89f6bfd1510066a2128e6c04f112558c8bdac2ae91c22768a299a879ca5ea45ea6189f14f84644589436f645a783aac81cf5bc374f0ac00ef2728cfd3b16ae8a4ec80ebea0a7e8c20a5986a2ab75b34dc27b332714d36cba3ac62ec7100c22eb5d6638b8e1d01468ad3328280706dfc31700ea3fe507bfd0f8169b2187e8d804978b5a6397a1f471a29369349f8dcda480be4b38fb6862fc91512ff53f74ccb2674157b224da1961bbaf18cfe6f399d07607fc5fa"], 0xdf)
sendfile(r3, r2, 0x0, 0xa198)
open(0x0, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)

22:08:58 executing program 4:
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3, 0xfffffffd}, 0x3c)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={<r0=>0x0, <r1=>0x0})
close(r0)
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x127)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmsg$tipc(r1, &(0x7f0000000500)={&(0x7f0000000280), 0x10, 0x0}, 0x0)

22:08:58 executing program 1:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x7, @dev={[], 0x34}, 'macvlan1\x00'}}, 0x1e)
socket$packet(0x11, 0x0, 0x300)
dup(0xffffffffffffffff)
sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0)

22:08:58 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)

22:08:58 executing program 2:
mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
syz_mount_image$minix(0x0, &(0x7f0000000100)='./file0\x00', 0x4c00, 0x1, &(0x7f0000000000)=[{&(0x7f0000000140)="600b42e006000a0090040300001af5c96824", 0x12, 0x400}], 0x0, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

[  768.553924][   T27] audit: type=1804 audit(1583791738.502:228): pid=25389 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/459/file0" dev="sda1" ino=17215 res=1
22:08:58 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/route\x00')
sendfile(r0, r1, 0x0, 0xedc0)
syz_open_procfs(0x0, 0x0)
openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x44001, 0x0)
fremovexattr(0xffffffffffffffff, &(0x7f0000000280)=ANY=[])

[  768.657025][   T27] audit: type=1804 audit(1583791738.532:229): pid=25389 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/459/file0" dev="sda1" ino=17215 res=1
22:08:58 executing program 5:
perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mknod$loop(0x0, 0x0, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000803, 0x5f)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0)
r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0)
ftruncate(r2, 0x200004)
sendfile(r0, r2, 0x0, 0x80001d00c0d0)

22:08:58 executing program 1:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x7, @dev={[], 0x34}, 'macvlan1\x00'}}, 0x1e)
socket$packet(0x11, 0x0, 0x300)
dup(0xffffffffffffffff)
sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0)

22:08:58 executing program 2:
mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
syz_mount_image$minix(0x0, &(0x7f0000000100)='./file0\x00', 0x4c00, 0x1, &(0x7f0000000000)=[{&(0x7f0000000140)="600b42e006000a0090040300001af5c96824", 0x12, 0x400}], 0x0, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

22:08:58 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00')
sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000003c0)={0x1c, r1, 0x31905e13403123b7, 0x0, 0x0, {0xc, 0x0, 0xf000}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x50000}, 0x0)
pipe(0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)

22:08:58 executing program 1:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000440)='cgroup2\x00', 0x0, 0x0)
r1 = getuid()
r2 = getpid()
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000004c0)={0x2, 0x94f, {r2}, {<r3=>0x0}, 0x2, 0x80000001})
lsetxattr$system_posix_acl(&(0x7f0000000300)='./file0//ile0\x00', &(0x7f0000000400)='system.posix_acl_access\x00', &(0x7f0000000580)={{}, {}, [{0x2, 0x5, r1}, {0x2, 0x5, r3}], {0x4, 0x4}, [], {0x10, 0x2}}, 0x34, 0x1)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, <r5=>0x0}, &(0x7f0000000280)=0x5)
setuid(r5)
mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0xb, 0x0, 0x0)
mount$9p_unix(0x0, 0x0, &(0x7f0000000100)='9p\x00', 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
pipe2$9p(&(0x7f0000000240), 0x0)
semget$private(0x0, 0x0, 0x0)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(r0, 0x8040ae9f, &(0x7f00000005c0))
r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000380)={0x7b, 0x0, [0xda0]})
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x2a, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x210, 0x4c000000, 0x0, 0x108, 0x0, 0x108, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x270)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYRESHEX])

22:08:59 executing program 3:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$inet(0x10, 0x2, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080025944eeba71a4976e252922c000000002aba000000012e0b3836005404b0e0301a4ce875f2e0ff5f163ee340b7679500800000000000000101013c5891039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffff7f00000000ffefa6f909f7", @ANYRES32=r4, @ANYBLOB="0000000bf1ffffff000000ff7f0001"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

22:08:59 executing program 0:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00'], 0x1)
sendfile(r1, r0, 0x0, 0xa198)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="000ffff0802bc8369ce73cb6fda400006224541f3780351157b252dd000000009154262a80420801444dd89f6bfd1510066a2128e6c04f112558c8bdac2ae91c22768a299a879ca5ea45ea6189f14f84644589436f645a783aac81cf5bc374f0ac00ef2728cfd3b16ae8a4ec80ebea0a7e8c20a5986a2ab75b34dc27b332714d36cba3ac62ec7100c22eb5d6638b8e1d01468ad3328280706dfc31700ea3fe507bfd0f8169b2187e8d804978b5a6397a1f471a29369349f8dcda480be4b38fb6862fc91512ff53f74ccb2674157b224da1961bbaf18cfe6f399d07607fc5fa"], 0xdf)
sendfile(r3, r2, 0x0, 0xa198)
open(0x0, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)

22:08:59 executing program 2:
mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
syz_mount_image$minix(&(0x7f0000000340)='minix\x00', 0x0, 0x4c00, 0x1, &(0x7f0000000000)=[{&(0x7f0000000140)="600b42e006000a0090040300001af5c96824", 0x12, 0x400}], 0x0, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

22:08:59 executing program 4:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000440)='cgroup2\x00', 0x0, 0x0)
r1 = getuid()
r2 = getpid()
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000004c0)={0x2, 0x94f, {r2}, {<r3=>0x0}, 0x2, 0x80000001})
lsetxattr$system_posix_acl(&(0x7f0000000300)='./file0//ile0\x00', &(0x7f0000000400)='system.posix_acl_access\x00', &(0x7f0000000580)={{}, {}, [{0x2, 0x5, r1}, {0x2, 0x5, r3}], {0x4, 0x4}, [], {0x10, 0x2}}, 0x34, 0x1)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, <r5=>0x0}, &(0x7f0000000280)=0x5)
setuid(r5)
mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0xb, 0x0, 0x0)
mount$9p_unix(0x0, 0x0, &(0x7f0000000100)='9p\x00', 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
pipe2$9p(&(0x7f0000000240), 0x0)
semget$private(0x0, 0x0, 0x0)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(r0, 0x8040ae9f, &(0x7f00000005c0))
r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000380)={0x7b, 0x0, [0xda0]})
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x2a, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x210, 0x4c000000, 0x0, 0x108, 0x0, 0x108, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x270)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYRESHEX])

22:08:59 executing program 1:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000440)='cgroup2\x00', 0x0, 0x0)
r1 = getuid()
r2 = getpid()
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000004c0)={0x2, 0x94f, {r2}, {<r3=>0x0}, 0x2, 0x80000001})
lsetxattr$system_posix_acl(&(0x7f0000000300)='./file0//ile0\x00', &(0x7f0000000400)='system.posix_acl_access\x00', &(0x7f0000000580)={{}, {}, [{0x2, 0x5, r1}, {0x2, 0x5, r3}], {0x4, 0x4}, [], {0x10, 0x2}}, 0x34, 0x1)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, <r5=>0x0}, &(0x7f0000000280)=0x5)
setuid(r5)
mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0xb, 0x0, 0x0)
mount$9p_unix(0x0, 0x0, &(0x7f0000000100)='9p\x00', 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
pipe2$9p(&(0x7f0000000240), 0x0)
semget$private(0x0, 0x0, 0x0)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(r0, 0x8040ae9f, &(0x7f00000005c0))
r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000380)={0x7b, 0x0, [0xda0]})
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x2a, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x210, 0x4c000000, 0x0, 0x108, 0x0, 0x108, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x270)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYRESHEX])

22:08:59 executing program 1:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000440)='cgroup2\x00', 0x0, 0x0)
r1 = getuid()
r2 = getpid()
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000004c0)={0x2, 0x94f, {r2}, {<r3=>0x0}, 0x2, 0x80000001})
lsetxattr$system_posix_acl(&(0x7f0000000300)='./file0//ile0\x00', &(0x7f0000000400)='system.posix_acl_access\x00', &(0x7f0000000580)={{}, {}, [{0x2, 0x5, r1}, {0x2, 0x5, r3}], {0x4, 0x4}, [], {0x10, 0x2}}, 0x34, 0x1)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, <r5=>0x0}, &(0x7f0000000280)=0x5)
setuid(r5)
mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0xb, 0x0, 0x0)
mount$9p_unix(0x0, 0x0, &(0x7f0000000100)='9p\x00', 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
pipe2$9p(&(0x7f0000000240), 0x0)
semget$private(0x0, 0x0, 0x0)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(r0, 0x8040ae9f, &(0x7f00000005c0))
r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000380)={0x7b, 0x0, [0xda0]})
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x2a, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x210, 0x4c000000, 0x0, 0x108, 0x0, 0x108, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x270)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYRESHEX])

22:08:59 executing program 2:
mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
syz_mount_image$minix(&(0x7f0000000340)='minix\x00', 0x0, 0x4c00, 0x1, &(0x7f0000000000)=[{&(0x7f0000000140)="600b42e006000a0090040300001af5c96824", 0x12, 0x400}], 0x0, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

[  769.584979][   T27] audit: type=1804 audit(1583791739.532:230): pid=25555 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/460/file0" dev="sda1" ino=16787 res=1
[  769.610723][   T27] audit: type=1804 audit(1583791739.532:231): pid=25555 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/460/file0" dev="sda1" ino=16787 res=1
22:08:59 executing program 5:
perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mknod$loop(0x0, 0x0, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000803, 0x5f)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0)
r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0)
ftruncate(r2, 0x200004)
sendfile(r0, r2, 0x0, 0x80001d00c0d0)

22:08:59 executing program 4:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/route\x00')
sendfile(r0, r1, 0x0, 0xedc0)

22:08:59 executing program 2:
mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
syz_mount_image$minix(&(0x7f0000000340)='minix\x00', 0x0, 0x4c00, 0x1, &(0x7f0000000000)=[{&(0x7f0000000140)="600b42e006000a0090040300001af5c96824", 0x12, 0x400}], 0x0, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

22:08:59 executing program 1:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000440)='cgroup2\x00', 0x0, 0x0)
r1 = getuid()
r2 = getpid()
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000004c0)={0x2, 0x94f, {r2}, {<r3=>0x0}, 0x2, 0x80000001})
lsetxattr$system_posix_acl(&(0x7f0000000300)='./file0//ile0\x00', &(0x7f0000000400)='system.posix_acl_access\x00', &(0x7f0000000580)={{}, {}, [{0x2, 0x5, r1}, {0x2, 0x5, r3}], {0x4, 0x4}, [], {0x10, 0x2}}, 0x34, 0x1)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, <r5=>0x0}, &(0x7f0000000280)=0x5)
setuid(r5)
mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0xb, 0x0, 0x0)
mount$9p_unix(0x0, 0x0, &(0x7f0000000100)='9p\x00', 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
pipe2$9p(&(0x7f0000000240), 0x0)
semget$private(0x0, 0x0, 0x0)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(r0, 0x8040ae9f, &(0x7f00000005c0))
r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000380)={0x7b, 0x0, [0xda0]})
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x2a, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x210, 0x4c000000, 0x0, 0x108, 0x0, 0x108, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x270)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYRESHEX])

22:09:00 executing program 2:
mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
syz_mount_image$minix(&(0x7f0000000340)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000000140)="600b42e006000a0090040300001af5c96824", 0x12, 0x400}], 0x0, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

22:09:00 executing program 3:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(0xffffffffffffffff)
socket$inet(0x10, 0x2, 0x0)
r2 = socket(0x11, 0x800000003, 0x0)
bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080025944eeba71a4976e252922c000000002aba000000012e0b3836005404b0e0301a4ce875f2e0ff5f163ee340b7679500800000000000000101013c5891039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffff7f00000000ffefa6f909f7", @ANYRES32=r3, @ANYBLOB="0000000bf1ffffff000000ff7f0001"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0)

[  770.182141][T25585] MINIX-fs: bad superblock or unable to read bitmaps
22:09:00 executing program 0:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00'], 0x1)
sendfile(r1, r0, 0x0, 0xa198)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="000ffff0802bc8369ce73cb6fda400006224541f3780351157b252dd000000009154262a80420801444dd89f6bfd1510066a2128e6c04f112558c8bdac2ae91c22768a299a879ca5ea45ea6189f14f84644589436f645a783aac81cf5bc374f0ac00ef2728cfd3b16ae8a4ec80ebea0a7e8c20a5986a2ab75b34dc27b332714d36cba3ac62ec7100c22eb5d6638b8e1d01468ad3328280706dfc31700ea3fe507bfd0f8169b2187e8d804978b5a6397a1f471a29369349f8dcda480be4b38fb6862fc91512ff53f74ccb2674157b224da1961bbaf18cfe6f399d07607fc5fa"], 0xdf)
sendfile(r3, r2, 0x0, 0xa198)
open(0x0, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)

22:09:00 executing program 4:
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket$inet6(0xa, 0x80003, 0x0)

22:09:00 executing program 1:
r0 = socket$inet6(0xa, 0x1, 0x8010000400000084)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
shutdown(r0, 0x0)
sendto$inet6(r0, &(0x7f0000000180)="bd", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
close(r0)

22:09:00 executing program 4:
getpid()
sched_setscheduler(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
keyctl$chown(0x4, 0x0, 0x0, 0xee01)
ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0)

22:09:00 executing program 2:
mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
syz_mount_image$minix(&(0x7f0000000340)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000000140)="600b42e006000a0090040300001af5c96824", 0x12, 0x400}], 0x0, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

22:09:00 executing program 1:
r0 = socket$inet6(0xa, 0x1, 0x8010000400000084)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
shutdown(r0, 0x0)
sendto$inet6(r0, &(0x7f0000000180)="bd", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
close(r0)

[  770.500162][   T27] audit: type=1804 audit(1583791740.452:232): pid=25714 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/461/file0" dev="sda1" ino=16542 res=1
[  770.539742][T25713] MINIX-fs: bad superblock or unable to read bitmaps
[  770.610664][   T27] audit: type=1804 audit(1583791740.452:233): pid=25714 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/461/file0" dev="sda1" ino=16542 res=1
22:09:00 executing program 5:
perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mknod$loop(0x0, 0x0, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0)
r1 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0)
ftruncate(r1, 0x200004)
sendfile(0xffffffffffffffff, r1, 0x0, 0x80001d00c0d0)

22:09:00 executing program 2:
mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
syz_mount_image$minix(&(0x7f0000000340)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000000140)="600b42e006000a0090040300001af5c96824", 0x12, 0x400}], 0x0, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

22:09:00 executing program 1:
getpid()
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$unix(0x1, 0x0, 0x0)
r0 = add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$get_security(0x11, r0, &(0x7f00000001c0)=""/84, 0x54)
r1 = socket(0x10, 0x0, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000cab000))
keyctl$chown(0x4, r0, 0x0, 0xee01)
ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000019100)={0x0, 'veth1_macvtap\x00'}, 0x18)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0)

[  770.940150][T25730] MINIX-fs: bad superblock or unable to read bitmaps
22:09:00 executing program 4:
getpid()
sched_setscheduler(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
keyctl$chown(0x4, 0x0, 0x0, 0xee01)
ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0)

22:09:01 executing program 2:
mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
syz_mount_image$minix(&(0x7f0000000340)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x4c00, 0x0, 0x0, 0x0, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

22:09:01 executing program 3:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(0xffffffffffffffff)
socket$inet(0x10, 0x2, 0x0)
r2 = socket(0x11, 0x800000003, 0x0)
bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080025944eeba71a4976e252922c000000002aba000000012e0b3836005404b0e0301a4ce875f2e0ff5f163ee340b7679500800000000000000101013c5891039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffff7f00000000ffefa6f909f7", @ANYRES32=r3, @ANYBLOB="0000000bf1ffffff000000ff7f0001"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0)

22:09:01 executing program 0:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00'], 0x1)
sendfile(r1, r0, 0x0, 0xa198)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="000ffff0802bc8369ce73cb6fda400006224541f3780351157b252dd000000009154262a80420801444dd89f6bfd1510066a2128e6c04f112558c8bdac2ae91c22768a299a879ca5ea45ea6189f14f84644589436f645a783aac81cf5bc374f0ac00ef2728cfd3b16ae8a4ec80ebea0a7e8c20a5986a2ab75b34dc27b332714d36cba3ac62ec7100c22eb5d6638b8e1d01468ad3328280706dfc31700ea3fe507bfd0f8169b2187e8d804978b5a6397a1f471a29369349f8dcda480be4b38fb6862fc91512ff53f74ccb2674157b224da1961bbaf18cfe6f399d07607fc5fa"], 0xdf)
sendfile(r3, r2, 0x0, 0xa198)
open(0x0, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)

22:09:01 executing program 1:
getpid()
sched_setscheduler(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
keyctl$chown(0x4, 0x0, 0x0, 0xee01)
ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0)

[  771.243172][T25843] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop2.
22:09:01 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000002100)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter6\x00')
preadv(r0, &(0x7f00000017c0), 0x1b4, 0x7ffff000)
syz_open_dev$video4linux(0x0, 0x0, 0x0)

22:09:01 executing program 2:
mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
syz_mount_image$minix(&(0x7f0000000340)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x4c00, 0x0, 0x0, 0x0, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

[  771.492362][   T27] audit: type=1804 audit(1583791741.442:234): pid=25862 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/462/file0" dev="sda1" ino=16658 res=1
[  771.590726][T25867] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop2.
[  771.618071][   T27] audit: type=1804 audit(1583791741.442:235): pid=25862 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/462/file0" dev="sda1" ino=16658 res=1
22:09:01 executing program 2:
mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
syz_mount_image$minix(&(0x7f0000000340)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x4c00, 0x0, 0x0, 0x0, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

22:09:01 executing program 4:
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ttyS3\x00', 0x100901, 0x0)
writev(r0, &(0x7f0000000340)=[{&(0x7f0000001680)="cd", 0xfffffcf0}], 0x1)
r1 = socket$inet6(0xa, 0x1, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "60f2af589968ff4c6700"})
dup2(r1, r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)

22:09:01 executing program 5:
perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mknod$loop(0x0, 0x0, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0)
r1 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0)
ftruncate(r1, 0x200004)
sendfile(0xffffffffffffffff, r1, 0x0, 0x80001d00c0d0)

22:09:01 executing program 1:
getpid()
sched_setscheduler(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
keyctl$chown(0x4, 0x0, 0x0, 0xee01)
ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0)

[  771.897248][T25974] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop2.
22:09:02 executing program 2:
mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
syz_mount_image$minix(&(0x7f0000000340)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x4c00, 0x0, &(0x7f0000000000), 0x0, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

22:09:02 executing program 0:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00'], 0x1)
sendfile(r1, r0, 0x0, 0xa198)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="000ffff0802bc8369ce73cb6fda400006224541f3780351157b252dd000000009154262a80420801444dd89f6bfd1510066a2128e6c04f112558c8bdac2ae91c22768a299a879ca5ea45ea6189f14f84644589436f645a783aac81cf5bc374f0ac00ef2728cfd3b16ae8a4ec80ebea0a7e8c20a5986a2ab75b34dc27b332714d36cba3ac62ec7100c22eb5d6638b8e1d01468ad3328280706dfc31700ea3fe507bfd0f8169b2187e8d804978b5a6397a1f471a29369349f8dcda480be4b38fb6862fc91512ff53f74ccb2674157b224da1961bbaf18cfe6f399d07607fc5fa"], 0xdf)
sendfile(r3, r2, 0x0, 0xa198)
open(0x0, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)

22:09:02 executing program 3:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(0xffffffffffffffff)
socket$inet(0x10, 0x2, 0x0)
r2 = socket(0x11, 0x800000003, 0x0)
bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080025944eeba71a4976e252922c000000002aba000000012e0b3836005404b0e0301a4ce875f2e0ff5f163ee340b7679500800000000000000101013c5891039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffff7f00000000ffefa6f909f7", @ANYRES32=r3, @ANYBLOB="0000000bf1ffffff000000ff7f0001"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0)

22:09:02 executing program 1:
getpid()
sched_setscheduler(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
keyctl$chown(0x4, 0x0, 0x0, 0xee01)
ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0)

[  772.223908][T26009] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop2.
22:09:02 executing program 2:
mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
syz_mount_image$minix(&(0x7f0000000340)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x4c00, 0x0, &(0x7f0000000000), 0x0, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

22:09:02 executing program 4:
sched_setscheduler(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$unix(0x1, 0x0, 0x0)
add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
setuid(0x0)
accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, 0x0, 0x40080)
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
dup2(0xffffffffffffffff, r0)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0)

[  772.585775][T26133] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop2.
22:09:02 executing program 1:
mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
mount(&(0x7f0000000080)=@filename='./file1\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='ubifs\x00', 0x0, 0x0)

22:09:02 executing program 2:
mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
syz_mount_image$minix(&(0x7f0000000340)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x4c00, 0x0, &(0x7f0000000000), 0x0, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

22:09:02 executing program 5:
perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mknod$loop(0x0, 0x0, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0)
r1 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0)
ftruncate(r1, 0x200004)
sendfile(0xffffffffffffffff, r1, 0x0, 0x80001d00c0d0)

22:09:02 executing program 1:
mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
syz_mount_image$minix(&(0x7f0000000340)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x4c00, 0x1, &(0x7f0000000000)=[{&(0x7f0000000140)="600b42e006000a0090040300001af5c96824", 0x12, 0x400}], 0x0, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")

22:09:02 executing program 4:
sched_setscheduler(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$unix(0x1, 0x0, 0x0)
add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
setuid(0x0)
accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, 0x0, 0x40080)
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
dup2(0xffffffffffffffff, r0)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0)

22:09:02 executing program 0:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00'], 0x1)
sendfile(r1, r0, 0x0, 0xa198)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="000ffff0802bc8369ce73cb6fda400006224541f3780351157b252dd000000009154262a80420801444dd89f6bfd1510066a2128e6c04f112558c8bdac2ae91c22768a299a879ca5ea45ea6189f14f84644589436f645a783aac81cf5bc374f0ac00ef2728cfd3b16ae8a4ec80ebea0a7e8c20a5986a2ab75b34dc27b332714d36cba3ac62ec7100c22eb5d6638b8e1d01468ad3328280706dfc31700ea3fe507bfd0f8169b2187e8d804978b5a6397a1f471a29369349f8dcda480be4b38fb6862fc91512ff53f74ccb2674157b224da1961bbaf18cfe6f399d07607fc5fa"], 0xdf)
sendfile(r3, r2, 0x0, 0xa198)
open(0x0, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)

[  772.811721][T26221] UBIFS error (pid: 26221): cannot open "./file1", error -22
[  772.985359][T26226] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop2.
[  773.100768][T26233] MINIX-fs: mounting unchecked file system, running fsck is recommended
[  773.121863][   T27] kauditd_printk_skb: 2 callbacks suppressed
[  773.121885][   T27] audit: type=1804 audit(1583791743.072:238): pid=26241 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/464/file0" dev="sda1" ino=16849 res=1
[  773.193686][   T27] audit: type=1804 audit(1583791743.072:239): pid=26241 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/464/file0" dev="sda1" ino=16849 res=1
22:09:03 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r0)
socket$inet(0x10, 0x2, 0x0)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080025944eeba71a4976e252922c000000002aba000000012e0b3836005404b0e0301a4ce875f2e0ff5f163ee340b7679500800000000000000101013c5891039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffff7f00000000ffefa6f909f7", @ANYRES32=r2, @ANYBLOB="0000000bf1ffffff000000ff7f0001"], 0x3}}, 0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe0, 0x0)

22:09:03 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbff}, 0xc)

22:09:03 executing program 2:
mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
syz_mount_image$minix(&(0x7f0000000340)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x4c00, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x400}], 0x0, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

[  773.357756][ T7877] minix_free_inode: bit 1 already cleared
22:09:03 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r0)
socket$inet(0x10, 0x2, 0x0)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080025944eeba71a4976e252922c000000002aba000000012e0b3836005404b0e0301a4ce875f2e0ff5f163ee340b7679500800000000000000101013c5891039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffff7f00000000ffefa6f909f7", @ANYRES32=r2, @ANYBLOB="0000000bf1ffffff000000ff7f0001"], 0x3}}, 0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe0, 0x0)

[  773.495260][T26355] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop2.
22:09:03 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2})
readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/246, 0xf6}], 0x1)
r1 = socket$netlink(0x10, 0x3, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, 0x0)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}})
openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0)

22:09:03 executing program 2:
mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
syz_mount_image$minix(&(0x7f0000000340)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x4c00, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x400}], 0x0, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

22:09:03 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r0)
socket$inet(0x10, 0x2, 0x0)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080025944eeba71a4976e252922c000000002aba000000012e0b3836005404b0e0301a4ce875f2e0ff5f163ee340b7679500800000000000000101013c5891039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffff7f00000000ffefa6f909f7", @ANYRES32=r2, @ANYBLOB="0000000bf1ffffff000000ff7f0001"], 0x3}}, 0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe0, 0x0)

22:09:03 executing program 5:
perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mknod$loop(0x0, 0x0, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = socket$inet6(0xa, 0x400000000803, 0x5f)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0)
r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0)
ftruncate(r2, 0x200004)
sendfile(r0, r2, 0x0, 0x80001d00c0d0)

22:09:03 executing program 4:
r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x6000)
io_setup(0x1ff, &(0x7f00000004c0)=<r2=>0x0)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
ftruncate(r3, 0x8200)
sendmmsg(0xffffffffffffffff, &(0x7f0000004580)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000008b80)=[{0x10}], 0x10}}], 0x1, 0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x8200}])

[  773.812605][T26370] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop2.
22:09:03 executing program 0:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00'], 0x1)
sendfile(r1, r0, 0x0, 0xa198)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="000ffff0802bc8369ce73cb6fda400006224541f3780351157b252dd000000009154262a80420801444dd89f6bfd1510066a2128e6c04f112558c8bdac2ae91c22768a299a879ca5ea45ea6189f14f84644589436f645a783aac81cf5bc374f0ac00ef2728cfd3b16ae8a4ec80ebea0a7e8c20a5986a2ab75b34dc27b332714d36cba3ac62ec7100c22eb5d6638b8e1d01468ad3328280706dfc31700ea3fe507bfd0f8169b2187e8d804978b5a6397a1f471a29369349f8dcda480be4b38fb6862fc91512ff53f74ccb2674157b224da1961bbaf18cfe6f399d07607fc5fa"], 0xdf)
sendfile(r3, r2, 0x0, 0xa198)
open(0x0, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)

22:09:03 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet6(0xa, 0x1, 0x8010000400000084)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
shutdown(r2, 0x0)
setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000040)={0x1}, 0x8)
sendto$inet6(r2, &(0x7f0000000180)="bd", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
write$binfmt_misc(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="c5"], 0x1)
close(r2)

22:09:04 executing program 2:
mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
syz_mount_image$minix(&(0x7f0000000340)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x4c00, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x400}], 0x0, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

22:09:04 executing program 3:
pipe(0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r0)
socket$inet(0x10, 0x2, 0x0)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080025944eeba71a4976e252922c000000002aba000000012e0b3836005404b0e0301a4ce875f2e0ff5f163ee340b7679500800000000000000101013c5891039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffff7f00000000ffefa6f909f7", @ANYRES32=r2, @ANYBLOB="0000000bf1ffffff000000ff7f0001"], 0x3}}, 0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe0, 0x0)

[  774.084925][   T27] audit: type=1804 audit(1583791744.032:240): pid=26489 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/465/file0" dev="sda1" ino=16611 res=1
[  774.211734][   T27] audit: type=1804 audit(1583791744.062:241): pid=26489 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/465/file0" dev="sda1" ino=16611 res=1
22:09:04 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x0, 0x0)
close(r2)

22:09:04 executing program 1:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0)
r2 = semget(0x2, 0x4, 0x60d)
semctl$GETPID(r2, 0x0, 0xb, &(0x7f0000000540)=""/107)
semctl$SETVAL(r2, 0x0, 0x10, &(0x7f0000000100)=0x5)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
pipe(&(0x7f0000000180)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0)
splice(r4, 0x0, r3, 0x0, 0x20000038, 0x0)
setpriority(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0)
dup(r1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x9, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r5=>0x0})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0)

[  774.262411][T26517] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop2.
22:09:04 executing program 3:
pipe(0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r0)
socket$inet(0x10, 0x2, 0x0)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080025944eeba71a4976e252922c000000002aba000000012e0b3836005404b0e0301a4ce875f2e0ff5f163ee340b7679500800000000000000101013c5891039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffff7f00000000ffefa6f909f7", @ANYRES32=r2, @ANYBLOB="0000000bf1ffffff000000ff7f0001"], 0x3}}, 0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe0, 0x0)

22:09:04 executing program 2:
mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
syz_mount_image$minix(&(0x7f0000000340)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x4c00, 0x1, &(0x7f0000000000)=[{&(0x7f0000000140), 0x0, 0x400}], 0x0, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

22:09:04 executing program 5:
perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mknod$loop(0x0, 0x0, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = socket$inet6(0xa, 0x400000000803, 0x5f)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0)
r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0)
ftruncate(r2, 0x200004)
sendfile(r0, r2, 0x0, 0x80001d00c0d0)

22:09:04 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='X\x00\x00\x00$\x00\a\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b', @ANYRES32, @ANYBLOB="00000000ffffffff0000000008000100736622002c00020028000100"/64], 0x58}}, 0x0)

[  774.551121][T26614] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop2.
22:09:04 executing program 3:
pipe(0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r0)
socket$inet(0x10, 0x2, 0x0)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080025944eeba71a4976e252922c000000002aba000000012e0b3836005404b0e0301a4ce875f2e0ff5f163ee340b7679500800000000000000101013c5891039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffff7f00000000ffefa6f909f7", @ANYRES32=r2, @ANYBLOB="0000000bf1ffffff000000ff7f0001"], 0x3}}, 0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe0, 0x0)

22:09:04 executing program 2:
mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
syz_mount_image$minix(&(0x7f0000000340)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x4c00, 0x1, &(0x7f0000000000)=[{&(0x7f0000000140), 0x0, 0x400}], 0x0, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

22:09:04 executing program 0:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00'], 0x1)
sendfile(r1, r0, 0x0, 0xa198)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="000ffff0802bc8369ce73cb6fda400006224541f3780351157b252dd000000009154262a80420801444dd89f6bfd1510066a2128e6c04f112558c8bdac2ae91c22768a299a879ca5ea45ea6189f14f84644589436f645a783aac81cf5bc374f0ac00ef2728cfd3b16ae8a4ec80ebea0a7e8c20a5986a2ab75b34dc27b332714d36cba3ac62ec7100c22eb5d6638b8e1d01468ad3328280706dfc31700ea3fe507bfd0f8169b2187e8d804978b5a6397a1f471a29369349f8dcda480be4b38fb6862fc91512ff53f74ccb2674157b224da1961bbaf18cfe6f399d07607fc5fa"], 0xdf)
sendfile(r3, r2, 0x0, 0xa198)
open(0x0, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)

22:09:04 executing program 4:
r0 = getpid()
sched_setscheduler(r0, 0x0, 0x0)
capget(0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$unix(0x1, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
syz_open_dev$mouse(0x0, 0xfffffffffffffffd, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0)

22:09:04 executing program 3:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
close(r2)
socket$inet(0x10, 0x2, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080025944eeba71a4976e252922c000000002aba000000012e0b3836005404b0e0301a4ce875f2e0ff5f163ee340b7679500800000000000000101013c5891039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffff7f00000000ffefa6f909f7", @ANYRES32=r4, @ANYBLOB="0000000bf1ffffff000000ff7f0001"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

[  774.818583][T26629] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop2.
22:09:04 executing program 2:
mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
syz_mount_image$minix(&(0x7f0000000340)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x4c00, 0x1, &(0x7f0000000000)=[{&(0x7f0000000140), 0x0, 0x400}], 0x0, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

22:09:05 executing program 1:
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x800, 0x0)

[  775.115391][   T27] audit: type=1804 audit(1583791745.062:242): pid=26749 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/466/file0" dev="sda1" ino=16660 res=1
[  775.119641][T26748] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop2.
[  775.180416][   T27] audit: type=1804 audit(1583791745.102:243): pid=26749 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/466/file0" dev="sda1" ino=16660 res=1
22:09:05 executing program 5:
perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mknod$loop(0x0, 0x0, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = socket$inet6(0xa, 0x400000000803, 0x5f)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0)
r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0)
ftruncate(r2, 0x200004)
sendfile(r0, r2, 0x0, 0x80001d00c0d0)

22:09:05 executing program 1:
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x800, 0x0)

22:09:05 executing program 2:
mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
syz_mount_image$minix(&(0x7f0000000340)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x4c00, 0x1, &(0x7f0000000000)=[{&(0x7f0000000140)="600b42e006000a0090", 0x9, 0x400}], 0x0, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

22:09:05 executing program 1:
getpid()
capget(0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$unix(0x1, 0x0, 0x0)
ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0)

22:09:05 executing program 4:
r0 = getpid()
sched_setscheduler(r0, 0x0, 0x0)
capget(0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$unix(0x1, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
syz_open_dev$mouse(0x0, 0xfffffffffffffffd, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0)

[  775.633485][T26772] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop2.
22:09:05 executing program 2:
mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
syz_mount_image$minix(&(0x7f0000000340)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x4c00, 0x1, &(0x7f0000000000)=[{&(0x7f0000000140)="600b42e006000a0090", 0x9, 0x400}], 0x0, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

22:09:05 executing program 3:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
close(r2)
socket$inet(0x10, 0x2, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080025944eeba71a4976e252922c000000002aba000000012e0b3836005404b0e0301a4ce875f2e0ff5f163ee340b7679500800000000000000101013c5891039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffff7f00000000ffefa6f909f7", @ANYRES32=r4, @ANYBLOB="0000000bf1ffffff000000ff7f0001"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

22:09:05 executing program 0:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = open(0x0, 0x141042, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00'], 0x1)
sendfile(r1, r0, 0x0, 0xa198)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="000ffff0802bc8369ce73cb6fda400006224541f3780351157b252dd000000009154262a80420801444dd89f6bfd1510066a2128e6c04f112558c8bdac2ae91c22768a299a879ca5ea45ea6189f14f84644589436f645a783aac81cf5bc374f0ac00ef2728cfd3b16ae8a4ec80ebea0a7e8c20a5986a2ab75b34dc27b332714d36cba3ac62ec7100c22eb5d6638b8e1d01468ad3328280706dfc31700ea3fe507bfd0f8169b2187e8d804978b5a6397a1f471a29369349f8dcda480be4b38fb6862fc91512ff53f74ccb2674157b224da1961bbaf18cfe6f399d07607fc5fa"], 0xdf)
sendfile(r3, r2, 0x0, 0xa198)
open(0x0, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)

22:09:05 executing program 5:
perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mknod$loop(0x0, 0x0, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x400000000803, 0x5f)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0)
r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0)
ftruncate(r2, 0x200004)
sendfile(r0, r2, 0x0, 0x80001d00c0d0)

22:09:05 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000000c0)=r2)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7132})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="2000000011000d04000057640dc8e1833e520000", @ANYRES32=r5, @ANYBLOB='\x00'/12], 0x20}}, 0x0)

[  775.979119][T26786] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop2.
22:09:06 executing program 2:
mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
syz_mount_image$minix(&(0x7f0000000340)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x4c00, 0x1, &(0x7f0000000000)=[{&(0x7f0000000140)="600b42e006000a0090", 0x9, 0x400}], 0x0, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

22:09:06 executing program 1:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/route\x00')
sendfile(r0, r1, 0x0, 0xedc0)

[  776.175259][   T27] audit: type=1804 audit(1583791746.122:244): pid=26897 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/467/file0" dev="sda1" ino=17073 res=1
[  776.254509][   T27] audit: type=1804 audit(1583791746.172:245): pid=26897 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/467/file0" dev="sda1" ino=17073 res=1
[  776.328116][T26906] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop2.
22:09:06 executing program 1:
r0 = socket$inet6(0xa, 0x3, 0x3c)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @empty}, 0x1c)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)='+', 0x1}], 0x1}, 0x8800)
writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000480)="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", 0xfdef}], 0x1)

22:09:06 executing program 5:
perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mknod$loop(0x0, 0x0, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x400000000803, 0x5f)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0)
r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0)
ftruncate(r2, 0x200004)
sendfile(r0, r2, 0x0, 0x80001d00c0d0)

22:09:06 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000000c0)=r2)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7132})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="2000000011000d04000057640dc8e1833e520000", @ANYRES32=r5, @ANYBLOB='\x00'/12], 0x20}}, 0x0)

22:09:06 executing program 2:
mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
syz_mount_image$minix(&(0x7f0000000340)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x4c00, 0x1, &(0x7f0000000000)=[{&(0x7f0000000140)="600b42e006000a0090040300001a", 0xe, 0x400}], 0x0, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

[  776.705535][T27006] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop2.
22:09:06 executing program 1:
r0 = socket$inet6(0xa, 0x3, 0x3c)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @empty}, 0x1c)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)='+', 0x1}], 0x1}, 0x8800)
writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000480)="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", 0xfdef}], 0x1)

22:09:06 executing program 2:
mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
syz_mount_image$minix(&(0x7f0000000340)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x4c00, 0x1, &(0x7f0000000000)=[{&(0x7f0000000140)="600b42e006000a0090040300001a", 0xe, 0x400}], 0x0, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

22:09:06 executing program 3:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
close(r2)
socket$inet(0x10, 0x2, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080025944eeba71a4976e252922c000000002aba000000012e0b3836005404b0e0301a4ce875f2e0ff5f163ee340b7679500800000000000000101013c5891039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffff7f00000000ffefa6f909f7", @ANYRES32=r4, @ANYBLOB="0000000bf1ffffff000000ff7f0001"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

22:09:06 executing program 0:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = open(0x0, 0x141042, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00'], 0x1)
sendfile(r1, r0, 0x0, 0xa198)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="000ffff0802bc8369ce73cb6fda400006224541f3780351157b252dd000000009154262a80420801444dd89f6bfd1510066a2128e6c04f112558c8bdac2ae91c22768a299a879ca5ea45ea6189f14f84644589436f645a783aac81cf5bc374f0ac00ef2728cfd3b16ae8a4ec80ebea0a7e8c20a5986a2ab75b34dc27b332714d36cba3ac62ec7100c22eb5d6638b8e1d01468ad3328280706dfc31700ea3fe507bfd0f8169b2187e8d804978b5a6397a1f471a29369349f8dcda480be4b38fb6862fc91512ff53f74ccb2674157b224da1961bbaf18cfe6f399d07607fc5fa"], 0xdf)
sendfile(r3, r2, 0x0, 0xa198)
open(0x0, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)

22:09:06 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0xa6, 0x0)

22:09:06 executing program 5:
perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mknod$loop(0x0, 0x0, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x400000000803, 0x5f)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0)
r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0)
ftruncate(r2, 0x200004)
sendfile(r0, r2, 0x0, 0x80001d00c0d0)

[  776.985901][T27037] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop2.
22:09:07 executing program 1:
open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0)

22:09:07 executing program 2:
mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
syz_mount_image$minix(&(0x7f0000000340)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x4c00, 0x1, &(0x7f0000000000)=[{&(0x7f0000000140)="600b42e006000a0090040300001a", 0xe, 0x400}], 0x0, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

[  777.148091][   T27] audit: type=1804 audit(1583791747.092:246): pid=27041 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/468/file0" dev="sda1" ino=16535 res=1
[  777.268904][   T27] audit: type=1804 audit(1583791747.142:247): pid=27041 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/468/file0" dev="sda1" ino=16535 res=1
22:09:07 executing program 4:
r0 = getpid()
sched_setscheduler(r0, 0x0, 0x0)
capget(0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$unix(0x1, 0x0, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
keyctl$get_security(0x11, 0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc)
setuid(0x0)
keyctl$chown(0x4, 0x0, 0x0, 0xee01)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0)

[  777.313171][T27059] MINIX-fs: mounting unchecked file system, running fsck is recommended
[  777.390276][T27065] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop2.
22:09:07 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000024000705000000000000000000000008", @ANYRES32, @ANYBLOB="00000000ffffffff0000000008000100736622002c00020028000100"/64], 0x58}}, 0x0)

[  777.538101][ T7877] minix_free_inode: bit 1 already cleared
22:09:07 executing program 2:
mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
syz_mount_image$minix(&(0x7f0000000340)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x4c00, 0x1, &(0x7f0000000000)=[{&(0x7f0000000140)="600b42e006000a0090040300001af5c9", 0x10, 0x400}], 0x0, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

22:09:07 executing program 5:
perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mknod$loop(0x0, 0x0, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
r0 = socket$inet6(0xa, 0x400000000803, 0x5f)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0)
r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0)
ftruncate(r2, 0x200004)
sendfile(r0, r2, 0x0, 0x80001d00c0d0)

[  777.695466][T27176] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop2.
22:09:07 executing program 2:
mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
syz_mount_image$minix(&(0x7f0000000340)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x4c00, 0x1, &(0x7f0000000000)=[{&(0x7f0000000140)="600b42e006000a0090040300001af5c9", 0x10, 0x400}], 0x0, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

22:09:07 executing program 4:
r0 = getpid()
sched_setscheduler(r0, 0x0, 0x0)
capget(0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$unix(0x1, 0x0, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
keyctl$get_security(0x11, 0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc)
setuid(0x0)
keyctl$chown(0x4, 0x0, 0x0, 0xee01)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0)

22:09:07 executing program 3:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(0xffffffffffffffff)
socket$inet(0x10, 0x2, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080025944eeba71a4976e252922c000000002aba000000012e0b3836005404b0e0301a4ce875f2e0ff5f163ee340b7679500800000000000000101013c5891039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffff7f00000000ffefa6f909f7", @ANYRES32=r4, @ANYBLOB="0000000bf1ffffff000000ff7f0001"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

22:09:07 executing program 0:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = open(0x0, 0x141042, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00'], 0x1)
sendfile(r1, r0, 0x0, 0xa198)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="000ffff0802bc8369ce73cb6fda400006224541f3780351157b252dd000000009154262a80420801444dd89f6bfd1510066a2128e6c04f112558c8bdac2ae91c22768a299a879ca5ea45ea6189f14f84644589436f645a783aac81cf5bc374f0ac00ef2728cfd3b16ae8a4ec80ebea0a7e8c20a5986a2ab75b34dc27b332714d36cba3ac62ec7100c22eb5d6638b8e1d01468ad3328280706dfc31700ea3fe507bfd0f8169b2187e8d804978b5a6397a1f471a29369349f8dcda480be4b38fb6862fc91512ff53f74ccb2674157b224da1961bbaf18cfe6f399d07607fc5fa"], 0xdf)
sendfile(r3, r2, 0x0, 0xa198)
open(0x0, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)

22:09:07 executing program 1:
r0 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0)
ftruncate(r0, 0x2007fff)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$inet6(0xa, 0x3, 0x2c)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
sendfile(r3, r4, 0x0, 0x8482)

[  777.960150][T27289] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop2.
22:09:08 executing program 2:
mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
syz_mount_image$minix(&(0x7f0000000340)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x4c00, 0x1, &(0x7f0000000000)=[{&(0x7f0000000140)="600b42e006000a0090040300001af5c9", 0x10, 0x400}], 0x0, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

[  778.155078][   T27] kauditd_printk_skb: 1 callbacks suppressed
[  778.155102][   T27] audit: type=1804 audit(1583791748.102:249): pid=27297 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/469/file0" dev="sda1" ino=17223 res=1
22:09:08 executing program 5:
perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mknod$loop(0x0, 0x0, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
r0 = socket$inet6(0xa, 0x400000000803, 0x5f)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0)
r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0)
ftruncate(r2, 0x200004)
sendfile(r0, r2, 0x0, 0x80001d00c0d0)

[  778.276702][   T27] audit: type=1804 audit(1583791748.142:250): pid=27297 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/469/file0" dev="sda1" ino=17223 res=1
[  778.321582][T27338] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop2.
22:09:08 executing program 1:
socket$inet(0x2, 0x3, 0x2)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0xa, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x100000011, @multicast1, 0x0, 0x0, 'dh\x00'}, 0x2c)

[  778.393124][   T27] audit: type=1804 audit(1583791748.162:251): pid=27302 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir261492915/syzkaller.FhdNWt/611/bus" dev="sda1" ino=17228 res=1
22:09:08 executing program 2:
mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
syz_mount_image$minix(&(0x7f0000000340)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x4c00, 0x1, &(0x7f0000000000)=[{&(0x7f0000000140)="600b42e006000a0090040300001af5c968", 0x11, 0x400}], 0x0, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

22:09:08 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0))
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2923404, 0x0)
r0 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x7ff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getrandom(&(0x7f0000000780)=""/4096, 0x1000, 0x2)
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x10003)
write$binfmt_script(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB='#!'], 0x2)
close(r1)
r2 = socket(0x11, 0x800000003, 0x0)
bind(r2, &(0x7f0000000080)=@in6={0xa, 0x4e21, 0x101, @mcast1, 0x80000000}, 0x80)
getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x9)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYRES32=r3, @ANYBLOB="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"], 0x2}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000003c0)={'wg2\x00', <r4=>r3})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000400)={'wg2\x00', r4})
modify_ldt$write(0x1, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x20000040)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
write$FUSE_LSEEK(0xffffffffffffffff, &(0x7f0000000380)={0x18, 0x0, 0x1, {0x3}}, 0x18)
setsockopt$inet_mreqn(r5, 0x0, 0x24, 0x0, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
setxattr$security_ima(&(0x7f0000000100)='./file0\x00', &(0x7f0000001940)='security.ima\x00', 0x0, 0x0, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@newlink={0x30, 0x10, 0x705, 0x3000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0xff0f}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x4}}}]}, 0x30}}, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58)

[  778.563466][   T27] audit: type=1800 audit(1583791748.302:252): pid=27302 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=17228 res=0
22:09:08 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x8, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013001d04000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a0010000000140003006970766c616e31000000160000000000"], 0x3c}, 0x1, 0x5e}, 0x0)

[  778.649986][T27521] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop2.
22:09:08 executing program 5:
perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mknod$loop(0x0, 0x0, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x400000000803, 0x5f)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0)
r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0)
ftruncate(r2, 0x200004)
sendfile(r0, r2, 0x0, 0x80001d00c0d0)

[  778.776538][T27530] team0: Device ipvlan1 failed to register rx_handler
22:09:08 executing program 2:
mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
syz_mount_image$minix(&(0x7f0000000340)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x4c00, 0x1, &(0x7f0000000000)=[{&(0x7f0000000140)="600b42e006000a0090040300001af5c968", 0x11, 0x400}], 0x0, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

22:09:08 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0))
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2923404, 0x0)
r0 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x7ff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getrandom(&(0x7f0000000780)=""/4096, 0x1000, 0x2)
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x10003)
write$binfmt_script(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB='#!'], 0x2)
close(r1)
r2 = socket(0x11, 0x800000003, 0x0)
bind(r2, &(0x7f0000000080)=@in6={0xa, 0x4e21, 0x101, @mcast1, 0x80000000}, 0x80)
getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x9)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYRES32=r3, @ANYBLOB="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"], 0x2}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000003c0)={'wg2\x00', <r4=>r3})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000400)={'wg2\x00', r4})
modify_ldt$write(0x1, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x20000040)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
write$FUSE_LSEEK(0xffffffffffffffff, &(0x7f0000000380)={0x18, 0x0, 0x1, {0x3}}, 0x18)
setsockopt$inet_mreqn(r5, 0x0, 0x24, 0x0, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
setxattr$security_ima(&(0x7f0000000100)='./file0\x00', &(0x7f0000001940)='security.ima\x00', 0x0, 0x0, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@newlink={0x30, 0x10, 0x705, 0x3000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0xff0f}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x4}}}]}, 0x30}}, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58)

22:09:09 executing program 3:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(0xffffffffffffffff)
socket$inet(0x10, 0x2, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080025944eeba71a4976e252922c000000002aba000000012e0b3836005404b0e0301a4ce875f2e0ff5f163ee340b7679500800000000000000101013c5891039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffff7f00000000ffefa6f909f7", @ANYRES32=r4, @ANYBLOB="0000000bf1ffffff000000ff7f0001"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

22:09:09 executing program 0:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00'], 0x1)
sendfile(r1, r0, 0x0, 0xa198)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="000ffff0802bc8369ce73cb6fda400006224541f3780351157b252dd000000009154262a80420801444dd89f6bfd1510066a2128e6c04f112558c8bdac2ae91c22768a299a879ca5ea45ea6189f14f84644589436f645a783aac81cf5bc374f0ac00ef2728cfd3b16ae8a4ec80ebea0a7e8c20a5986a2ab75b34dc27b332714d36cba3ac62ec7100c22eb5d6638b8e1d01468ad3328280706dfc31700ea3fe507bfd0f8169b2187e8d804978b5a6397a1f471a29369349f8dcda480be4b38fb6862fc91512ff53f74ccb2674157b224da1961bbaf18cfe6f399d07607fc5fa"], 0xdf)
sendfile(r3, r2, 0x0, 0xa198)
open(0x0, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)

22:09:09 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x8, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013001d04000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a0010000000140003006970766c616e31000000160000000000"], 0x3c}, 0x1, 0x5e}, 0x0)

[  779.035042][T27638] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop2.
[  779.215825][   T27] audit: type=1804 audit(1583791749.162:253): pid=27651 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/470/file0" dev="sda1" ino=17235 res=1
22:09:09 executing program 2:
mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
syz_mount_image$minix(&(0x7f0000000340)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x4c00, 0x1, &(0x7f0000000000)=[{&(0x7f0000000140)="600b42e006000a0090040300001af5c968", 0x11, 0x400}], 0x0, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

[  779.260694][T27650] team0: Device ipvlan1 failed to register rx_handler
[  779.338821][   T27] audit: type=1804 audit(1583791749.162:254): pid=27644 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/470/file0" dev="sda1" ino=17235 res=1
[  779.392009][T27659] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop2.
[  779.436987][   T27] audit: type=1804 audit(1583791749.182:255): pid=27651 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/470/file0" dev="sda1" ino=17235 res=1
22:09:09 executing program 5:
perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mknod$loop(0x0, 0x0, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = socket$inet6(0xa, 0x400000000803, 0x5f)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0)
r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0)
ftruncate(r2, 0x200004)
sendfile(r0, r2, 0x0, 0x80001d00c0d0)

22:09:09 executing program 2:
mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
syz_mount_image$minix(&(0x7f0000000340)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x4c00, 0x1, &(0x7f0000000000)=[{&(0x7f0000000140)="600b42e006000a0090040300001af5c96824", 0x12}], 0x0, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

22:09:09 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0))
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2923404, 0x0)
r0 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x7ff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getrandom(&(0x7f0000000780)=""/4096, 0x1000, 0x2)
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x10003)
write$binfmt_script(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB='#!'], 0x2)
close(r1)
r2 = socket(0x11, 0x800000003, 0x0)
bind(r2, &(0x7f0000000080)=@in6={0xa, 0x4e21, 0x101, @mcast1, 0x80000000}, 0x80)
getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x9)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYRES32=r3, @ANYBLOB="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"], 0x2}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000003c0)={'wg2\x00', <r4=>r3})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000400)={'wg2\x00', r4})
modify_ldt$write(0x1, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x20000040)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
write$FUSE_LSEEK(0xffffffffffffffff, &(0x7f0000000380)={0x18, 0x0, 0x1, {0x3}}, 0x18)
setsockopt$inet_mreqn(r5, 0x0, 0x24, 0x0, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
setxattr$security_ima(&(0x7f0000000100)='./file0\x00', &(0x7f0000001940)='security.ima\x00', 0x0, 0x0, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@newlink={0x30, 0x10, 0x705, 0x3000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0xff0f}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x4}}}]}, 0x30}}, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58)

22:09:09 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0))
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2923404, 0x0)
r0 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x7ff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getrandom(&(0x7f0000000780)=""/4096, 0x1000, 0x2)
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x10003)
write$binfmt_script(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB='#!'], 0x2)
close(r1)
r2 = socket(0x11, 0x800000003, 0x0)
bind(r2, &(0x7f0000000080)=@in6={0xa, 0x4e21, 0x101, @mcast1, 0x80000000}, 0x80)
getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x9)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYRES32=r3, @ANYBLOB="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"], 0x2}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000003c0)={'wg2\x00', <r4=>r3})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000400)={'wg2\x00', r4})
modify_ldt$write(0x1, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x20000040)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
write$FUSE_LSEEK(0xffffffffffffffff, &(0x7f0000000380)={0x18, 0x0, 0x1, {0x3}}, 0x18)
setsockopt$inet_mreqn(r5, 0x0, 0x24, 0x0, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
setxattr$security_ima(&(0x7f0000000100)='./file0\x00', &(0x7f0000001940)='security.ima\x00', 0x0, 0x0, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@newlink={0x30, 0x10, 0x705, 0x3000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0xff0f}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x4}}}]}, 0x30}}, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58)

[  779.746138][T27773] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop2.
22:09:09 executing program 2:
mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
syz_mount_image$minix(&(0x7f0000000340)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x4c00, 0x1, &(0x7f0000000000)=[{&(0x7f0000000140)="600b42e006000a0090040300001af5c96824", 0x12}], 0x0, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

22:09:09 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0))
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2923404, 0x0)
r0 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x7ff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getrandom(&(0x7f0000000780)=""/4096, 0x1000, 0x2)
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x10003)
write$binfmt_script(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB='#!'], 0x2)
close(r1)
r2 = socket(0x11, 0x800000003, 0x0)
bind(r2, &(0x7f0000000080)=@in6={0xa, 0x4e21, 0x101, @mcast1, 0x80000000}, 0x80)
getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x9)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYRES32=r3, @ANYBLOB="00000001f1ffffff000000000800010063627100a408020004040600030000000500000000700300fdffffffffff00001f0000000500000000020000010000000000100083000000fdffffff07000000084900000100000002000000cf000000feffffff080000000180000003000000090000000200000000274a49ef6949a7bb000000050000000100000004000000ff7f000000000000000400000002000004000000ff0f0000f44f350001000000010400005eb768350100000008000000ffffffffc38d00001f000000040008830600000000000100f7ffffff030000000080ffff050000000600000006000000a900000000000000c0000000c0ffffff08000000018000000101000006000000b300000000000020050000000104000004000000070000000800000001010000d0000000c0ffffff0500000004000000060000000900000008000000f7ffffff0800000003000000080000000400000001000080040000000400000000100000040000000700000009000000fcffffff01000000010000000900000000020000060e0000080000000200000002000000090000000800000007000000ab000000fb00000007000000ff0100000800000001040000070000000300000009000000ff07000008000000ffff0000a90100000900000005000000200000000500000001000000070000008eb7000000000080010000000000000007000000fffffffffcffffff01f0ffff000000003f00000003000000000100000080000000800000030000000000000005000000ffffffff0700000015ba000004000000070000000300000003000000ffffffff04000000554f00006ff800000700000003000000000200000600000008000000b300000006000000000000000007000001010000030000000080000000040000730a000001000080010000009e0c0000000800000100008000000000000000004000000000fefffff67d000004000000ff01000002000000000000024000000040000000ed000000010001000e0a05000000000000020000040000000600000002000000ff7f00000100000001000000060000007f000000020000000004000004000000090000009000000008000000b6000000040000000400000005000000f50a0000ffff0000060000008ff9ffff070000001eaaffff3f0000008000000000000000ff0c0000ff7f0000030000007f0000002d0000000800000000010000ff070000ffffffff2bab000002000000ace800000500000000000000e1bf934d"], 0x2}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000003c0)={'wg2\x00', <r4=>r3})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000400)={'wg2\x00', r4})
modify_ldt$write(0x1, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x20000040)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
write$FUSE_LSEEK(0xffffffffffffffff, &(0x7f0000000380)={0x18, 0x0, 0x1, {0x3}}, 0x18)
setsockopt$inet_mreqn(r5, 0x0, 0x24, 0x0, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
setxattr$security_ima(&(0x7f0000000100)='./file0\x00', &(0x7f0000001940)='security.ima\x00', 0x0, 0x0, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@newlink={0x30, 0x10, 0x705, 0x3000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0xff0f}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x4}}}]}, 0x30}}, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58)

22:09:09 executing program 5:
perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mknod$loop(0x0, 0x0, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000803, 0x5f)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0)
r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0)
ftruncate(r2, 0x200004)
sendfile(r0, r2, 0x0, 0x80001d00c0d0)

22:09:09 executing program 0:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00'], 0x1)
sendfile(r1, r0, 0x0, 0xa198)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="000ffff0802bc8369ce73cb6fda400006224541f3780351157b252dd000000009154262a80420801444dd89f6bfd1510066a2128e6c04f112558c8bdac2ae91c22768a299a879ca5ea45ea6189f14f84644589436f645a783aac81cf5bc374f0ac00ef2728cfd3b16ae8a4ec80ebea0a7e8c20a5986a2ab75b34dc27b332714d36cba3ac62ec7100c22eb5d6638b8e1d01468ad3328280706dfc31700ea3fe507bfd0f8169b2187e8d804978b5a6397a1f471a29369349f8dcda480be4b38fb6862fc91512ff53f74ccb2674157b224da1961bbaf18cfe6f399d07607fc5fa"], 0xdf)
sendfile(r3, r2, 0x0, 0xa198)
open(0x0, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)

[  779.982836][T27781] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop2.
[  780.115187][   T27] audit: type=1804 audit(1583791750.062:256): pid=27788 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/471/file0" dev="sda1" ino=17238 res=1
22:09:10 executing program 3:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(0xffffffffffffffff)
socket$inet(0x10, 0x2, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080025944eeba71a4976e252922c000000002aba000000012e0b3836005404b0e0301a4ce875f2e0ff5f163ee340b7679500800000000000000101013c5891039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffff7f00000000ffefa6f909f7", @ANYRES32=r4, @ANYBLOB="0000000bf1ffffff000000ff7f0001"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

22:09:10 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0))
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2923404, 0x0)
r0 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x7ff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getrandom(&(0x7f0000000780)=""/4096, 0x1000, 0x2)
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x10003)
write$binfmt_script(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB='#!'], 0x2)
close(r1)
r2 = socket(0x11, 0x800000003, 0x0)
bind(r2, &(0x7f0000000080)=@in6={0xa, 0x4e21, 0x101, @mcast1, 0x80000000}, 0x80)
getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x9)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYRES32=r3, @ANYBLOB="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"], 0x2}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000003c0)={'wg2\x00', <r4=>r3})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000400)={'wg2\x00', r4})
modify_ldt$write(0x1, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x20000040)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
write$FUSE_LSEEK(0xffffffffffffffff, &(0x7f0000000380)={0x18, 0x0, 0x1, {0x3}}, 0x18)
setsockopt$inet_mreqn(r5, 0x0, 0x24, 0x0, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
setxattr$security_ima(&(0x7f0000000100)='./file0\x00', &(0x7f0000001940)='security.ima\x00', 0x0, 0x0, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@newlink={0x30, 0x10, 0x705, 0x3000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0xff0f}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x4}}}]}, 0x30}}, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58)

22:09:10 executing program 2:
mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
syz_mount_image$minix(&(0x7f0000000340)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x4c00, 0x1, &(0x7f0000000000)=[{&(0x7f0000000140)="600b42e006000a0090040300001af5c96824", 0x12}], 0x0, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

[  780.158739][   T27] audit: type=1804 audit(1583791750.072:257): pid=27788 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/471/file0" dev="sda1" ino=17238 res=1
22:09:10 executing program 4:

22:09:10 executing program 5:
perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mknod$loop(0x0, 0x0, 0x1)
r0 = socket$inet6(0xa, 0x400000000803, 0x5f)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0)
r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0)
ftruncate(r2, 0x200004)
sendfile(r0, r2, 0x0, 0x80001d00c0d0)

22:09:10 executing program 1:

[  780.500343][T27805] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop2.
22:09:10 executing program 4:

22:09:10 executing program 0:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00'], 0x1)
sendfile(r1, r0, 0x0, 0xa198)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="000ffff0802bc8369ce73cb6fda400006224541f3780351157b252dd000000009154262a80420801444dd89f6bfd1510066a2128e6c04f112558c8bdac2ae91c22768a299a879ca5ea45ea6189f14f84644589436f645a783aac81cf5bc374f0ac00ef2728cfd3b16ae8a4ec80ebea0a7e8c20a5986a2ab75b34dc27b332714d36cba3ac62ec7100c22eb5d6638b8e1d01468ad3328280706dfc31700ea3fe507bfd0f8169b2187e8d804978b5a6397a1f471a29369349f8dcda480be4b38fb6862fc91512ff53f74ccb2674157b224da1961bbaf18cfe6f399d07607fc5fa"], 0xdf)
sendfile(r3, r2, 0x0, 0xa198)
open(0x0, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)

22:09:10 executing program 2:
mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
syz_mount_image$minix(&(0x7f0000000340)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x4c00, 0x1, &(0x7f0000000000)=[{&(0x7f0000000140)="600b42e006000a0090040300001af5c96824", 0x12, 0x400}], 0x0, 0x0)
umount2(0x0, 0x0)

22:09:10 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

22:09:10 executing program 5:
perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mknod$loop(0x0, 0x0, 0x1)
r0 = socket$inet6(0xa, 0x400000000803, 0x5f)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0)
r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0)
ftruncate(r2, 0x200004)
sendfile(r0, r2, 0x0, 0x80001d00c0d0)

[  780.857312][   T27] audit: type=1804 audit(1583791750.792:258): pid=27822 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/472/file0" dev="sda1" ino=16544 res=1
[  780.915478][T27825] MINIX-fs: mounting unchecked file system, running fsck is recommended
22:09:10 executing program 4:
perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
io_submit(0x0, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000001c0)={{{@in, @in=@broadcast}}, {{@in=@loopback}, 0x0, @in=@initdev}}, &(0x7f0000000140)=0xe8)
socket$inet_udplite(0x2, 0x2, 0x88)
setreuid(0x0, 0x0)
mount$overlay(0x0, 0x0, 0x0, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB='upperdir=./file0,index=on,metacopy=off,lowerdir=./file0,xino=off,nfs_export=off,nfs_export=on,index=oN,obj_role=nfs_export=off,smackfshat=/dei/kvm\x00,defcontext=', @ANYRESDEC, @ANYBLOB="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"])
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000003, 0x5c831, 0xffffffffffffffff, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
pipe(0x0)
r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm_plock\x00', 0x0, 0x0)
creat(0x0, 0x0)
fanotify_mark(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, &(0x7f0000000a80)={0x0, "a6cddeb02f407e24b899d9619a4e0a53e1c62827604c39fdaa27e21bee8a0ddd", 0x28ef3037c3f0dc97, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4})
write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000440)={0xa, {0x6, 0x2}}, 0xa)
pipe(&(0x7f00000000c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(r5)
connect$inet6(r5, &(0x7f0000000380)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000400)=@ccm_128={{0x304}, "78395c95d0fdfb60", "520b1e4aa0f71c22ff00", "a9016007", "f6885a10e7196cef"}, 0x28)
splice(r4, 0x0, r5, 0x0, 0x100000000, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000d40)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffc01, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x400, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x45c)
r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000)

[  781.038150][ T7879] minix_free_inode: bit 1 already cleared
22:09:11 executing program 3:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r2)
socket$inet(0x10, 0x0, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080025944eeba71a4976e252922c000000002aba000000012e0b3836005404b0e0301a4ce875f2e0ff5f163ee340b7679500800000000000000101013c5891039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffff7f00000000ffefa6f909f7", @ANYRES32=r4, @ANYBLOB="0000000bf1ffffff000000ff7f0001"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

22:09:11 executing program 2:
mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
syz_mount_image$minix(&(0x7f0000000340)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x4c00, 0x1, &(0x7f0000000000)=[{&(0x7f0000000140)="600b42e006000a0090040300001af5c96824", 0x12, 0x400}], 0x0, 0x0)
umount2(0x0, 0x0)

22:09:11 executing program 1:
open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet6(0xa, 0x3, 0x2c)
r3 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x8482)

22:09:11 executing program 5:
perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mknod$loop(0x0, 0x0, 0x1)
r0 = socket$inet6(0xa, 0x400000000803, 0x5f)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0)
r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0)
ftruncate(r2, 0x200004)
sendfile(r0, r2, 0x0, 0x80001d00c0d0)

22:09:11 executing program 2:
mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
syz_mount_image$minix(&(0x7f0000000340)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x4c00, 0x1, &(0x7f0000000000)=[{&(0x7f0000000140)="600b42e006000a0090040300001af5c96824", 0x12, 0x400}], 0x0, 0x0)
umount2(0x0, 0x0)

[  781.468896][T27953] MINIX-fs: mounting unchecked file system, running fsck is recommended
[  781.516688][ T7879] minix_free_inode: bit 1 already cleared
22:09:11 executing program 5:
perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000803, 0x5f)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0)
r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0)
ftruncate(r2, 0x200004)
sendfile(r0, r2, 0x0, 0x80001d00c0d0)

22:09:11 executing program 4:
perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
io_submit(0x0, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000001c0)={{{@in, @in=@broadcast}}, {{@in=@loopback}, 0x0, @in=@initdev}}, &(0x7f0000000140)=0xe8)
socket$inet_udplite(0x2, 0x2, 0x88)
setreuid(0x0, 0x0)
mount$overlay(0x0, 0x0, 0x0, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB='upperdir=./file0,index=on,metacopy=off,lowerdir=./file0,xino=off,nfs_export=off,nfs_export=on,index=oN,obj_role=nfs_export=off,smackfshat=/dei/kvm\x00,defcontext=', @ANYRESDEC, @ANYBLOB="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"])
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000003, 0x5c831, 0xffffffffffffffff, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
pipe(0x0)
r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm_plock\x00', 0x0, 0x0)
creat(0x0, 0x0)
fanotify_mark(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, &(0x7f0000000a80)={0x0, "a6cddeb02f407e24b899d9619a4e0a53e1c62827604c39fdaa27e21bee8a0ddd", 0x28ef3037c3f0dc97, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4})
write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000440)={0xa, {0x6, 0x2}}, 0xa)
pipe(&(0x7f00000000c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(r5)
connect$inet6(r5, &(0x7f0000000380)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000400)=@ccm_128={{0x304}, "78395c95d0fdfb60", "520b1e4aa0f71c22ff00", "a9016007", "f6885a10e7196cef"}, 0x28)
splice(r4, 0x0, r5, 0x0, 0x100000000, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000d40)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffc01, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x400, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x45c)
r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000)

22:09:11 executing program 0:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r1 = open(0x0, 0x141042, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00'], 0x1)
sendfile(r1, r0, 0x0, 0xa198)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="000ffff0802bc8369ce73cb6fda400006224541f3780351157b252dd000000009154262a80420801444dd89f6bfd1510066a2128e6c04f112558c8bdac2ae91c22768a299a879ca5ea45ea6189f14f84644589436f645a783aac81cf5bc374f0ac00ef2728cfd3b16ae8a4ec80ebea0a7e8c20a5986a2ab75b34dc27b332714d36cba3ac62ec7100c22eb5d6638b8e1d01468ad3328280706dfc31700ea3fe507bfd0f8169b2187e8d804978b5a6397a1f471a29369349f8dcda480be4b38fb6862fc91512ff53f74ccb2674157b224da1961bbaf18cfe6f399d07607fc5fa"], 0xdf)
sendfile(r3, r2, 0x0, 0xa198)
open(0x0, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)

22:09:11 executing program 1:
perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
io_submit(0x0, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000001c0)={{{@in, @in=@broadcast}}, {{@in=@loopback}, 0x0, @in=@initdev}}, &(0x7f0000000140)=0xe8)
socket$inet_udplite(0x2, 0x2, 0x88)
setreuid(0x0, 0x0)
mount$overlay(0x0, 0x0, 0x0, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB='upperdir=./file0,index=on,metacopy=off,lowerdir=./file0,xino=off,nfs_export=off,nfs_export=on,index=oN,obj_role=nfs_export=off,smackfshat=/dei/kvm\x00,defcontext=', @ANYRESDEC, @ANYBLOB="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"])
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000003, 0x5c831, 0xffffffffffffffff, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
pipe(0x0)
r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm_plock\x00', 0x0, 0x0)
creat(0x0, 0x0)
fanotify_mark(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, &(0x7f0000000a80)={0x0, "a6cddeb02f407e24b899d9619a4e0a53e1c62827604c39fdaa27e21bee8a0ddd", 0x28ef3037c3f0dc97, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4})
write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000440)={0xa, {0x6, 0x2}}, 0xa)
pipe(&(0x7f00000000c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(r5)
connect$inet6(r5, &(0x7f0000000380)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000400)=@ccm_128={{0x304}, "78395c95d0fdfb60", "520b1e4aa0f71c22ff00", "a9016007", "f6885a10e7196cef"}, 0x28)
splice(r4, 0x0, r5, 0x0, 0x100000000, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000d40)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffc01, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x400, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x45c)
r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000)

[  781.738310][T28067] MINIX-fs: mounting unchecked file system, running fsck is recommended
22:09:11 executing program 2:
perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
io_submit(0x0, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000001c0)={{{@in, @in=@broadcast}}, {{@in=@loopback}, 0x0, @in=@initdev}}, &(0x7f0000000140)=0xe8)
socket$inet_udplite(0x2, 0x2, 0x88)
setreuid(0x0, 0x0)
mount$overlay(0x0, 0x0, 0x0, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB='upperdir=./file0,index=on,metacopy=off,lowerdir=./file0,xino=off,nfs_export=off,nfs_export=on,index=oN,obj_role=nfs_export=off,smackfshat=/dei/kvm\x00,defcontext=', @ANYRESDEC, @ANYBLOB="2c61707072616973652c00f1a70111a8eb5e51f608a99261c8ca162b4f3b7101f3ae4ee768c85ab773b468c941bc482bc81037b3aef2ba6b0f2749024a4c8a9780001b187ccbe94ce6438299eab8922c8b8b35b82917b22cdae7939f46197378ac610e08dbf04915ac001efb8c188f76498c2251d6c47169402f93748c71a1093ae15324494aec28f9a7f15342d2ed2339050a1a9867fd62bdbbfa7f3a4cd3e30624e5d1ea8ccae2a74613dde6613eb3a7709e55af4ee4aedd9c206bfbf9db39ff8d4bc635cd4f75013c7e5c1f61f6968e5982807346226a3a07bd298401542e015afcda980fc98b75964cd7121b88900d460ad3ddbc622f4aa59a2299afcbf13982f1d2b392130b2b172087be"])
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000003, 0x5c831, 0xffffffffffffffff, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
pipe(0x0)
r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm_plock\x00', 0x0, 0x0)
creat(0x0, 0x0)
fanotify_mark(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, &(0x7f0000000a80)={0x0, "a6cddeb02f407e24b899d9619a4e0a53e1c62827604c39fdaa27e21bee8a0ddd", 0x28ef3037c3f0dc97, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4})
write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000440)={0xa, {0x6, 0x2}}, 0xa)
pipe(&(0x7f00000000c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(r5)
connect$inet6(r5, &(0x7f0000000380)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000400)=@ccm_128={{0x304}, "78395c95d0fdfb60", "520b1e4aa0f71c22ff00", "a9016007", "f6885a10e7196cef"}, 0x28)
splice(r4, 0x0, r5, 0x0, 0x100000000, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000d40)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffc01, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x400, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x45c)
r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000)

[  781.812178][ T7879] minix_free_inode: bit 1 already cleared
22:09:12 executing program 4:

22:09:12 executing program 5:
perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000803, 0x5f)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0)
r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0)
ftruncate(r2, 0x200004)
sendfile(r0, r2, 0x0, 0x80001d00c0d0)

22:09:12 executing program 3:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r2)
socket$inet(0x10, 0x0, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080025944eeba71a4976e252922c000000002aba000000012e0b3836005404b0e0301a4ce875f2e0ff5f163ee340b7679500800000000000000101013c5891039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffff7f00000000ffefa6f909f7", @ANYRES32=r4, @ANYBLOB="0000000bf1ffffff000000ff7f0001"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

22:09:12 executing program 0:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r1 = open(0x0, 0x141042, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00'], 0x1)
sendfile(r1, r0, 0x0, 0xa198)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="000ffff0802bc8369ce73cb6fda400006224541f3780351157b252dd000000009154262a80420801444dd89f6bfd1510066a2128e6c04f112558c8bdac2ae91c22768a299a879ca5ea45ea6189f14f84644589436f645a783aac81cf5bc374f0ac00ef2728cfd3b16ae8a4ec80ebea0a7e8c20a5986a2ab75b34dc27b332714d36cba3ac62ec7100c22eb5d6638b8e1d01468ad3328280706dfc31700ea3fe507bfd0f8169b2187e8d804978b5a6397a1f471a29369349f8dcda480be4b38fb6862fc91512ff53f74ccb2674157b224da1961bbaf18cfe6f399d07607fc5fa"], 0xdf)
sendfile(r3, r2, 0x0, 0xa198)
open(0x0, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)

22:09:12 executing program 2:

22:09:12 executing program 1:

22:09:12 executing program 4:

22:09:12 executing program 1:

22:09:12 executing program 2:

22:09:12 executing program 4:

22:09:12 executing program 5:
perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000803, 0x5f)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0)
r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0)
ftruncate(r2, 0x200004)
sendfile(r0, r2, 0x0, 0x80001d00c0d0)

22:09:12 executing program 1:

22:09:12 executing program 4:

22:09:12 executing program 2:

22:09:13 executing program 3:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r2)
socket$inet(0x10, 0x0, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080025944eeba71a4976e252922c000000002aba000000012e0b3836005404b0e0301a4ce875f2e0ff5f163ee340b7679500800000000000000101013c5891039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffff7f00000000ffefa6f909f7", @ANYRES32=r4, @ANYBLOB="0000000bf1ffffff000000ff7f0001"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

22:09:13 executing program 1:

22:09:13 executing program 0:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r1 = open(0x0, 0x141042, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00'], 0x1)
sendfile(r1, r0, 0x0, 0xa198)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="000ffff0802bc8369ce73cb6fda400006224541f3780351157b252dd000000009154262a80420801444dd89f6bfd1510066a2128e6c04f112558c8bdac2ae91c22768a299a879ca5ea45ea6189f14f84644589436f645a783aac81cf5bc374f0ac00ef2728cfd3b16ae8a4ec80ebea0a7e8c20a5986a2ab75b34dc27b332714d36cba3ac62ec7100c22eb5d6638b8e1d01468ad3328280706dfc31700ea3fe507bfd0f8169b2187e8d804978b5a6397a1f471a29369349f8dcda480be4b38fb6862fc91512ff53f74ccb2674157b224da1961bbaf18cfe6f399d07607fc5fa"], 0xdf)
sendfile(r3, r2, 0x0, 0xa198)
open(0x0, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)

22:09:13 executing program 2:

22:09:13 executing program 4:

22:09:13 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000803, 0x5f)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0)
r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0)
ftruncate(r2, 0x200004)
sendfile(r0, r2, 0x0, 0x80001d00c0d0)

22:09:13 executing program 2:

22:09:13 executing program 1:

[  783.551845][   T27] kauditd_printk_skb: 6 callbacks suppressed
[  783.551869][   T27] audit: type=1804 audit(1583791753.502:265): pid=28238 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/475/file0" dev="sda1" ino=17250 res=1
22:09:13 executing program 4:

22:09:13 executing program 1:

[  783.698273][   T27] audit: type=1804 audit(1583791753.512:266): pid=28238 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/475/file0" dev="sda1" ino=17250 res=1
22:09:13 executing program 2:

22:09:13 executing program 4:

22:09:14 executing program 3:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r2)
socket$inet(0x10, 0x2, 0x0)
r3 = socket(0x0, 0x800000003, 0x0)
bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080025944eeba71a4976e252922c000000002aba000000012e0b3836005404b0e0301a4ce875f2e0ff5f163ee340b7679500800000000000000101013c5891039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffff7f00000000ffefa6f909f7", @ANYRES32=r4, @ANYBLOB="0000000bf1ffffff000000ff7f0001"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

22:09:14 executing program 1:

22:09:14 executing program 4:

22:09:14 executing program 2:

22:09:14 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000803, 0x5f)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0)
r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0)
ftruncate(r2, 0x200004)
sendfile(r0, r2, 0x0, 0x80001d00c0d0)

22:09:14 executing program 0:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00'], 0x1)
sendfile(r1, r0, 0x0, 0xa198)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="000ffff0802bc8369ce73cb6fda400006224541f3780351157b252dd000000009154262a80420801444dd89f6bfd1510066a2128e6c04f112558c8bdac2ae91c22768a299a879ca5ea45ea6189f14f84644589436f645a783aac81cf5bc374f0ac00ef2728cfd3b16ae8a4ec80ebea0a7e8c20a5986a2ab75b34dc27b332714d36cba3ac62ec7100c22eb5d6638b8e1d01468ad3328280706dfc31700ea3fe507bfd0f8169b2187e8d804978b5a6397a1f471a29369349f8dcda480be4b38fb6862fc91512ff53f74ccb2674157b224da1961bbaf18cfe6f399d07607fc5fa"], 0xdf)
sendfile(r3, r2, 0x0, 0xa198)
open(0x0, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)

22:09:14 executing program 4:

[  784.492277][   T27] audit: type=1804 audit(1583791754.442:267): pid=28268 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/476/file0" dev="sda1" ino=17259 res=1
22:09:14 executing program 2:

22:09:14 executing program 1:

[  784.578751][T28276] netlink: 2092 bytes leftover after parsing attributes in process `syz-executor.3'.
[  784.586958][   T27] audit: type=1804 audit(1583791754.442:268): pid=28268 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/476/file0" dev="sda1" ino=17259 res=1
22:09:14 executing program 4:

[  784.727497][   T27] audit: type=1804 audit(1583791754.452:269): pid=28268 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/476/file0" dev="sda1" ino=17259 res=1
22:09:14 executing program 2:

22:09:14 executing program 1:

22:09:15 executing program 3:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r2)
socket$inet(0x10, 0x2, 0x0)
r3 = socket(0x0, 0x800000003, 0x0)
bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080025944eeba71a4976e252922c000000002aba000000012e0b3836005404b0e0301a4ce875f2e0ff5f163ee340b7679500800000000000000101013c5891039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffff7f00000000ffefa6f909f7", @ANYRES32=r4, @ANYBLOB="0000000bf1ffffff000000ff7f0001"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

22:09:15 executing program 4:

22:09:15 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000803, 0x5f)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0)
r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0)
ftruncate(r2, 0x200004)
sendfile(r0, r2, 0x0, 0x80001d00c0d0)

22:09:15 executing program 1:

22:09:15 executing program 2:

22:09:15 executing program 0:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00'], 0x1)
sendfile(r1, r0, 0x0, 0xa198)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="000ffff0802bc8369ce73cb6fda400006224541f3780351157b252dd000000009154262a80420801444dd89f6bfd1510066a2128e6c04f112558c8bdac2ae91c22768a299a879ca5ea45ea6189f14f84644589436f645a783aac81cf5bc374f0ac00ef2728cfd3b16ae8a4ec80ebea0a7e8c20a5986a2ab75b34dc27b332714d36cba3ac62ec7100c22eb5d6638b8e1d01468ad3328280706dfc31700ea3fe507bfd0f8169b2187e8d804978b5a6397a1f471a29369349f8dcda480be4b38fb6862fc91512ff53f74ccb2674157b224da1961bbaf18cfe6f399d07607fc5fa"], 0xdf)
sendfile(r3, r2, 0x0, 0xa198)
open(0x0, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)

22:09:15 executing program 1:

[  785.414914][T28304] netlink: 2092 bytes leftover after parsing attributes in process `syz-executor.3'.
22:09:15 executing program 2:

[  785.445753][   T27] audit: type=1804 audit(1583791755.392:270): pid=28303 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/477/file0" dev="sda1" ino=16544 res=1
22:09:15 executing program 4:

[  785.614128][   T27] audit: type=1804 audit(1583791755.402:271): pid=28303 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/477/file0" dev="sda1" ino=16544 res=1
22:09:15 executing program 1:

[  785.694528][   T27] audit: type=1804 audit(1583791755.402:272): pid=28303 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/477/file0" dev="sda1" ino=16544 res=1
22:09:15 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000803, 0x5f)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0)
r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0)
ftruncate(r2, 0x200004)
sendfile(r0, r2, 0x0, 0x80001d00c0d0)

22:09:15 executing program 2:

22:09:16 executing program 3:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r2)
socket$inet(0x10, 0x2, 0x0)
r3 = socket(0x0, 0x800000003, 0x0)
bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080025944eeba71a4976e252922c000000002aba000000012e0b3836005404b0e0301a4ce875f2e0ff5f163ee340b7679500800000000000000101013c5891039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffff7f00000000ffefa6f909f7", @ANYRES32=r4, @ANYBLOB="0000000bf1ffffff000000ff7f0001"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

22:09:16 executing program 1:

22:09:16 executing program 0:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00'], 0x1)
sendfile(r1, r0, 0x0, 0xa198)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="000ffff0802bc8369ce73cb6fda400006224541f3780351157b252dd000000009154262a80420801444dd89f6bfd1510066a2128e6c04f112558c8bdac2ae91c22768a299a879ca5ea45ea6189f14f84644589436f645a783aac81cf5bc374f0ac00ef2728cfd3b16ae8a4ec80ebea0a7e8c20a5986a2ab75b34dc27b332714d36cba3ac62ec7100c22eb5d6638b8e1d01468ad3328280706dfc31700ea3fe507bfd0f8169b2187e8d804978b5a6397a1f471a29369349f8dcda480be4b38fb6862fc91512ff53f74ccb2674157b224da1961bbaf18cfe6f399d07607fc5fa"], 0xdf)
sendfile(r3, r2, 0x0, 0xa198)
open(0x0, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)

22:09:16 executing program 4:

22:09:16 executing program 2:

22:09:16 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000803, 0x5f)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0)
r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0)
ftruncate(r2, 0x200004)
sendfile(r0, r2, 0x0, 0x80001d00c0d0)

22:09:16 executing program 4:

22:09:16 executing program 1:

[  786.398158][   T27] audit: type=1804 audit(1583791756.352:273): pid=28334 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/478/file0" dev="sda1" ino=17254 res=1
22:09:16 executing program 2:

[  786.526259][T28338] netlink: 2092 bytes leftover after parsing attributes in process `syz-executor.3'.
[  786.528473][   T27] audit: type=1804 audit(1583791756.372:274): pid=28334 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/478/file0" dev="sda1" ino=17254 res=1
22:09:16 executing program 4:

22:09:16 executing program 1:

22:09:16 executing program 2:

22:09:17 executing program 3:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r2)
socket$inet(0x10, 0x2, 0x0)
r3 = socket(0x11, 0x0, 0x0)
bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080025944eeba71a4976e252922c000000002aba000000012e0b3836005404b0e0301a4ce875f2e0ff5f163ee340b7679500800000000000000101013c5891039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffff7f00000000ffefa6f909f7", @ANYRES32=r4, @ANYBLOB="0000000bf1ffffff000000ff7f0001"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

22:09:17 executing program 4:

22:09:17 executing program 1:

22:09:17 executing program 2:

22:09:17 executing program 0:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00'], 0x1)
sendfile(r1, r0, 0x0, 0xa198)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="000ffff0802bc8369ce73cb6fda400006224541f3780351157b252dd000000009154262a80420801444dd89f6bfd1510066a2128e6c04f112558c8bdac2ae91c22768a299a879ca5ea45ea6189f14f84644589436f645a783aac81cf5bc374f0ac00ef2728cfd3b16ae8a4ec80ebea0a7e8c20a5986a2ab75b34dc27b332714d36cba3ac62ec7100c22eb5d6638b8e1d01468ad3328280706dfc31700ea3fe507bfd0f8169b2187e8d804978b5a6397a1f471a29369349f8dcda480be4b38fb6862fc91512ff53f74ccb2674157b224da1961bbaf18cfe6f399d07607fc5fa"], 0xdf)
sendfile(r3, r2, 0x0, 0xa198)
open(0x0, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)

22:09:17 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000803, 0x5f)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0)
r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0)
ftruncate(r2, 0x200004)
sendfile(r0, r2, 0x0, 0x80001d00c0d0)

22:09:17 executing program 1:

22:09:17 executing program 2:

22:09:17 executing program 4:

[  787.488231][T28373] netlink: 2092 bytes leftover after parsing attributes in process `syz-executor.3'.
22:09:17 executing program 0:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00'], 0x1)
sendfile(r1, r0, 0x0, 0xa198)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="000ffff0802bc8369ce73cb6fda400006224541f3780351157b252dd000000009154262a80420801444dd89f6bfd1510066a2128e6c04f112558c8bdac2ae91c22768a299a879ca5ea45ea6189f14f84644589436f645a783aac81cf5bc374f0ac00ef2728cfd3b16ae8a4ec80ebea0a7e8c20a5986a2ab75b34dc27b332714d36cba3ac62ec7100c22eb5d6638b8e1d01468ad3328280706dfc31700ea3fe507bfd0f8169b2187e8d804978b5a6397a1f471a29369349f8dcda480be4b38fb6862fc91512ff53f74ccb2674157b224da1961bbaf18cfe6f399d07607fc5fa"], 0xdf)
sendfile(r3, r2, 0x0, 0xa198)
open(0x0, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)

22:09:17 executing program 1:

22:09:17 executing program 2:

22:09:18 executing program 3:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r2)
socket$inet(0x10, 0x2, 0x0)
r3 = socket(0x11, 0x0, 0x0)
bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080025944eeba71a4976e252922c000000002aba000000012e0b3836005404b0e0301a4ce875f2e0ff5f163ee340b7679500800000000000000101013c5891039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffff7f00000000ffefa6f909f7", @ANYRES32=r4, @ANYBLOB="0000000bf1ffffff000000ff7f0001"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

22:09:18 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000803, 0x5f)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0)
r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0)
ftruncate(r2, 0x200004)
sendfile(r0, r2, 0x0, 0x80001d00c0d0)

22:09:18 executing program 4:

22:09:18 executing program 1:

22:09:18 executing program 2:

22:09:18 executing program 0:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00'], 0x1)
sendfile(r1, r0, 0x0, 0xa198)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="000ffff0802bc8369ce73cb6fda400006224541f3780351157b252dd000000009154262a80420801444dd89f6bfd1510066a2128e6c04f112558c8bdac2ae91c22768a299a879ca5ea45ea6189f14f84644589436f645a783aac81cf5bc374f0ac00ef2728cfd3b16ae8a4ec80ebea0a7e8c20a5986a2ab75b34dc27b332714d36cba3ac62ec7100c22eb5d6638b8e1d01468ad3328280706dfc31700ea3fe507bfd0f8169b2187e8d804978b5a6397a1f471a29369349f8dcda480be4b38fb6862fc91512ff53f74ccb2674157b224da1961bbaf18cfe6f399d07607fc5fa"], 0xdf)
sendfile(r3, r2, 0x0, 0xa198)
open(0x0, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)

22:09:18 executing program 2:

22:09:18 executing program 4:

22:09:18 executing program 1:

[  788.431166][T28406] netlink: 2092 bytes leftover after parsing attributes in process `syz-executor.3'.
22:09:18 executing program 2:

22:09:18 executing program 4:

22:09:18 executing program 1:

22:09:19 executing program 3:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r2)
socket$inet(0x10, 0x2, 0x0)
r3 = socket(0x11, 0x0, 0x0)
bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080025944eeba71a4976e252922c000000002aba000000012e0b3836005404b0e0301a4ce875f2e0ff5f163ee340b7679500800000000000000101013c5891039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffff7f00000000ffefa6f909f7", @ANYRES32=r4, @ANYBLOB="0000000bf1ffffff000000ff7f0001"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

22:09:19 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000803, 0x5f)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0)
r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0)
ftruncate(r2, 0x200004)
sendfile(r0, r2, 0x0, 0x80001d00c0d0)

22:09:19 executing program 4:

22:09:19 executing program 2:

22:09:19 executing program 1:

22:09:19 executing program 0:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r1, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xa198)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="000ffff0802bc8369ce73cb6fda400006224541f3780351157b252dd000000009154262a80420801444dd89f6bfd1510066a2128e6c04f112558c8bdac2ae91c22768a299a879ca5ea45ea6189f14f84644589436f645a783aac81cf5bc374f0ac00ef2728cfd3b16ae8a4ec80ebea0a7e8c20a5986a2ab75b34dc27b332714d36cba3ac62ec7100c22eb5d6638b8e1d01468ad3328280706dfc31700ea3fe507bfd0f8169b2187e8d804978b5a6397a1f471a29369349f8dcda480be4b38fb6862fc91512ff53f74ccb2674157b224da1961bbaf18cfe6f399d07607fc5fa"], 0xdf)
sendfile(r3, r2, 0x0, 0xa198)
open(0x0, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)

22:09:19 executing program 4:

22:09:19 executing program 1:

[  789.315896][T28435] netlink: 2092 bytes leftover after parsing attributes in process `syz-executor.3'.
22:09:19 executing program 2:

[  789.373473][   T27] kauditd_printk_skb: 7 callbacks suppressed
[  789.373496][   T27] audit: type=1804 audit(1583791759.322:282): pid=28432 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/482/file0" dev="sda1" ino=17301 res=1
22:09:19 executing program 1:

22:09:19 executing program 4:

[  789.473540][   T27] audit: type=1804 audit(1583791759.382:283): pid=28441 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/482/file0" dev="sda1" ino=17301 res=1
22:09:19 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000803, 0x5f)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0)
r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0)
ftruncate(r2, 0x200004)
sendfile(r0, r2, 0x0, 0x80001d00c0d0)

22:09:20 executing program 3:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r2)
socket$inet(0x10, 0x2, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080025944eeba71a4976e252922c000000002aba000000012e0b3836005404b0e0301a4ce875f2e0ff5f163ee340b7679500800000000000000101013c5891039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffff7f00000000ffefa6f909f7", @ANYRES32=r4, @ANYBLOB="0000000bf1ffffff000000ff7f0001"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

22:09:20 executing program 2:

22:09:20 executing program 1:

22:09:20 executing program 4:

22:09:20 executing program 0:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r1, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xa198)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="000ffff0802bc8369ce73cb6fda400006224541f3780351157b252dd000000009154262a80420801444dd89f6bfd1510066a2128e6c04f112558c8bdac2ae91c22768a299a879ca5ea45ea6189f14f84644589436f645a783aac81cf5bc374f0ac00ef2728cfd3b16ae8a4ec80ebea0a7e8c20a5986a2ab75b34dc27b332714d36cba3ac62ec7100c22eb5d6638b8e1d01468ad3328280706dfc31700ea3fe507bfd0f8169b2187e8d804978b5a6397a1f471a29369349f8dcda480be4b38fb6862fc91512ff53f74ccb2674157b224da1961bbaf18cfe6f399d07607fc5fa"], 0xdf)
sendfile(r3, r2, 0x0, 0xa198)
open(0x0, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)

22:09:20 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000803, 0x5f)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0)
r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0)
ftruncate(r2, 0x200004)
sendfile(r0, r2, 0x0, 0x80001d00c0d0)

22:09:20 executing program 2:

[  790.171134][   T27] audit: type=1804 audit(1583791760.122:284): pid=28462 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/483/file0" dev="sda1" ino=17334 res=1
22:09:20 executing program 4:

22:09:20 executing program 1:

[  790.273044][   T27] audit: type=1804 audit(1583791760.132:285): pid=28462 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/483/file0" dev="sda1" ino=17334 res=1
[  790.287723][T28472] netlink: 2092 bytes leftover after parsing attributes in process `syz-executor.3'.
22:09:20 executing program 2:

22:09:20 executing program 1:

22:09:20 executing program 2:

22:09:21 executing program 3:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r2)
socket$inet(0x10, 0x2, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080025944eeba71a4976e252922c000000002aba000000012e0b3836005404b0e0301a4ce875f2e0ff5f163ee340b7679500800000000000000101013c5891039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffff7f00000000ffefa6f909f7", @ANYRES32=r4, @ANYBLOB="0000000bf1ffffff000000ff7f0001"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

22:09:21 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000803, 0x5f)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0)
r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0)
ftruncate(r2, 0x200004)
sendfile(r0, r2, 0x0, 0x80001d00c0d0)

22:09:21 executing program 4:

22:09:21 executing program 2:

22:09:21 executing program 0:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r1, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xa198)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="000ffff0802bc8369ce73cb6fda400006224541f3780351157b252dd000000009154262a80420801444dd89f6bfd1510066a2128e6c04f112558c8bdac2ae91c22768a299a879ca5ea45ea6189f14f84644589436f645a783aac81cf5bc374f0ac00ef2728cfd3b16ae8a4ec80ebea0a7e8c20a5986a2ab75b34dc27b332714d36cba3ac62ec7100c22eb5d6638b8e1d01468ad3328280706dfc31700ea3fe507bfd0f8169b2187e8d804978b5a6397a1f471a29369349f8dcda480be4b38fb6862fc91512ff53f74ccb2674157b224da1961bbaf18cfe6f399d07607fc5fa"], 0xdf)
sendfile(r3, r2, 0x0, 0xa198)
open(0x0, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)

22:09:21 executing program 1:

22:09:21 executing program 4:

22:09:21 executing program 1:

22:09:21 executing program 2:

[  791.221828][T28499] netlink: 2092 bytes leftover after parsing attributes in process `syz-executor.3'.
22:09:21 executing program 4:

[  791.250339][   T27] audit: type=1804 audit(1583791761.202:286): pid=28496 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/484/file0" dev="sda1" ino=17358 res=1
[  791.380980][   T27] audit: type=1804 audit(1583791761.252:287): pid=28496 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/484/file0" dev="sda1" ino=17358 res=1
22:09:21 executing program 1:

22:09:21 executing program 2:

22:09:21 executing program 3:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r2)
socket$inet(0x10, 0x2, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080025944eeba71a4976e252922c000000002aba000000012e0b3836005404b0e0301a4ce875f2e0ff5f163ee340b7679500800000000000000101013c5891039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffff7f00000000ffefa6f909f7", @ANYRES32=r4, @ANYBLOB="0000000bf1ffffff000000ff7f0001"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

22:09:21 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000803, 0x5f)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0)
r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0)
ftruncate(r2, 0x200004)
sendfile(r0, r2, 0x0, 0x80001d00c0d0)

22:09:21 executing program 1:

22:09:21 executing program 4:

22:09:21 executing program 2:

22:09:21 executing program 0:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000580)=ANY=[], 0x0)
sendfile(r1, r0, 0x0, 0xa198)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="000ffff0802bc8369ce73cb6fda400006224541f3780351157b252dd000000009154262a80420801444dd89f6bfd1510066a2128e6c04f112558c8bdac2ae91c22768a299a879ca5ea45ea6189f14f84644589436f645a783aac81cf5bc374f0ac00ef2728cfd3b16ae8a4ec80ebea0a7e8c20a5986a2ab75b34dc27b332714d36cba3ac62ec7100c22eb5d6638b8e1d01468ad3328280706dfc31700ea3fe507bfd0f8169b2187e8d804978b5a6397a1f471a29369349f8dcda480be4b38fb6862fc91512ff53f74ccb2674157b224da1961bbaf18cfe6f399d07607fc5fa"], 0xdf)
sendfile(r3, r2, 0x0, 0xa198)
open(0x0, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)

22:09:22 executing program 4:

[  792.129987][   T27] audit: type=1804 audit(1583791762.082:288): pid=28524 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/485/file0" dev="sda1" ino=17348 res=1
22:09:22 executing program 2:

22:09:22 executing program 1:

[  792.220691][T28532] netlink: 2092 bytes leftover after parsing attributes in process `syz-executor.3'.
[  792.258960][   T27] audit: type=1804 audit(1583791762.142:289): pid=28524 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/485/file0" dev="sda1" ino=17348 res=1
22:09:22 executing program 4:

22:09:22 executing program 1:

22:09:22 executing program 2:

22:09:22 executing program 3:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r2)
socket$inet(0x10, 0x2, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
bind(r3, 0x0, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffff7f00000000ffefa6f909f7", @ANYRES32=r4, @ANYBLOB="0000000bf1ffffff000000ff7f0001"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

22:09:22 executing program 2:

22:09:22 executing program 1:

22:09:22 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000803, 0x5f)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0)
r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0)
ftruncate(r2, 0x200004)
sendfile(r0, r2, 0x0, 0x80001d00c0d0)

22:09:22 executing program 4:

22:09:22 executing program 0:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000580)=ANY=[], 0x0)
sendfile(r1, r0, 0x0, 0xa198)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="000ffff0802bc8369ce73cb6fda400006224541f3780351157b252dd000000009154262a80420801444dd89f6bfd1510066a2128e6c04f112558c8bdac2ae91c22768a299a879ca5ea45ea6189f14f84644589436f645a783aac81cf5bc374f0ac00ef2728cfd3b16ae8a4ec80ebea0a7e8c20a5986a2ab75b34dc27b332714d36cba3ac62ec7100c22eb5d6638b8e1d01468ad3328280706dfc31700ea3fe507bfd0f8169b2187e8d804978b5a6397a1f471a29369349f8dcda480be4b38fb6862fc91512ff53f74ccb2674157b224da1961bbaf18cfe6f399d07607fc5fa"], 0xdf)
sendfile(r3, r2, 0x0, 0xa198)
open(0x0, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)

22:09:23 executing program 1:

22:09:23 executing program 4:

[  793.141626][   T27] audit: type=1804 audit(1583791763.092:290): pid=28558 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/486/file0" dev="sda1" ino=17387 res=1
22:09:23 executing program 2:

[  793.201702][   T27] audit: type=1804 audit(1583791763.092:291): pid=28558 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/486/file0" dev="sda1" ino=17387 res=1
[  793.238734][T28564] netlink: 2092 bytes leftover after parsing attributes in process `syz-executor.3'.
22:09:23 executing program 1:

22:09:23 executing program 4:

22:09:23 executing program 2:

22:09:23 executing program 3:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r2)
socket$inet(0x10, 0x2, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
bind(r3, 0x0, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffff7f00000000ffefa6f909f7", @ANYRES32=r4, @ANYBLOB="0000000bf1ffffff000000ff7f0001"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

22:09:23 executing program 1:

22:09:23 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000803, 0x5f)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0)
r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0)
ftruncate(r2, 0x200004)
sendfile(r0, r2, 0x0, 0x80001d00c0d0)

22:09:23 executing program 4:

22:09:23 executing program 2:

22:09:23 executing program 0:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000580)=ANY=[], 0x0)
sendfile(r1, r0, 0x0, 0xa198)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="000ffff0802bc8369ce73cb6fda400006224541f3780351157b252dd000000009154262a80420801444dd89f6bfd1510066a2128e6c04f112558c8bdac2ae91c22768a299a879ca5ea45ea6189f14f84644589436f645a783aac81cf5bc374f0ac00ef2728cfd3b16ae8a4ec80ebea0a7e8c20a5986a2ab75b34dc27b332714d36cba3ac62ec7100c22eb5d6638b8e1d01468ad3328280706dfc31700ea3fe507bfd0f8169b2187e8d804978b5a6397a1f471a29369349f8dcda480be4b38fb6862fc91512ff53f74ccb2674157b224da1961bbaf18cfe6f399d07607fc5fa"], 0xdf)
sendfile(r3, r2, 0x0, 0xa198)
open(0x0, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)

22:09:24 executing program 1:

22:09:24 executing program 2:

22:09:24 executing program 4:

[  794.170681][T28592] netlink: 2092 bytes leftover after parsing attributes in process `syz-executor.3'.
22:09:24 executing program 1:

22:09:24 executing program 4:

22:09:24 executing program 2:

22:09:24 executing program 3:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r2)
socket$inet(0x10, 0x2, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
bind(r3, 0x0, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffff7f00000000ffefa6f909f7", @ANYRES32=r4, @ANYBLOB="0000000bf1ffffff000000ff7f0001"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

22:09:24 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x0, 0x5f)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0)
r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0)
ftruncate(r2, 0x200004)
sendfile(r0, r2, 0x0, 0x80001d00c0d0)

22:09:24 executing program 1:

22:09:24 executing program 4:

22:09:24 executing program 2:

22:09:24 executing program 0:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0)
sendfile(r1, r0, 0x0, 0xa198)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="000ffff0802bc8369ce73cb6fda400006224541f3780351157b252dd000000009154262a80420801444dd89f6bfd1510066a2128e6c04f112558c8bdac2ae91c22768a299a879ca5ea45ea6189f14f84644589436f645a783aac81cf5bc374f0ac00ef2728cfd3b16ae8a4ec80ebea0a7e8c20a5986a2ab75b34dc27b332714d36cba3ac62ec7100c22eb5d6638b8e1d01468ad3328280706dfc31700ea3fe507bfd0f8169b2187e8d804978b5a6397a1f471a29369349f8dcda480be4b38fb6862fc91512ff53f74ccb2674157b224da1961bbaf18cfe6f399d07607fc5fa"], 0xdf)
sendfile(r3, r2, 0x0, 0xa198)
open(0x0, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)

22:09:25 executing program 4:

22:09:25 executing program 1:

22:09:25 executing program 2:

[  795.113113][   T27] kauditd_printk_skb: 2 callbacks suppressed
[  795.113134][   T27] audit: type=1804 audit(1583791765.062:294): pid=28617 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/488/file0" dev="sda1" ino=17403 res=1
[  795.195809][   T27] audit: type=1804 audit(1583791765.112:295): pid=28623 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/488/file0" dev="sda1" ino=17403 res=1
22:09:25 executing program 2:

[  795.273902][T28632] netlink: 2092 bytes leftover after parsing attributes in process `syz-executor.3'.
22:09:25 executing program 4:

22:09:25 executing program 1:

22:09:26 executing program 3:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r2)
socket$inet(0x10, 0x2, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
bind(r3, &(0x7f0000000080)=@generic={0x0, "0000010000000000080025944eeba71a4976e252922c000000002aba000000012e0b3836005404b0e0301a4ce875f2e0ff5f163ee340b7679500800000000000000101013c5891039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffff7f00000000ffefa6f909f7", @ANYRES32=r4, @ANYBLOB="0000000bf1ffffff000000ff7f0001"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

22:09:26 executing program 2:

22:09:26 executing program 4:

22:09:26 executing program 1:

22:09:26 executing program 0:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0)
sendfile(r1, r0, 0x0, 0xa198)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="000ffff0802bc8369ce73cb6fda400006224541f3780351157b252dd000000009154262a80420801444dd89f6bfd1510066a2128e6c04f112558c8bdac2ae91c22768a299a879ca5ea45ea6189f14f84644589436f645a783aac81cf5bc374f0ac00ef2728cfd3b16ae8a4ec80ebea0a7e8c20a5986a2ab75b34dc27b332714d36cba3ac62ec7100c22eb5d6638b8e1d01468ad3328280706dfc31700ea3fe507bfd0f8169b2187e8d804978b5a6397a1f471a29369349f8dcda480be4b38fb6862fc91512ff53f74ccb2674157b224da1961bbaf18cfe6f399d07607fc5fa"], 0xdf)
sendfile(r3, r2, 0x0, 0xa198)
open(0x0, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)

22:09:26 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x0, 0x5f)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0)
r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0)
ftruncate(r2, 0x200004)
sendfile(r0, r2, 0x0, 0x80001d00c0d0)

22:09:26 executing program 1:

22:09:26 executing program 2:

[  796.199930][   T27] audit: type=1804 audit(1583791766.152:296): pid=28651 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/489/file0" dev="sda1" ino=17419 res=1
22:09:26 executing program 4:

[  796.258903][   T27] audit: type=1804 audit(1583791766.192:297): pid=28651 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/489/file0" dev="sda1" ino=17419 res=1
[  796.271628][T28659] netlink: 2092 bytes leftover after parsing attributes in process `syz-executor.3'.
22:09:26 executing program 4:

22:09:26 executing program 0:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0)
sendfile(r1, r0, 0x0, 0xa198)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="000ffff0802bc8369ce73cb6fda400006224541f3780351157b252dd000000009154262a80420801444dd89f6bfd1510066a2128e6c04f112558c8bdac2ae91c22768a299a879ca5ea45ea6189f14f84644589436f645a783aac81cf5bc374f0ac00ef2728cfd3b16ae8a4ec80ebea0a7e8c20a5986a2ab75b34dc27b332714d36cba3ac62ec7100c22eb5d6638b8e1d01468ad3328280706dfc31700ea3fe507bfd0f8169b2187e8d804978b5a6397a1f471a29369349f8dcda480be4b38fb6862fc91512ff53f74ccb2674157b224da1961bbaf18cfe6f399d07607fc5fa"], 0xdf)
sendfile(r3, r2, 0x0, 0xa198)
open(0x0, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)

22:09:26 executing program 1:

[  796.573460][   T27] audit: type=1804 audit(1583791766.522:298): pid=28673 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/490/file0" dev="sda1" ino=16524 res=1
[  796.607446][   T27] audit: type=1804 audit(1583791766.522:299): pid=28673 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/490/file0" dev="sda1" ino=16524 res=1
22:09:27 executing program 3:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r2)
socket$inet(0x10, 0x2, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
bind(r3, &(0x7f0000000080)=@generic={0x0, "0000010000000000080025944eeba71a4976e252922c000000002aba000000012e0b3836005404b0e0301a4ce875f2e0ff5f163ee340b7679500800000000000000101013c5891039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffff7f00000000ffefa6f909f7", @ANYRES32=r4, @ANYBLOB="0000000bf1ffffff000000ff7f0001"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

22:09:27 executing program 2:

22:09:27 executing program 4:

22:09:27 executing program 1:

22:09:27 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x0, 0x5f)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0)
r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0)
ftruncate(r2, 0x200004)
sendfile(r0, r2, 0x0, 0x80001d00c0d0)

22:09:27 executing program 0:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00'], 0x1)
sendfile(0xffffffffffffffff, r0, 0x0, 0xa198)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="000ffff0802bc8369ce73cb6fda400006224541f3780351157b252dd000000009154262a80420801444dd89f6bfd1510066a2128e6c04f112558c8bdac2ae91c22768a299a879ca5ea45ea6189f14f84644589436f645a783aac81cf5bc374f0ac00ef2728cfd3b16ae8a4ec80ebea0a7e8c20a5986a2ab75b34dc27b332714d36cba3ac62ec7100c22eb5d6638b8e1d01468ad3328280706dfc31700ea3fe507bfd0f8169b2187e8d804978b5a6397a1f471a29369349f8dcda480be4b38fb6862fc91512ff53f74ccb2674157b224da1961bbaf18cfe6f399d07607fc5fa"], 0xdf)
sendfile(r3, r2, 0x0, 0xa198)
open(0x0, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)

22:09:27 executing program 2:

22:09:27 executing program 1:

22:09:27 executing program 4:

[  797.236649][   T27] audit: type=1804 audit(1583791767.182:300): pid=28689 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/491/file0" dev="sda1" ino=17521 res=1
[  797.239631][T28695] netlink: 2092 bytes leftover after parsing attributes in process `syz-executor.3'.
[  797.365708][   T27] audit: type=1804 audit(1583791767.212:301): pid=28689 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/491/file0" dev="sda1" ino=17521 res=1
22:09:27 executing program 2:

22:09:27 executing program 1:

22:09:27 executing program 4:

22:09:28 executing program 3:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r2)
socket$inet(0x10, 0x2, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
bind(r3, &(0x7f0000000080)=@generic={0x0, "0000010000000000080025944eeba71a4976e252922c000000002aba000000012e0b3836005404b0e0301a4ce875f2e0ff5f163ee340b7679500800000000000000101013c5891039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffff7f00000000ffefa6f909f7", @ANYRES32=r4, @ANYBLOB="0000000bf1ffffff000000ff7f0001"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

22:09:28 executing program 1:

22:09:28 executing program 4:

22:09:28 executing program 2:

22:09:28 executing program 0:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00'], 0x1)
sendfile(0xffffffffffffffff, r0, 0x0, 0xa198)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="000ffff0802bc8369ce73cb6fda400006224541f3780351157b252dd000000009154262a80420801444dd89f6bfd1510066a2128e6c04f112558c8bdac2ae91c22768a299a879ca5ea45ea6189f14f84644589436f645a783aac81cf5bc374f0ac00ef2728cfd3b16ae8a4ec80ebea0a7e8c20a5986a2ab75b34dc27b332714d36cba3ac62ec7100c22eb5d6638b8e1d01468ad3328280706dfc31700ea3fe507bfd0f8169b2187e8d804978b5a6397a1f471a29369349f8dcda480be4b38fb6862fc91512ff53f74ccb2674157b224da1961bbaf18cfe6f399d07607fc5fa"], 0xdf)
sendfile(r3, r2, 0x0, 0xa198)
open(0x0, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)

22:09:28 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000803, 0x0)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0)
r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0)
ftruncate(r2, 0x200004)
sendfile(r0, r2, 0x0, 0x80001d00c0d0)

22:09:28 executing program 4:

22:09:28 executing program 2:

22:09:28 executing program 1:

[  798.203439][   T27] audit: type=1804 audit(1583791768.152:302): pid=28724 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/492/file0" dev="sda1" ino=17474 res=1
[  798.276716][T28729] netlink: 2092 bytes leftover after parsing attributes in process `syz-executor.3'.
[  798.356322][   T27] audit: type=1804 audit(1583791768.202:303): pid=28724 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/492/file0" dev="sda1" ino=17474 res=1
22:09:28 executing program 2:

22:09:28 executing program 4:

22:09:28 executing program 1:

22:09:29 executing program 3:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r2)
socket$inet(0x10, 0x2, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080025944eeba71a4976e252922c000000002aba000000012e0b3836005404b0e0301a4ce875f2e0ff5f163ee340b7679500800000000000000101013c5891039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffff7f00000000ffefa6f909f7", @ANYRES32=r4, @ANYBLOB="0000000bf1ffffff000000ff7f0001"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

22:09:29 executing program 1:

22:09:29 executing program 2:

22:09:29 executing program 4:

22:09:29 executing program 0:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00'], 0x1)
sendfile(0xffffffffffffffff, r0, 0x0, 0xa198)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="000ffff0802bc8369ce73cb6fda400006224541f3780351157b252dd000000009154262a80420801444dd89f6bfd1510066a2128e6c04f112558c8bdac2ae91c22768a299a879ca5ea45ea6189f14f84644589436f645a783aac81cf5bc374f0ac00ef2728cfd3b16ae8a4ec80ebea0a7e8c20a5986a2ab75b34dc27b332714d36cba3ac62ec7100c22eb5d6638b8e1d01468ad3328280706dfc31700ea3fe507bfd0f8169b2187e8d804978b5a6397a1f471a29369349f8dcda480be4b38fb6862fc91512ff53f74ccb2674157b224da1961bbaf18cfe6f399d07607fc5fa"], 0xdf)
sendfile(r3, r2, 0x0, 0xa198)
open(0x0, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)

22:09:29 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000803, 0x0)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0)
r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0)
ftruncate(r2, 0x200004)
sendfile(r0, r2, 0x0, 0x80001d00c0d0)

22:09:29 executing program 2:

22:09:29 executing program 1:

22:09:29 executing program 4:

22:09:29 executing program 2:

[  799.248904][T28763] netlink: 2092 bytes leftover after parsing attributes in process `syz-executor.3'.
22:09:29 executing program 1:

22:09:29 executing program 4:

22:09:30 executing program 3:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r2)
socket$inet(0x10, 0x2, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080025944eeba71a4976e252922c000000002aba000000012e0b3836005404b0e0301a4ce875f2e0ff5f163ee340b7679500800000000000000101013c5891039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffff7f00000000ffefa6f909f7", @ANYRES32=r4, @ANYBLOB="0000000bf1ffffff000000ff7f0001"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

22:09:30 executing program 2:

22:09:30 executing program 4:

22:09:30 executing program 1:

22:09:30 executing program 0:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, 0x0)
fchdir(0xffffffffffffffff)
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00'], 0x1)
sendfile(r0, 0xffffffffffffffff, 0x0, 0xa198)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="000ffff0802bc8369ce73cb6fda400006224541f3780351157b252dd000000009154262a80420801444dd89f6bfd1510066a2128e6c04f112558c8bdac2ae91c22768a299a879ca5ea45ea6189f14f84644589436f645a783aac81cf5bc374f0ac00ef2728cfd3b16ae8a4ec80ebea0a7e8c20a5986a2ab75b34dc27b332714d36cba3ac62ec7100c22eb5d6638b8e1d01468ad3328280706dfc31700ea3fe507bfd0f8169b2187e8d804978b5a6397a1f471a29369349f8dcda480be4b38fb6862fc91512ff53f74ccb2674157b224da1961bbaf18cfe6f399d07607fc5fa"], 0xdf)
sendfile(r2, r1, 0x0, 0xa198)
open(0x0, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)

22:09:30 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000803, 0x0)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0)
r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0)
ftruncate(r2, 0x200004)
sendfile(r0, r2, 0x0, 0x80001d00c0d0)

22:09:30 executing program 1:
clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
exit(0x0)

22:09:30 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup3(r1, r0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
prctl$PR_MCE_KILL(0x21, 0x1, 0x0)

[  800.165185][   T27] kauditd_printk_skb: 2 callbacks suppressed
[  800.165210][   T27] audit: type=1804 audit(1583791770.112:306): pid=28787 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/494/file0" dev="sda1" ino=16528 res=1
22:09:30 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup3(r1, r0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0)

[  800.224673][T28795] netlink: 2092 bytes leftover after parsing attributes in process `syz-executor.3'.
[  800.280982][   T27] audit: type=1804 audit(1583791770.112:307): pid=28787 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/494/file0" dev="sda1" ino=16528 res=1
22:09:30 executing program 2:
syz_read_part_table(0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000100)="0200ee7e00ff01000000ff070000004c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}])
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

22:09:30 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$urandom(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/urandom\x00', 0x80000, 0x0)
fcntl$setflags(r2, 0x2, 0x0)

22:09:30 executing program 4:
socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_adj\x00')
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='1', 0x500}], 0x1)

[  800.553356][T28812] Dev loop2: unable to read RDB block 1
[  800.573780][T28812]  loop2: unable to read partition table
[  800.579933][T28812] loop2: partition table beyond EOD, truncated
[  800.599695][T28812] loop_reread_partitions: partition scan of loop2 () failed (rc=-5)
[  800.703830][T28812] Dev loop2: unable to read RDB block 1
[  800.714858][T28812]  loop2: unable to read partition table
[  800.720996][T28812] loop2: partition table beyond EOD, truncated
[  800.734516][T28812] loop_reread_partitions: partition scan of loop2 () failed (rc=-5)
22:09:31 executing program 3:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r2)
socket$inet(0x10, 0x2, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080025944eeba71a4976e252922c000000002aba000000012e0b3836005404b0e0301a4ce875f2e0ff5f163ee340b7679500800000000000000101013c5891039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffff7f00000000ffefa6f909f7", @ANYRES32=r4, @ANYBLOB="0000000bf1ffffff000000ff7f0001"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

22:09:31 executing program 4:
socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_adj\x00')
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='1', 0x500}], 0x1)

22:09:31 executing program 0:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, 0x0)
fchdir(0xffffffffffffffff)
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00'], 0x1)
sendfile(r0, 0xffffffffffffffff, 0x0, 0xa198)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="000ffff0802bc8369ce73cb6fda400006224541f3780351157b252dd000000009154262a80420801444dd89f6bfd1510066a2128e6c04f112558c8bdac2ae91c22768a299a879ca5ea45ea6189f14f84644589436f645a783aac81cf5bc374f0ac00ef2728cfd3b16ae8a4ec80ebea0a7e8c20a5986a2ab75b34dc27b332714d36cba3ac62ec7100c22eb5d6638b8e1d01468ad3328280706dfc31700ea3fe507bfd0f8169b2187e8d804978b5a6397a1f471a29369349f8dcda480be4b38fb6862fc91512ff53f74ccb2674157b224da1961bbaf18cfe6f399d07607fc5fa"], 0xdf)
sendfile(r2, r1, 0x0, 0xa198)
open(0x0, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)

22:09:31 executing program 2:
syz_read_part_table(0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000100)="0200ee7e00ff01000000ff070000004c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}])
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

22:09:31 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000803, 0x5f)
close(0xffffffffffffffff)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0)
r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0)
ftruncate(r2, 0x200004)
sendfile(r0, r2, 0x0, 0x80001d00c0d0)

22:09:31 executing program 1:
recvmmsg(0xffffffffffffffff, &(0x7f0000001d40)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000014c0)=""/190, 0xbe}], 0x1}}], 0x1, 0x0, 0x0)
move_pages(0x0, 0x2c9, &(0x7f0000000000), &(0x7f000026bfec), &(0x7f0000002000), 0x0)

[  801.184413][T28863] Dev loop2: unable to read RDB block 1
22:09:31 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup3(r1, r0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
prctl$PR_MCE_KILL(0x21, 0x1, 0x8e121bcdc63f25da)

22:09:31 executing program 4:
socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_adj\x00')
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='1', 0x500}], 0x1)

[  801.213158][   T27] audit: type=1804 audit(1583791771.162:308): pid=28862 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/495/file0" dev="sda1" ino=17265 res=1
[  801.223294][T28863]  loop2: unable to read partition table
[  801.242812][   T27] audit: type=1804 audit(1583791771.162:309): pid=28862 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/495/file0" dev="sda1" ino=17265 res=1
[  801.262805][T28951] netlink: 2092 bytes leftover after parsing attributes in process `syz-executor.3'.
[  801.325390][T28863] loop2: partition table beyond EOD, truncated
[  801.335829][T28863] loop_reread_partitions: partition scan of loop2 () failed (rc=-5)
22:09:31 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'rose0\x00', 0x400})

22:09:31 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup3(r1, r0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1)

22:09:31 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x2f6, 0xe80, 0x0, &(0x7f00000000c0)="b9ff03c6630d698cb89e0bf086dd1fffffff0e003300630277fbac14140ce0", 0x0, 0x2f, 0x0, 0x0, 0xfffffffffffffe2a}, 0x28)

22:09:31 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup3(r1, r0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
pread64(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffff8001)

22:09:32 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c)
r3 = syz_open_procfs(0x0, &(0x7f0000000080)='comm\x00')
sendfile(r2, r3, 0x0, 0xedc0)

22:09:32 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup3(r1, r0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
keyctl$instantiate(0x2, 0x0, 0x0, 0x0, 0x0)

22:09:32 executing program 1:
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3)
shutdown(r0, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)

22:09:32 executing program 0:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, 0x0)
fchdir(0xffffffffffffffff)
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00'], 0x1)
sendfile(r0, 0xffffffffffffffff, 0x0, 0xa198)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="000ffff0802bc8369ce73cb6fda400006224541f3780351157b252dd000000009154262a80420801444dd89f6bfd1510066a2128e6c04f112558c8bdac2ae91c22768a299a879ca5ea45ea6189f14f84644589436f645a783aac81cf5bc374f0ac00ef2728cfd3b16ae8a4ec80ebea0a7e8c20a5986a2ab75b34dc27b332714d36cba3ac62ec7100c22eb5d6638b8e1d01468ad3328280706dfc31700ea3fe507bfd0f8169b2187e8d804978b5a6397a1f471a29369349f8dcda480be4b38fb6862fc91512ff53f74ccb2674157b224da1961bbaf18cfe6f399d07607fc5fa"], 0xdf)
sendfile(r2, r1, 0x0, 0xa198)
open(0x0, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)

22:09:32 executing program 3:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r2)
socket$inet(0x10, 0x2, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080025944eeba71a4976e252922c000000002aba000000012e0b3836005404b0e0301a4ce875f2e0ff5f163ee340b7679500800000000000000101013c5891039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r3, 0x0, &(0x7f0000000140))
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffff7f00000000ffefa6f909f7", @ANYRES32, @ANYBLOB="0000000bf1ffffff000000ff7f0001"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

22:09:32 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000803, 0x5f)
close(0xffffffffffffffff)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0)
r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0)
ftruncate(r2, 0x200004)
sendfile(r0, r2, 0x0, 0x80001d00c0d0)

22:09:32 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup3(r4, r3, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = fcntl$dupfd(r0, 0x0, r5)
write$P9_RVERSION(r6, 0x0, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r9, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r9, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r9, @ANYBLOB="00000000000000000800f1ff08000100753332001800020014000500000000000000000000000000007c6724"], 0x44}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x4, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="300000002d000700ee0000003e20000000000000", @ANYRES32=r9, @ANYBLOB="9b00f0ff000000000000f1ff080001007133320004000200"], 0x30}}, 0x0)

[  802.191117][   T27] audit: type=1804 audit(1583791772.142:310): pid=29189 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/496/file0" dev="sda1" ino=17462 res=1
22:09:32 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000100)="0200ee7e00ff01000000ff070000004c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}])

22:09:32 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup3(r1, r0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
keyctl$instantiate(0xc, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x1, 0x0)

[  802.232663][T29294] netlink: 2092 bytes leftover after parsing attributes in process `syz-executor.3'.
[  802.307537][   T27] audit: type=1804 audit(1583791772.142:311): pid=29189 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/496/file0" dev="sda1" ino=17462 res=1
[  802.421531][T29301] Dev loop2: unable to read RDB block 1
[  802.430648][T29301]  loop2: unable to read partition table
[  802.439762][T29301] loop2: partition table beyond EOD, truncated
[  802.458677][T29301] loop_reread_partitions: partition scan of loop2 () failed (rc=-5)
22:09:32 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1}, 0x48)
socket$inet6_tcp(0xa, 0x1, 0x0)
exit(0x0)

22:09:32 executing program 1:
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0)
dup3(r1, r0, 0x0)
fcntl$setstatus(r0, 0x4, 0x44000)
io_setup(0x40000000008, &(0x7f0000000240)=<r2=>0x0)
io_submit(r2, 0x4, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000000000), 0x40000}])

[  802.619434][T29412] Dev loop2: unable to read RDB block 1
[  802.626798][T29412]  loop2: unable to read partition table
[  802.648119][T29412] loop2: partition table beyond EOD, truncated
[  802.654683][T29412] loop_reread_partitions: partition scan of loop2 () failed (rc=-5)
[  802.674233][   T27] audit: type=1804 audit(1583791772.622:312): pid=29418 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir261492915/syzkaller.FhdNWt/683/bus" dev="sda1" ino=17465 res=1
22:09:32 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000100)="0200ee7e00ff01000000ff070000004c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}])

[  802.715577][   T27] audit: type=1804 audit(1583791772.632:313): pid=29418 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir261492915/syzkaller.FhdNWt/683/bus" dev="sda1" ino=17465 res=1
22:09:32 executing program 0:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00'], 0x1)
sendfile(r1, r0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="000ffff0802bc8369ce73cb6fda400006224541f3780351157b252dd000000009154262a80420801444dd89f6bfd1510066a2128e6c04f112558c8bdac2ae91c22768a299a879ca5ea45ea6189f14f84644589436f645a783aac81cf5bc374f0ac00ef2728cfd3b16ae8a4ec80ebea0a7e8c20a5986a2ab75b34dc27b332714d36cba3ac62ec7100c22eb5d6638b8e1d01468ad3328280706dfc31700ea3fe507bfd0f8169b2187e8d804978b5a6397a1f471a29369349f8dcda480be4b38fb6862fc91512ff53f74ccb2674157b224da1961bbaf18cfe6f399d07607fc5fa"], 0xdf)
sendfile(r3, r2, 0x0, 0xa198)
open(0x0, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)

22:09:32 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000100)="0200ee7e00ff01000000ff070000004c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}])

[  802.956159][T29524] Dev loop2: unable to read RDB block 1
[  802.975547][T29524]  loop2: unable to read partition table
22:09:32 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000803, 0x5f)
close(0xffffffffffffffff)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0)
r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0)
ftruncate(r2, 0x200004)
sendfile(r0, r2, 0x0, 0x80001d00c0d0)

[  802.982754][   T27] audit: type=1804 audit(1583791772.932:314): pid=29527 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/497/file0" dev="sda1" ino=17452 res=1
[  803.038190][T29524] loop2: partition table beyond EOD, truncated
[  803.088149][T29524] loop_reread_partitions: partition scan of loop2 () failed (rc=-5)
[  803.108418][   T27] audit: type=1804 audit(1583791772.932:315): pid=29527 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/497/file0" dev="sda1" ino=17452 res=1
22:09:33 executing program 3:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r2)
socket$inet(0x10, 0x2, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080025944eeba71a4976e252922c000000002aba000000012e0b3836005404b0e0301a4ce875f2e0ff5f163ee340b7679500800000000000000101013c5891039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r3, 0x0, &(0x7f0000000140))
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffff7f00000000ffefa6f909f7", @ANYRES32, @ANYBLOB="0000000bf1ffffff000000ff7f0001"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

[  803.138350][T29530] Dev loop1: unable to read RDB block 1
[  803.148070][T29530]  loop1: unable to read partition table
[  803.218422][T29530] loop1: partition table beyond EOD, truncated
[  803.225819][T29530] loop_reread_partitions: partition scan of loop1 () failed (rc=-5)
[  803.254772][T29543] netlink: 2092 bytes leftover after parsing attributes in process `syz-executor.3'.
22:09:33 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup3(r1, r0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
keyctl$instantiate(0x14, 0x0, 0x0, 0x0, 0x0)

22:09:33 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1}, 0x48)
socket$inet6_tcp(0xa, 0x1, 0x0)
exit(0x0)

22:09:33 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1}, 0x48)
socket$inet6_tcp(0xa, 0x1, 0x0)
exit(0x0)

22:09:33 executing program 2:
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
shutdown(r0, 0x1)

22:09:33 executing program 0:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00'], 0x1)
sendfile(r1, r0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="000ffff0802bc8369ce73cb6fda400006224541f3780351157b252dd000000009154262a80420801444dd89f6bfd1510066a2128e6c04f112558c8bdac2ae91c22768a299a879ca5ea45ea6189f14f84644589436f645a783aac81cf5bc374f0ac00ef2728cfd3b16ae8a4ec80ebea0a7e8c20a5986a2ab75b34dc27b332714d36cba3ac62ec7100c22eb5d6638b8e1d01468ad3328280706dfc31700ea3fe507bfd0f8169b2187e8d804978b5a6397a1f471a29369349f8dcda480be4b38fb6862fc91512ff53f74ccb2674157b224da1961bbaf18cfe6f399d07607fc5fa"], 0xdf)
sendfile(r3, r2, 0x0, 0xa198)
open(0x0, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)

22:09:33 executing program 4:
r0 = socket$inet6(0xa, 0x80003, 0x6b)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x3c1, 0x3, 0x420, 0x0, 0x280, 0x0, 0x0, 0x0, 0x350, 0x350, 0x350, 0x350, 0x350, 0x3, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x280, 0x0, {}, [@common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'team_slave_1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x800}}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x5, 0xa6}}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x480)
syz_emit_ethernet(0x4a, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "289200", 0x14, 0x6, 0x0, @dev, @mcast2, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x62}}}}}}}, 0x0)

22:09:33 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup3(r1, r0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
keyctl$instantiate(0x9, 0x0, 0x0, 0x0, 0x0)

22:09:33 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
keyctl$describe(0x6, 0x0, 0x0, 0x0)

[  803.782673][T29672] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING
[  803.814776][T29672] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING
22:09:33 executing program 4:
r0 = socket$inet6(0xa, 0x80003, 0x6b)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x3c1, 0x3, 0x420, 0x0, 0x280, 0x0, 0x0, 0x0, 0x350, 0x350, 0x350, 0x350, 0x350, 0x3, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x280, 0x0, {}, [@common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'team_slave_1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x800}}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x5, 0xa6}}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x480)
syz_emit_ethernet(0x4a, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "289200", 0x14, 0x6, 0x0, @dev, @mcast2, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x62}}}}}}}, 0x0)

22:09:33 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup3(r1, r0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
prctl$PR_SET_PDEATHSIG(0x1, 0x0)

22:09:33 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000803, 0x5f)
close(r0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0)
r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0)
ftruncate(r2, 0x200004)
sendfile(r0, r2, 0x0, 0x80001d00c0d0)

[  803.949891][T29682] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING
22:09:34 executing program 3:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r2)
socket$inet(0x10, 0x2, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080025944eeba71a4976e252922c000000002aba000000012e0b3836005404b0e0301a4ce875f2e0ff5f163ee340b7679500800000000000000101013c5891039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r3, 0x0, &(0x7f0000000140))
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffff7f00000000ffefa6f909f7", @ANYRES32, @ANYBLOB="0000000bf1ffffff000000ff7f0001"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

22:09:34 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000440)=0x1, 0xffe6)
sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10)
sendmmsg$inet(r0, &(0x7f0000008a40)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000180)='$', 0x1}], 0x1}}], 0x1, 0x600d054)
write(r0, &(0x7f00000001c0)='V', 0x1502)

22:09:34 executing program 0:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00'], 0x1)
sendfile(r1, r0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="000ffff0802bc8369ce73cb6fda400006224541f3780351157b252dd000000009154262a80420801444dd89f6bfd1510066a2128e6c04f112558c8bdac2ae91c22768a299a879ca5ea45ea6189f14f84644589436f645a783aac81cf5bc374f0ac00ef2728cfd3b16ae8a4ec80ebea0a7e8c20a5986a2ab75b34dc27b332714d36cba3ac62ec7100c22eb5d6638b8e1d01468ad3328280706dfc31700ea3fe507bfd0f8169b2187e8d804978b5a6397a1f471a29369349f8dcda480be4b38fb6862fc91512ff53f74ccb2674157b224da1961bbaf18cfe6f399d07607fc5fa"], 0xdf)
sendfile(r3, r2, 0x0, 0xa198)
open(0x0, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)

[  804.213392][T29693] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based  firewall rule not found. Use the iptables CT target to attach helpers instead.
[  804.298553][T29700] netlink: 2092 bytes leftover after parsing attributes in process `syz-executor.3'.
22:09:34 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000150600000fff07003506000002000000070600000ee60000bf050000000000001f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad43010000000000950000000000000005000000000000009500000000000000d05bd98c13cc1709ab91e0b9e1e603f862b5173583f1d7eb634f76b1cef9eeb7763c14f8f7494a564babf363654191aadbd61d7d0bdc18ebc296e1085dcbdf299b20712872a269cb051b233ea0bdb6a80b4c05f80b408a2dfafe5f41ba572dd3907ace236861a8e3cbde7b9acd782bea026f25e26ab2430243f2155491072a55d5ff51de097dcf8cffed7409bfd712b24ffed61e78648f791c1abe4604b7e0fea0953f7d8f92037261dbe8791ea01c826928563a5488dfb605d26dbfb74289975594b56e4a9c7163e7bce1672ef356d20d66e7810341fae4aa0116bba4f4d5a77d2f4f9220f79dc91775ed60e953800ea5578f97c793baaac7ff54c6678563f482ed32fadccb750786e574fb251bd26941ebdceed7744ac909e29a9562eddc985fee5bb668ca48cbd7488ae353e7feadddbd678963475fdd7786586d4dc05b502922cd6fc3f7346f365a9a51de24c1f97badd02fd1e55f04602b057f7d2321b28875af613d61913355ce6f38de5bb7aa7e13eaf320bdd3229e4517ff4786785553d47a5af429ff29bde9fbb096c03e5b25aff8381641eb9b171f57e1a71c3787fe3c705d172505d805330ba81737c63cdc74e3a70d2f88d8e2e759dfae0842e450d99a2bfac2a481ce5bdfb1f06c2386cb30cc591a875bbe442afdd51afecbde83c6a82b18d77b35e872a8b1e9d7c5649b5f24836d72ad3f47990509a45b7ab2ebc3200359c4bfd9100bb0f055bb228036344acd7ef5c20207845e906ac3a9dbcd1ec3b98cb87fea55895a983e25c0824c8b3ffe63e26879db53ae29c728ecca81e3b45538a8f6409105649097b37b306ded817a7198466b3c3486b88be75062baf790a9d6a79c43010cf58b532455a0a562b975d1bec9007dfd25aceedfba37c43b14d12e387e93a64e"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1}, 0x48)
socket$inet6_tcp(0xa, 0x1, 0x0)
exit(0x0)

22:09:34 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup3(r1, r0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000100)=0x9)

22:09:34 executing program 4:
syz_genetlink_get_family_id$ethtool(0x0)
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
utime(&(0x7f0000000040)='./file0/file0\x00', 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r4, &(0x7f0000000200), 0x806000)
writev(r1, &(0x7f0000000300)=[{&(0x7f0000000880)="b1", 0x1}], 0x1)

22:09:34 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000803, 0x5f)
close(r0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0)
r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0)
ftruncate(r2, 0x200004)
sendfile(r0, r2, 0x0, 0x80001d00c0d0)

22:09:34 executing program 2:
clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1}, 0x48)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
exit(0x0)

[  804.706321][T29717] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000024f)
[  804.723765][T29717] FAT-fs (loop4): Filesystem has been set read-only
22:09:34 executing program 4:
syz_genetlink_get_family_id$ethtool(0x0)
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
utime(&(0x7f0000000040)='./file0/file0\x00', 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r4, &(0x7f0000000200), 0x806000)
writev(r1, &(0x7f0000000300)=[{&(0x7f0000000880)="b1", 0x1}], 0x1)

22:09:34 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4004af07, &(0x7f00000003c0)=ANY=[@ANYRESDEC=0x0])

22:09:34 executing program 0:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00'], 0x1)
sendfile(r1, r0, 0x0, 0xa198)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
r2 = open(0x0, 0x0, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="000ffff0802bc8369ce73cb6fda400006224541f3780351157b252dd000000009154262a80420801444dd89f6bfd1510066a2128e6c04f112558c8bdac2ae91c22768a299a879ca5ea45ea6189f14f84644589436f645a783aac81cf5bc374f0ac00ef2728cfd3b16ae8a4ec80ebea0a7e8c20a5986a2ab75b34dc27b332714d36cba3ac62ec7100c22eb5d6638b8e1d01468ad3328280706dfc31700ea3fe507bfd0f8169b2187e8d804978b5a6397a1f471a29369349f8dcda480be4b38fb6862fc91512ff53f74ccb2674157b224da1961bbaf18cfe6f399d07607fc5fa"], 0xdf)
sendfile(r3, r2, 0x0, 0xa198)
open(0x0, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)

[  805.046721][T29735] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000024f)
[  805.055065][T29735] FAT-fs (loop4): Filesystem has been set read-only
22:09:35 executing program 4:
syz_genetlink_get_family_id$ethtool(0x0)
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
utime(&(0x7f0000000040)='./file0/file0\x00', 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r4, &(0x7f0000000200), 0x806000)
writev(r1, &(0x7f0000000300)=[{&(0x7f0000000880)="b1", 0x1}], 0x1)

22:09:35 executing program 3:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r2)
socket$inet(0x10, 0x2, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080025944eeba71a4976e252922c000000002aba000000012e0b3836005404b0e0301a4ce875f2e0ff5f163ee340b7679500800000000000000101013c5891039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffff7f00000000ffefa6f909f7", @ANYRES32=r4, @ANYBLOB="0000000bf1ffffff000000ff7f0001"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

22:09:35 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000803, 0x5f)
close(r0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0)
r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0)
ftruncate(r2, 0x200004)
sendfile(r0, r2, 0x0, 0x80001d00c0d0)

22:09:35 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4004af07, &(0x7f00000003c0)=ANY=[@ANYRESDEC=0x0])

22:09:35 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1}, 0x48)
socket$inet6_tcp(0xa, 0x1, 0x0)
exit(0x0)

22:09:35 executing program 4:
syz_genetlink_get_family_id$ethtool(0x0)
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
utime(&(0x7f0000000040)='./file0/file0\x00', 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r4, &(0x7f0000000200), 0x806000)
writev(r1, &(0x7f0000000300)=[{&(0x7f0000000880)="b1", 0x1}], 0x1)

[  805.421770][T29755] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000024f)
[  805.429869][T29755] FAT-fs (loop4): Filesystem has been set read-only
[  805.440717][T29763] netlink: 2092 bytes leftover after parsing attributes in process `syz-executor.3'.
22:09:35 executing program 2:
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1}, 0x48)
exit(0x0)

22:09:35 executing program 1:
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3)
flock(0xffffffffffffffff, 0x0)
sendto$inet(r0, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac623ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a92825a3a07e758044ab4ea6f7ae55d88fecf922", 0x44, 0x689, 0x0, 0x0)

22:09:35 executing program 1:
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3)
flock(0xffffffffffffffff, 0x0)
sendto$inet(r0, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac623ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a92825a3a07e758044ab4ea6f7ae55d88fecf922", 0x44, 0x689, 0x0, 0x0)

22:09:35 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000803, 0x5f)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0)
r1 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0)
ftruncate(r1, 0x200004)
sendfile(r0, r1, 0x0, 0x80001d00c0d0)

22:09:35 executing program 0:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00'], 0x1)
sendfile(r1, r0, 0x0, 0xa198)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
r2 = open(0x0, 0x0, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="000ffff0802bc8369ce73cb6fda400006224541f3780351157b252dd000000009154262a80420801444dd89f6bfd1510066a2128e6c04f112558c8bdac2ae91c22768a299a879ca5ea45ea6189f14f84644589436f645a783aac81cf5bc374f0ac00ef2728cfd3b16ae8a4ec80ebea0a7e8c20a5986a2ab75b34dc27b332714d36cba3ac62ec7100c22eb5d6638b8e1d01468ad3328280706dfc31700ea3fe507bfd0f8169b2187e8d804978b5a6397a1f471a29369349f8dcda480be4b38fb6862fc91512ff53f74ccb2674157b224da1961bbaf18cfe6f399d07607fc5fa"], 0xdf)
sendfile(r3, r2, 0x0, 0xa198)
open(0x0, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)

22:09:35 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
semctl$SEM_STAT_ANY(0x0, 0x0, 0x14, &(0x7f0000000200)=""/18)

[  805.973581][T29871] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000024f)
[  806.038056][T29871] FAT-fs (loop4): Filesystem has been set read-only
22:09:36 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup3(r1, r0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f)

22:09:36 executing program 3:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r2)
socket$inet(0x10, 0x2, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080025944eeba71a4976e252922c000000002aba000000012e0b3836005404b0e0301a4ce875f2e0ff5f163ee340b7679500800000000000000101013c5891039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffff7f00000000ffefa6f909f7", @ANYRES32=r4, @ANYBLOB="0000000bf1ffffff000000ff7f0001"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

22:09:36 executing program 4:
syz_genetlink_get_family_id$ethtool(0x0)
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fchdir(r0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
utime(&(0x7f0000000040)='./file0/file0\x00', 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r3, &(0x7f0000000200), 0x806000)

22:09:36 executing program 2:
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f00000002c0)=<r2=>0x0)
timer_settime(r2, 0x1, &(0x7f0000000780)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0)

22:09:36 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000803, 0x5f)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0)
r1 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0)
ftruncate(r1, 0x200004)
sendfile(r0, r1, 0x0, 0x80001d00c0d0)

22:09:36 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup3(r1, r0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff})
fcntl$setflags(r3, 0x2, 0x0)

22:09:36 executing program 2:
clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
exit(0x0)

22:09:36 executing program 4:
syz_genetlink_get_family_id$ethtool(0x0)
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fchdir(r0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
utime(&(0x7f0000000040)='./file0/file0\x00', 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)

[  806.480901][T30121] netlink: 2092 bytes leftover after parsing attributes in process `syz-executor.3'.
22:09:36 executing program 2:
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r2, r0)
sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1}, 0x0)
recvmmsg(r1, &(0x7f00000038c0), 0x3fffffffffffdf5, 0x0, 0x0)
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f0000000340), 0x41395527)

22:09:36 executing program 1:
dup(0xffffffffffffffff)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000280)=ANY=[@ANYBLOB='r'], 0x1)
r0 = gettid()
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000280)}], 0x3, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@loopback, 0x135})
ptrace$setopts(0x4206, r1, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xa1}, {0x0}, {&(0x7f0000000140)=""/62, 0x3b}], 0x3, 0x0, 0x0, 0x0)
tkill(r1, 0x3c)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r1, 0x0, 0x0)
tkill(r0, 0x3c)

22:09:36 executing program 0:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00'], 0x1)
sendfile(r1, r0, 0x0, 0xa198)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
r2 = open(0x0, 0x0, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="000ffff0802bc8369ce73cb6fda400006224541f3780351157b252dd000000009154262a80420801444dd89f6bfd1510066a2128e6c04f112558c8bdac2ae91c22768a299a879ca5ea45ea6189f14f84644589436f645a783aac81cf5bc374f0ac00ef2728cfd3b16ae8a4ec80ebea0a7e8c20a5986a2ab75b34dc27b332714d36cba3ac62ec7100c22eb5d6638b8e1d01468ad3328280706dfc31700ea3fe507bfd0f8169b2187e8d804978b5a6397a1f471a29369349f8dcda480be4b38fb6862fc91512ff53f74ccb2674157b224da1961bbaf18cfe6f399d07607fc5fa"], 0xdf)
sendfile(r3, r2, 0x0, 0xa198)
open(0x0, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)

22:09:36 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000803, 0x5f)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0)
r1 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0)
ftruncate(r1, 0x200004)
sendfile(r0, r1, 0x0, 0x80001d00c0d0)

22:09:36 executing program 4:
syz_genetlink_get_family_id$ethtool(0x0)
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fchdir(r0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
utime(&(0x7f0000000040)='./file0/file0\x00', 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)

22:09:37 executing program 3:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r2)
socket$inet(0x10, 0x2, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080025944eeba71a4976e252922c000000002aba000000012e0b3836005404b0e0301a4ce875f2e0ff5f163ee340b7679500800000000000000101013c5891039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffff7f00000000ffefa6f909f7", @ANYRES32=r4, @ANYBLOB="0000000bf1ffffff000000ff7f0001"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

22:09:37 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000030c0)=ANY=[@ANYBLOB="6c0e000032003dfa000000000000000000000000580e0100540e01000a0001007065646974000000400e02801c000580140006800600020000000000060001000000000003000680200e020000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000600f35aae46e9f6a5e01f06b4f5e43c028401a7f210bb6953a778ad2f39578bdf3b926b35677eaf2cdff2cbf21339063d7f2bd3badc39c79d0087cb6e69c2a4521c8957b9e2fd49112b25dad374fbde7d5dd1c15b81d46dda1ff47d6278a4565c271602f0a661065b3a3c9277f4c581e0ce3a9f65a94a498370113165f60dd0c0cd4058208837f52712a44028308676033e6a949ddb22a9fbd48f58c0a87adf713b5439d4d0019f51ba61b507d462938cf83caf438590554a963a6aef8881210ae3091150d5888221167833fa3942641249757d"], 0xe6c}}, 0x0)
readv(r0, &(0x7f00000014c0)=[{&(0x7f0000000180)=""/150, 0x96}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/152, 0x98}, {&(0x7f0000001400)=""/152, 0x20001498}], 0x4)

22:09:37 executing program 2:
socket$inet(0x10, 0x80002, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x80800)
sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
socketpair(0x2b, 0x1, 0x80, &(0x7f0000000180))
syz_genetlink_get_family_id$ethtool(&(0x7f0000000980)='ethtool\x00')
getpeername$packet(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20000003, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
close(r2)
sendto$inet6(r1, &(0x7f00000000c0), 0xffffffeb, 0x3, 0x0, 0xfffffffffffffdf0)

22:09:37 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000803, 0x5f)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100))
recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0)
r1 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0)
ftruncate(r1, 0x200004)
sendfile(r0, r1, 0x0, 0x80001d00c0d0)

22:09:37 executing program 4:
syz_genetlink_get_family_id$ethtool(0x0)
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fchdir(r0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
utime(&(0x7f0000000040)='./file0/file0\x00', 0x0)
dup(r1)

22:09:37 executing program 2:
socket$inet(0x10, 0x80002, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x80800)
sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
socketpair(0x2b, 0x1, 0x80, &(0x7f0000000180))
syz_genetlink_get_family_id$ethtool(&(0x7f0000000980)='ethtool\x00')
getpeername$packet(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20000003, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
close(r2)
sendto$inet6(r1, &(0x7f00000000c0), 0xffffffeb, 0x3, 0x0, 0xfffffffffffffdf0)

22:09:37 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

[  807.490960][T30583] netlink: 2092 bytes leftover after parsing attributes in process `syz-executor.3'.
22:09:37 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000803, 0x5f)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100))
recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0)
r1 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0)
ftruncate(r1, 0x200004)
sendfile(r0, r1, 0x0, 0x80001d00c0d0)

22:09:37 executing program 4:
syz_genetlink_get_family_id$ethtool(0x0)
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fchdir(r0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
utime(&(0x7f0000000040)='./file0/file0\x00', 0x0)

22:09:37 executing program 0:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00'], 0x1)
sendfile(r1, r0, 0x0, 0xa198)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r3 = open(0x0, 0x141042, 0x0)
write$binfmt_elf64(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="000ffff0802bc8369ce73cb6fda400006224541f3780351157b252dd000000009154262a80420801444dd89f6bfd1510066a2128e6c04f112558c8bdac2ae91c22768a299a879ca5ea45ea6189f14f84644589436f645a783aac81cf5bc374f0ac00ef2728cfd3b16ae8a4ec80ebea0a7e8c20a5986a2ab75b34dc27b332714d36cba3ac62ec7100c22eb5d6638b8e1d01468ad3328280706dfc31700ea3fe507bfd0f8169b2187e8d804978b5a6397a1f471a29369349f8dcda480be4b38fb6862fc91512ff53f74ccb2674157b224da1961bbaf18cfe6f399d07607fc5fa"], 0xdf)
sendfile(r3, r2, 0x0, 0xa198)
open(0x0, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)

22:09:37 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x40000000002, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e)
setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000140)=0xffffffff, 0x4)
recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0)

22:09:37 executing program 1:
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3)
sendto$inet(r0, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac623ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a92825a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf74", 0x49, 0x689, 0x0, 0x0)

[  807.975845][T30870] raw_sendmsg: syz-executor.2 forgot to set AF_INET. Fix it!
[  808.091583][   T27] kauditd_printk_skb: 4 callbacks suppressed
[  808.091606][   T27] audit: type=1804 audit(1583791778.042:320): pid=31012 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/503/file0" dev="sda1" ino=17430 res=1
22:09:38 executing program 3:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r2)
socket$inet(0x10, 0x2, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080025944eeba71a4976e252922c000000002aba000000012e0b3836005404b0e0301a4ce875f2e0ff5f163ee340b7679500800000000000000101013c5891039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

22:09:38 executing program 4:
syz_genetlink_get_family_id$ethtool(0x0)
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fchdir(r0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
utime(&(0x7f0000000040)='./file0/file0\x00', 0x0)

22:09:38 executing program 1:
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3)
sendto$inet(r0, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac623ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a92825a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf74", 0x49, 0x689, 0x0, 0x0)

22:09:38 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x40000000002, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e)
setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000140)=0xffffffff, 0x4)
recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0)

22:09:38 executing program 4:
syz_genetlink_get_family_id$ethtool(0x0)
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fchdir(r0)
utime(&(0x7f0000000040)='./file0/file0\x00', 0x0)

22:09:38 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup3(r1, r0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
write(r3, 0x0, 0x0)

22:09:38 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup3(r2, r1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = fcntl$dupfd(r0, 0x0, r3)
write$P9_RVERSION(r4, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x4, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="230000002d000700ee0000003e20000000000000", @ANYRES32, @ANYBLOB="9b00f0ff000000000000f1ff080001007133320004000200"], 0x30}}, 0x0)

22:09:38 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000803, 0x5f)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100))
recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0)
r1 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0)
ftruncate(r1, 0x200004)
sendfile(r0, r1, 0x0, 0x80001d00c0d0)

22:09:38 executing program 4:
syz_genetlink_get_family_id$ethtool(0x0)
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
utime(&(0x7f0000000040)='./file0/file0\x00', 0x0)

22:09:38 executing program 0:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00'], 0x1)
sendfile(r1, r0, 0x0, 0xa198)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r3 = open(0x0, 0x141042, 0x0)
write$binfmt_elf64(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="000ffff0802bc8369ce73cb6fda400006224541f3780351157b252dd000000009154262a80420801444dd89f6bfd1510066a2128e6c04f112558c8bdac2ae91c22768a299a879ca5ea45ea6189f14f84644589436f645a783aac81cf5bc374f0ac00ef2728cfd3b16ae8a4ec80ebea0a7e8c20a5986a2ab75b34dc27b332714d36cba3ac62ec7100c22eb5d6638b8e1d01468ad3328280706dfc31700ea3fe507bfd0f8169b2187e8d804978b5a6397a1f471a29369349f8dcda480be4b38fb6862fc91512ff53f74ccb2674157b224da1961bbaf18cfe6f399d07607fc5fa"], 0xdf)
sendfile(r3, r2, 0x0, 0xa198)
open(0x0, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)

22:09:38 executing program 1:
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c)
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/packet\x00')
sendfile(r0, r1, 0x0, 0xedc0)

22:09:38 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4004ae8b, &(0x7f0000000380))

[  809.078244][   T27] audit: type=1804 audit(1583791779.032:321): pid=31458 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/504/file0" dev="sda1" ino=17454 res=1
22:09:39 executing program 3:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r2)
socket$inet(0x10, 0x2, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080025944eeba71a4976e252922c000000002aba000000012e0b3836005404b0e0301a4ce875f2e0ff5f163ee340b7679500800000000000000101013c5891039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

22:09:39 executing program 4:
syz_genetlink_get_family_id$ethtool(0x0)
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
utime(&(0x7f0000000040)='./file0/file0\x00', 0x0)

22:09:39 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000100)="0200ee7e00ff01000000ff070000004c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}])

22:09:39 executing program 2:
r0 = socket(0x40000000002, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='bridge0\x00', 0x10)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e)

22:09:39 executing program 4:
syz_genetlink_get_family_id$ethtool(0x0)
utime(&(0x7f0000000040)='./file0/file0\x00', 0x0)

22:09:39 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup3(r1, r0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
keyctl$instantiate(0x12, 0x0, 0x0, 0x0, 0x0)

[  809.539459][T31473] Dev loop1: unable to read RDB block 1
[  809.545387][T31473]  loop1: unable to read partition table
22:09:39 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000803, 0x5f)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r1, 0x0, 0x0, 0x0, 0x0)
r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0)
ftruncate(r2, 0x200004)
sendfile(r0, r2, 0x0, 0x80001d00c0d0)

[  809.588160][T31473] loop1: partition table beyond EOD, truncated
[  809.602441][T31473] loop_reread_partitions: partition scan of loop1 () failed (rc=-5)
22:09:39 executing program 4:
syz_genetlink_get_family_id$ethtool(0x0)
utime(&(0x7f0000000040)='./file0/file0\x00', 0x0)

22:09:39 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000100)="0200ee7e00ff01000000ff070000004c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}])

22:09:39 executing program 0:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00'], 0x1)
sendfile(r1, r0, 0x0, 0xa198)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r3 = open(0x0, 0x141042, 0x0)
write$binfmt_elf64(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="000ffff0802bc8369ce73cb6fda400006224541f3780351157b252dd000000009154262a80420801444dd89f6bfd1510066a2128e6c04f112558c8bdac2ae91c22768a299a879ca5ea45ea6189f14f84644589436f645a783aac81cf5bc374f0ac00ef2728cfd3b16ae8a4ec80ebea0a7e8c20a5986a2ab75b34dc27b332714d36cba3ac62ec7100c22eb5d6638b8e1d01468ad3328280706dfc31700ea3fe507bfd0f8169b2187e8d804978b5a6397a1f471a29369349f8dcda480be4b38fb6862fc91512ff53f74ccb2674157b224da1961bbaf18cfe6f399d07607fc5fa"], 0xdf)
sendfile(r3, r2, 0x0, 0xa198)
open(0x0, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)

22:09:39 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
keyctl$revoke(0x3, 0x0)

22:09:39 executing program 4:
syz_genetlink_get_family_id$ethtool(0x0)
utime(&(0x7f0000000040)='./file0/file0\x00', 0x0)

[  810.057786][   T27] audit: type=1804 audit(1583791780.002:322): pid=31807 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/505/file0" dev="sda1" ino=17250 res=1
[  810.083669][T31700] Dev loop1: unable to read RDB block 1
[  810.123290][T31700]  loop1: unable to read partition table
[  810.138368][T31700] loop1: partition table beyond EOD, truncated
[  810.145038][T31700] loop_reread_partitions: partition scan of loop1 () failed (rc=-5)
22:09:40 executing program 3:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r2)
socket$inet(0x10, 0x2, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080025944eeba71a4976e252922c000000002aba000000012e0b3836005404b0e0301a4ce875f2e0ff5f163ee340b7679500800000000000000101013c5891039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

22:09:40 executing program 2:
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000280)}], 0x3, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@loopback, 0x135})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xa1}, {0x0}, {&(0x7f0000000140)=""/62, 0x3b}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

22:09:40 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
utime(&(0x7f0000000040)='./file0/file0\x00', 0x0)

22:09:40 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000100)="0200ee7e00ff01000000ff070000004c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}])

22:09:40 executing program 4:
syz_mount_image$msdos(0x0, &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
utime(&(0x7f0000000040)='./file0/file0\x00', 0x0)

22:09:40 executing program 2:
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124c000000000061134c0000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000150600000fff07003506000002000000070600000ee60000bf050000000000001f650000000000006507000002000000070700004c0000001f75070000000000bf54000000000000070400000400f9ffad43010000000000950000000000000005000000000000009500000000000000d05bd98c13cc1709ab91e0b9e1e603f862b5173583f1d7eb634f76b1cef9eeb7763c14f8f7494a564babf363654191aadbd61d7d0bdc18ebc296e1085dcbdf299b20712872a269cb051b233ea0bdb6a80b4c05f80b408a2dfafe5f41ba572dd3907ace236861a8e3cbde7b9acd782bea026f25e26ab2430243f2155491072a55d5ff51de097dcf8cffed7409bfd712b24ffed61e78648f791c1abe4604b7e0fea0953f7d8f92037261dbe8791ea01c826928563a5488dfb605d26dbfb74289975594b56e4a9c7163e7bce1672ef356d20d66e7810341fae4aa0116bba4f4d5a77d2f4f9220f79dc91775ed60e953800ea5578f97c793baaac7ff54c6678563f482ed32fadccb750786e574fb251bd26941ebdceed7744ac909e29a9562eddc985fee5bb668ca48cbd7488ae353e7feadddbd678963475fdd7786586d4dc05b502922cd6fc3f7346f365a9a51de24c1f97badd02fd1e55f04602b057f7d2321b28875af613d61913355ce6f38de5bb7aa7e13eaf320bdd3229e4517ff4786785553d47a5af429ff29bde9fbb096c03e5b25aff8381641eb9b17c36f0f2c755d430aef4ffae64a191f57e1a71c3787fe3c705d172505d805330ba81737c63cdc74e3a70d2f88d8e2e759dfae0842e450d99a2bfac2a481ce5bdfb1f06c2386cb30cc591a875bbe442afdd51afecbde83c6a82b18d77b35e872a8b1e9d7c5649b5f24836d72ad3f47990509a45b7ab2ebc3200359c4bfd9100bb0f055bb228036344acd7ef5c20207845e906ac3a9dbcd1ec3b98cb87fea55895a983e25c0824c8b3ffe63e26879db53ae29c728ecca81e3b45538a8f6409105649097b37b306ded817a7198466b3c3486b88be75062baf790a9d6a79c43010cf58b532455a0a562b975d1bec9007dfd25ac"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1}, 0x48)

[  810.508817][T31825] Dev loop1: unable to read RDB block 1
[  810.514562][T31825]  loop1: unable to read partition table
[  810.588142][T31825] loop1: partition table beyond EOD, truncated
[  810.594724][T31825] loop_reread_partitions: partition scan of loop1 () failed (rc=-5)
22:09:40 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000803, 0x5f)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r1, 0x0, 0x0, 0x0, 0x0)
r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0)
ftruncate(r2, 0x200004)
sendfile(r0, r2, 0x0, 0x80001d00c0d0)

22:09:40 executing program 4:
syz_mount_image$msdos(0x0, &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
utime(&(0x7f0000000040)='./file0/file0\x00', 0x0)

22:09:40 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000100)="0200ee7e00ff01000000ff070000004c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}, {&(0x7f0000000240)="3886d5fd321184bcf4e1a28a20e650dfe2d9542197daba3900058ff73ca2d5b833a6d1e4aa479dcc589d5abc8761a4f9a870c3f50df55a69dac6ce37060ab8dbfd3491d5aa9b626ddfe8451533ad9ed392dae0a8d189d61d6bb95f9a1b11498e63ed1f096f2568e9448eb785b68930eba48f334ebc9369a57f5fb9f4bdc75a8988519d4b0566213090f1443ceae029682a2d68797e19b0b5859e1230f63dd23e60026c3e016b56b834c3931e9a178731b0c9af7133be7551241631cafbf3f876", 0xc0, 0xff}, {&(0x7f0000000040)="9c6619591f39ae5d6e050805b537bb52f9", 0x11, 0x5}])

22:09:40 executing program 0:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00'], 0x1)
sendfile(r1, r0, 0x0, 0xa198)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
write$binfmt_elf64(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="000ffff0802bc8369ce73cb6fda400006224541f3780351157b252dd000000009154262a80420801444dd89f6bfd1510066a2128e6c04f112558c8bdac2ae91c22768a299a879ca5ea45ea6189f14f84644589436f645a783aac81cf5bc374f0ac00ef2728cfd3b16ae8a4ec80ebea0a7e8c20a5986a2ab75b34dc27b332714d36cba3ac62ec7100c22eb5d6638b8e1d01468ad3328280706dfc31700ea3fe507bfd0f8169b2187e8d804978b5a6397a1f471a29369349f8dcda480be4b38fb6862fc91512ff53f74ccb2674157b224da1961bbaf18cfe6f399d07607fc5fa"], 0xdf)
sendfile(r3, r2, 0x0, 0xa198)
open(0x0, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)

22:09:40 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000100)="0200ee7e00ff01000000ff070000004c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}])

[  810.958308][T31852]  loop2:
[  810.962020][T31852] loop2: partition table partially beyond EOD, truncated
22:09:41 executing program 4:
syz_mount_image$msdos(0x0, &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
utime(&(0x7f0000000040)='./file0/file0\x00', 0x0)

[  811.104998][T31856] Dev loop1: unable to read RDB block 1
[  811.112418][T31856]  loop1: unable to read partition table
[  811.127493][T31856] loop1: partition table beyond EOD, truncated
[  811.134996][   T27] audit: type=1804 audit(1583791781.092:323): pid=31964 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/506/file0" dev="sda1" ino=17485 res=1
[  811.171155][T31856] loop_reread_partitions: partition scan of loop1 () failed (rc=-5)
[  811.207419][   T27] audit: type=1804 audit(1583791781.092:324): pid=31964 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/506/file0" dev="sda1" ino=17485 res=1
22:09:41 executing program 3:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r2)
socket$inet(0x10, 0x2, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080025944eeba71a4976e252922c000000002aba000000012e0b3836005404b0e0301a4ce875f2e0ff5f163ee340b7679500800000000000000101013c5891039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

22:09:41 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000100)="0200ee7e00ff01000000ff070000004c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}, {&(0x7f0000000240)="3886d5fd321184bcf4e1a28a20e650dfe2d9542197daba3900058ff73ca2d5b833a6d1e4aa479dcc589d5abc8761a4f9a870c3f50df55a69dac6ce37060ab8dbfd3491d5aa9b626ddfe8451533ad9ed392dae0a8d189d61d6bb95f9a1b11498e63ed1f096f2568e9448eb785b68930eba48f334ebc9369a57f5fb9f4bdc75a8988519d4b0566213090f1443ceae029682a2d68797e19b0b5859e1230f63dd23e60026c3e016b56b834c3931e9a178731b0c9af7133be7551241631cafbf3f876", 0xc0, 0xff}, {&(0x7f0000000040)="9c6619591f39ae5d6e050805b537bb52f9", 0x11, 0x5}])

22:09:41 executing program 1:
syz_read_part_table(0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000100)="0200ee7e00ff01000000ff070000004c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}])

22:09:41 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', 0x0, 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
utime(&(0x7f0000000040)='./file0/file0\x00', 0x0)

[  811.508788][T31977]  loop2:
[  811.511877][T31977] loop2: partition table partially beyond EOD, truncated
22:09:41 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000803, 0x5f)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r1, 0x0, 0x0, 0x0, 0x0)
r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0)
ftruncate(r2, 0x200004)
sendfile(r0, r2, 0x0, 0x80001d00c0d0)

[  811.648276][T31986] Dev loop1: unable to read RDB block 1
[  811.658310][T31986]  loop1: unable to read partition table
[  811.670563][T31986] loop1: partition table beyond EOD, truncated
[  811.680592][T31986] loop_reread_partitions: partition scan of loop1 () failed (rc=-5)
22:09:41 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1}, 0x48)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
exit(0x0)

22:09:41 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', 0x0, 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
utime(&(0x7f0000000040)='./file0/file0\x00', 0x0)

22:09:41 executing program 0:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00'], 0x1)
sendfile(r1, r0, 0x0, 0xa198)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
write$binfmt_elf64(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="000ffff0802bc8369ce73cb6fda400006224541f3780351157b252dd000000009154262a80420801444dd89f6bfd1510066a2128e6c04f112558c8bdac2ae91c22768a299a879ca5ea45ea6189f14f84644589436f645a783aac81cf5bc374f0ac00ef2728cfd3b16ae8a4ec80ebea0a7e8c20a5986a2ab75b34dc27b332714d36cba3ac62ec7100c22eb5d6638b8e1d01468ad3328280706dfc31700ea3fe507bfd0f8169b2187e8d804978b5a6397a1f471a29369349f8dcda480be4b38fb6862fc91512ff53f74ccb2674157b224da1961bbaf18cfe6f399d07607fc5fa"], 0xdf)
sendfile(r3, r2, 0x0, 0xa198)
open(0x0, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)

22:09:41 executing program 1:
syz_read_part_table(0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000100)="0200ee7e00ff01000000ff070000004c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}])

22:09:41 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', 0x0, 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
utime(&(0x7f0000000040)='./file0/file0\x00', 0x0)

[  812.070908][T32075] Dev loop1: unable to read RDB block 1
22:09:42 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)

[  812.115824][T32075]  loop1: unable to read partition table
[  812.145766][T32075] loop1: partition table beyond EOD, truncated
[  812.152863][T32075] loop_reread_partitions: partition scan of loop1 () failed (rc=-5)
[  812.187904][   T27] audit: type=1804 audit(1583791782.132:325): pid=32114 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/507/file0" dev="sda1" ino=17313 res=1
22:09:42 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
utime(&(0x7f0000000040)='./file0/file0\x00', 0x0)

[  812.274559][   T27] audit: type=1804 audit(1583791782.132:326): pid=32114 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/507/file0" dev="sda1" ino=17313 res=1
22:09:42 executing program 3:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r2)
socket$inet(0x10, 0x2, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080025944eeba71a4976e252922c000000002aba000000012e0b3836005404b0e0301a4ce875f2e0ff5f163ee340b7679500800000000000000101013c5891039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

22:09:42 executing program 0:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00'], 0x1)
sendfile(r1, r0, 0x0, 0xa198)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
write$binfmt_elf64(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="000ffff0802bc8369ce73cb6fda400006224541f3780351157b252dd000000009154262a80420801444dd89f6bfd1510066a2128e6c04f112558c8bdac2ae91c22768a299a879ca5ea45ea6189f14f84644589436f645a783aac81cf5bc374f0ac00ef2728cfd3b16ae8a4ec80ebea0a7e8c20a5986a2ab75b34dc27b332714d36cba3ac62ec7100c22eb5d6638b8e1d01468ad3328280706dfc31700ea3fe507bfd0f8169b2187e8d804978b5a6397a1f471a29369349f8dcda480be4b38fb6862fc91512ff53f74ccb2674157b224da1961bbaf18cfe6f399d07607fc5fa"], 0xdf)
sendfile(r3, r2, 0x0, 0xa198)
open(0x0, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)

22:09:42 executing program 2:
syz_genetlink_get_family_id$ethtool(0x0)
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r4, &(0x7f0000000200), 0x806000)
writev(r1, &(0x7f0000000300)=[{&(0x7f0000000880)="b1", 0x1}], 0x1)

22:09:42 executing program 1:
syz_read_part_table(0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000100)="0200ee7e00ff01000000ff070000004c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}])

[  812.467148][T32131] FAT-fs (loop4): bogus number of reserved sectors
[  812.478301][T32131] FAT-fs (loop4): Can't find a valid FAT filesystem
22:09:42 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000803, 0x5f)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000002bc0), 0x0, 0x0, 0x0)
r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0)
ftruncate(r2, 0x200004)
sendfile(r0, r2, 0x0, 0x80001d00c0d0)

22:09:42 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
utime(&(0x7f0000000040)='./file0/file0\x00', 0x0)

[  812.611211][   T27] audit: type=1804 audit(1583791782.562:327): pid=32250 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/508/file0" dev="sda1" ino=17429 res=1
22:09:42 executing program 2:
r0 = getpgid(0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = memfd_create(&(0x7f00000000c0)='[\'p\x00\x00\x00\xbdb\x15\xe7v\xd2\x93\xf3\x8c$M\xe7W\xeb\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcdf\xfaY\x81#\x12\xb9\xde:\xf9\xa4\x10\xfeS;O', 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
recvmmsg(r2, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
write$UHID_INPUT(r1, &(0x7f0000004240), 0xfffffe48)

[  812.671695][T32212] Dev loop1: unable to read RDB block 1
[  812.677335][T32212]  loop1: unable to read partition table
[  812.700967][T32212] loop1: partition table beyond EOD, truncated
[  812.723562][T32254] FAT-fs (loop4): bogus number of reserved sectors
[  812.729558][T32212] loop_reread_partitions: partition scan of loop1 () failed (rc=-5)
[  812.730361][T32254] FAT-fs (loop4): Can't find a valid FAT filesystem
[  812.746190][   T27] audit: type=1804 audit(1583791782.562:328): pid=32250 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/508/file0" dev="sda1" ino=17429 res=1
22:09:42 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
utime(&(0x7f0000000040)='./file0/file0\x00', 0x0)

22:09:42 executing program 1:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000100)="0200ee7e00ff01000000ff070000004c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}])

[  813.195383][T32369] Dev loop1: unable to read RDB block 1
[  813.200232][T32373] FAT-fs (loop4): bogus number of reserved sectors
[  813.208081][T32373] FAT-fs (loop4): Can't find a valid FAT filesystem
[  813.238071][T32369]  loop1: unable to read partition table
[  813.250780][T32369] loop1: partition table beyond EOD, truncated
[  813.270849][T32369] loop_reread_partitions: partition scan of loop1 () failed (rc=-5)
22:09:43 executing program 0:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00'], 0x1)
sendfile(r1, r0, 0x0, 0xa198)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="000ffff0802bc8369ce73cb6fda400006224541f3780351157b252dd000000009154262a80420801444dd89f6bfd1510066a2128e6c04f112558c8bdac2ae91c22768a299a879ca5ea45ea6189f14f84644589436f645a783aac81cf5bc374f0ac00ef2728cfd3b16ae8a4ec80ebea0a7e8c20a5986a2ab75b34dc27b332714d36cba3ac62ec7100c22eb5d6638b8e1d01468ad3328280706dfc31700ea3fe507bfd0f8169b2187e8d804978b5a6397a1f471a29369349f8dcda480be4b38fb6862fc91512ff53f74ccb2674157b224da1961bbaf18cfe6f399d07607fc5fa"], 0xdf)
sendfile(r3, r2, 0x0, 0xa198)
open(0x0, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)

22:09:43 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x0, 0x0, 0x0, 0x0)
utime(&(0x7f0000000040)='./file0/file0\x00', 0x0)

22:09:43 executing program 2:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_setup(0x0, 0x0)
r1 = socket(0x11, 0x800000003, 0x8)
bind(r1, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
accept4$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @my=0x1}, 0x10, 0x800)
dup(0xffffffffffffffff)
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4)
dup(0xffffffffffffffff)
bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000480)={0x0, &(0x7f0000000200)}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27)

22:09:43 executing program 3:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r2)
socket$inet(0x10, 0x2, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080025944eeba71a4976e252922c000000002aba000000012e0b3836005404b0e0301a4ce875f2e0ff5f163ee340b7679500800000000000000101013c5891039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

22:09:43 executing program 1:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000100)="0200ee7e00ff01000000ff070000004c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}])

[  813.473804][T32382] FAT-fs (loop4): bogus number of reserved sectors
[  813.535748][T32382] FAT-fs (loop4): Can't find a valid FAT filesystem
22:09:43 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x0, 0x0, 0x0, 0x0)
utime(&(0x7f0000000040)='./file0/file0\x00', 0x0)

22:09:43 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000803, 0x5f)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000002bc0), 0x0, 0x0, 0x0)
r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0)
ftruncate(r2, 0x200004)
sendfile(r0, r2, 0x0, 0x80001d00c0d0)

[  813.640768][T32390] Dev loop1: unable to read RDB block 1
[  813.646374][T32390]  loop1: unable to read partition table
[  813.673535][T32390] loop1: partition table beyond EOD, truncated
[  813.683601][T32390] loop_reread_partitions: partition scan of loop1 () failed (rc=-5)
[  813.721314][   T27] audit: type=1804 audit(1583791783.672:329): pid=32500 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/509/file0" dev="sda1" ino=16522 res=1
22:09:43 executing program 2:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_setup(0x0, 0x0)
r1 = socket(0x11, 0x800000003, 0x8)
bind(r1, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
accept4$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @my=0x1}, 0x10, 0x800)
dup(0xffffffffffffffff)
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4)
dup(0xffffffffffffffff)
bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000480)={0x0, &(0x7f0000000200)}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27)

[  813.807525][T32504] FAT-fs (loop4): bogus number of reserved sectors
22:09:43 executing program 1:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000100)="0200ee7e00ff01000000ff070000004c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}])

[  813.853137][T32504] FAT-fs (loop4): Can't find a valid FAT filesystem
[  813.907382][   T27] audit: type=1804 audit(1583791783.702:330): pid=32500 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/509/file0" dev="sda1" ino=16522 res=1
22:09:43 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x0, 0x0, 0x0, 0x0)
utime(&(0x7f0000000040)='./file0/file0\x00', 0x0)

22:09:44 executing program 2:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_setup(0x0, 0x0)
r1 = socket(0x11, 0x800000003, 0x8)
bind(r1, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
accept4$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @my=0x1}, 0x10, 0x800)
dup(0xffffffffffffffff)
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4)
dup(0xffffffffffffffff)
bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000480)={0x0, &(0x7f0000000200)}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27)

[  814.117897][T32516] Dev loop1: unable to read RDB block 1
[  814.132228][T32516]  loop1: unable to read partition table
[  814.138995][T32516] loop1: partition table beyond EOD, truncated
[  814.141394][T32621] FAT-fs (loop4): bogus number of reserved sectors
[  814.145503][T32516] loop_reread_partitions: partition scan of loop1 () failed (rc=-5)
[  814.167542][T32621] FAT-fs (loop4): Can't find a valid FAT filesystem
22:09:44 executing program 1:
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000100)="0200ee7e00ff01000000ff070000004c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}])

22:09:44 executing program 0:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00'], 0x1)
sendfile(r1, r0, 0x0, 0xa198)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="000ffff0802bc8369ce73cb6fda400006224541f3780351157b252dd000000009154262a80420801444dd89f6bfd1510066a2128e6c04f112558c8bdac2ae91c22768a299a879ca5ea45ea6189f14f84644589436f645a783aac81cf5bc374f0ac00ef2728cfd3b16ae8a4ec80ebea0a7e8c20a5986a2ab75b34dc27b332714d36cba3ac62ec7100c22eb5d6638b8e1d01468ad3328280706dfc31700ea3fe507bfd0f8169b2187e8d804978b5a6397a1f471a29369349f8dcda480be4b38fb6862fc91512ff53f74ccb2674157b224da1961bbaf18cfe6f399d07607fc5fa"], 0xdf)
sendfile(r3, r2, 0x0, 0xa198)
open(0x0, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)

22:09:44 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x0, &(0x7f0000000180), 0x0, 0x0)
utime(&(0x7f0000000040)='./file0/file0\x00', 0x0)

22:09:44 executing program 3:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r2)
socket$inet(0x10, 0x2, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080025944eeba71a4976e252922c000000002aba000000012e0b3836005404b0e0301a4ce875f2e0ff5f163ee340b7679500800000000000000101013c5891039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

22:09:44 executing program 2:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_setup(0x0, 0x0)
r1 = socket(0x11, 0x800000003, 0x8)
bind(r1, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
accept4$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @my=0x1}, 0x10, 0x800)
dup(0xffffffffffffffff)
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4)
dup(0xffffffffffffffff)
bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000480)={0x0, &(0x7f0000000200)}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27)

[  814.420104][T32713] Dev loop1: unable to read RDB block 1
[  814.497131][T32713]  loop1: unable to read partition table
[  814.547027][T32740] FAT-fs (loop4): bogus number of reserved sectors
[  814.559537][T32713] loop1: partition table beyond EOD, truncated
[  814.572613][T32713] loop_reread_partitions: partition scan of loop1 () failed (rc=-5)
[  814.586428][T32740] FAT-fs (loop4): Can't find a valid FAT filesystem
[  814.596793][   T27] audit: type=1804 audit(1583791784.542:331): pid=32748 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/510/file0" dev="sda1" ino=17488 res=1
[  814.661065][   T27] audit: type=1804 audit(1583791784.572:332): pid=32748 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/510/file0" dev="sda1" ino=17488 res=1
22:09:44 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000803, 0x5f)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000002bc0), 0x0, 0x0, 0x0)
r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0)
ftruncate(r2, 0x200004)
sendfile(r0, r2, 0x0, 0x80001d00c0d0)

22:09:44 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x0, &(0x7f0000000180), 0x0, 0x0)
utime(&(0x7f0000000040)='./file0/file0\x00', 0x0)

22:09:44 executing program 1:
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000100)="0200ee7e00ff01000000ff070000004c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}])

22:09:44 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x20, 0x0, &(0x7f00000000c0)=[@acquire, @release, @request_death={0x40046306, 0x0, 0x40046305}], 0x0, 0x0, 0x0})

[  815.049431][  T346] FAT-fs (loop4): bogus number of reserved sectors
[  815.056640][  T346] FAT-fs (loop4): Can't find a valid FAT filesystem
22:09:45 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000803, 0x5f)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0)
r2 = open(0x0, 0x143042, 0x0)
ftruncate(r2, 0x200004)
sendfile(r0, r2, 0x0, 0x80001d00c0d0)

22:09:45 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x20, 0x0, &(0x7f00000000c0)=[@acquire, @release, @request_death={0x40046306, 0x0, 0x40046305}], 0x0, 0x0, 0x0})

[  815.091680][  T371] Dev loop1: unable to read RDB block 1
[  815.103854][  T371]  loop1: unable to read partition table
[  815.119612][  T371] loop1: partition table beyond EOD, truncated
[  815.135015][  T371] loop_reread_partitions: partition scan of loop1 () failed (rc=-5)
22:09:45 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x0, &(0x7f0000000180), 0x0, 0x0)
utime(&(0x7f0000000040)='./file0/file0\x00', 0x0)

22:09:45 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x20, 0x0, &(0x7f00000000c0)=[@acquire, @release, @request_death={0x40046306, 0x0, 0x40046305}], 0x0, 0x0, 0x0})

22:09:45 executing program 0:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00'], 0x1)
sendfile(r1, r0, 0x0, 0xa198)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="000ffff0802bc8369ce73cb6fda400006224541f3780351157b252dd000000009154262a80420801444dd89f6bfd1510066a2128e6c04f112558c8bdac2ae91c22768a299a879ca5ea45ea6189f14f84644589436f645a783aac81cf5bc374f0ac00ef2728cfd3b16ae8a4ec80ebea0a7e8c20a5986a2ab75b34dc27b332714d36cba3ac62ec7100c22eb5d6638b8e1d01468ad3328280706dfc31700ea3fe507bfd0f8169b2187e8d804978b5a6397a1f471a29369349f8dcda480be4b38fb6862fc91512ff53f74ccb2674157b224da1961bbaf18cfe6f399d07607fc5fa"], 0xdf)
sendfile(r3, r2, 0x0, 0xa198)
open(0x0, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)

22:09:45 executing program 1:
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000100)="0200ee7e00ff01000000ff070000004c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}])

[  815.390729][  T414] FAT-fs (loop4): bogus number of reserved sectors
[  815.432409][  T414] FAT-fs (loop4): Can't find a valid FAT filesystem
22:09:45 executing program 3:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r2)
socket$inet(0x10, 0x2, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080025944eeba71a4976e252922c000000002aba000000012e0b3836005404b0e0301a4ce875f2e0ff5f163ee340b7679500800000000000000101013c5891039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

[  815.559797][  T423] Dev loop1: unable to read RDB block 1
[  815.588287][  T423]  loop1: unable to read partition table
22:09:45 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_setup(0x0, 0x0)
r0 = socket(0x11, 0x800000003, 0x8)
bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
dup(0xffffffffffffffff)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4)
r2 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27)

[  815.618518][  T423] loop1: partition table beyond EOD, truncated
[  815.654278][  T423] loop_reread_partitions: partition scan of loop1 () failed (rc=-5)
22:09:45 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, 0x0)
utime(&(0x7f0000000040)='./file0/file0\x00', 0x0)

[  815.670500][   T27] audit: type=1804 audit(1583791785.622:333): pid=436 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/511/file0" dev="sda1" ino=17488 res=1
[  815.712244][   T27] audit: type=1804 audit(1583791785.622:334): pid=436 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/511/file0" dev="sda1" ino=17488 res=1
22:09:45 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000100)="0200ee7e00ff01000000ff070000004c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}])

[  815.823357][  T443] FAT-fs (loop4): bogus number of reserved sectors
[  815.830517][  T443] FAT-fs (loop4): Can't find a valid FAT filesystem
22:09:45 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, 0x0)
utime(&(0x7f0000000040)='./file0/file0\x00', 0x0)

22:09:46 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000803, 0x5f)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0)
r2 = open(0x0, 0x143042, 0x0)
ftruncate(r2, 0x200004)
sendfile(r0, r2, 0x0, 0x80001d00c0d0)

[  816.107092][  T548] Dev loop1: unable to read RDB block 1
[  816.133151][  T548]  loop1: unable to read partition table
22:09:46 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='setgroups\x00')
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup2(r1, r0)

[  816.190091][  T548] loop1: partition table beyond EOD, truncated
[  816.227709][  T548] loop_reread_partitions: partition scan of loop1 () failed (rc=-5)
22:09:46 executing program 0:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00'], 0x1)
sendfile(r1, r0, 0x0, 0xa198)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r3, 0x0, 0x0)
sendfile(r3, r2, 0x0, 0xa198)
open(0x0, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)

[  816.296912][  T556] FAT-fs (loop4): bogus number of reserved sectors
[  816.310586][  T556] FAT-fs (loop4): Can't find a valid FAT filesystem
22:09:46 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, 0x0)
utime(&(0x7f0000000040)='./file0/file0\x00', 0x0)

22:09:46 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
poll(&(0x7f0000000180)=[{r3}, {r1, 0x104}], 0x2, 0x1000)

22:09:46 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000100)="0200ee7e00ff01000000ff070000004c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}])

22:09:46 executing program 3:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r2)
socket$inet(0x10, 0x2, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080025944eeba71a4976e252922c000000002aba000000012e0b3836005404b0e0301a4ce875f2e0ff5f163ee340b7679500800000000000000101013c5891039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

[  816.641918][  T678] FAT-fs (loop4): bogus number of reserved sectors
[  816.642484][   T27] audit: type=1804 audit(1583791786.592:335): pid=772 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/512/file0" dev="sda1" ino=17315 res=1
[  816.648885][  T682] Dev loop1: unable to read RDB block 1
[  816.677384][  T678] FAT-fs (loop4): Can't find a valid FAT filesystem
[  816.679031][  T682]  loop1: unable to read partition table
[  816.691705][  T682] loop1: partition table beyond EOD, truncated
[  816.697875][  T682] loop_reread_partitions: partition scan of loop1 () failed (rc=-5)
22:09:46 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{}], 0x0, 0x0)
utime(&(0x7f0000000040)='./file0/file0\x00', 0x0)

22:09:46 executing program 2:

[  816.749765][   T27] audit: type=1804 audit(1583791786.642:336): pid=772 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/512/file0" dev="sda1" ino=17315 res=1
22:09:46 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000100)="0200ee7e00ff01000000ff070000004c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}])

[  816.911363][  T792] FAT-fs (loop4): bogus number of reserved sectors
[  816.918257][  T792] FAT-fs (loop4): Can't find a valid FAT filesystem
22:09:46 executing program 2:

22:09:47 executing program 2:

[  817.144532][  T797] Dev loop1: unable to read RDB block 1
[  817.162495][  T797]  loop1: unable to read partition table
22:09:47 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000803, 0x5f)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0)
r2 = open(0x0, 0x143042, 0x0)
ftruncate(r2, 0x200004)
sendfile(r0, r2, 0x0, 0x80001d00c0d0)

22:09:47 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{}], 0x0, 0x0)
utime(&(0x7f0000000040)='./file0/file0\x00', 0x0)

[  817.191360][  T797] loop1: partition table beyond EOD, truncated
[  817.239040][  T797] loop_reread_partitions: partition scan of loop1 () failed (rc=-5)
22:09:47 executing program 0:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00'], 0x1)
sendfile(r1, r0, 0x0, 0xa198)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r3, 0x0, 0x0)
sendfile(r3, r2, 0x0, 0xa198)
open(0x0, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)

22:09:47 executing program 2:

[  817.336523][  T809] FAT-fs (loop4): bogus number of reserved sectors
22:09:47 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000100)="0200ee7e00ff01000000ff070000004c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}])

22:09:47 executing program 3:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r2)
socket$inet(0x10, 0x2, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080025944eeba71a4976e252922c000000002aba000000012e0b3836005404b0e0301a4ce875f2e0ff5f163ee340b7679500800000000000000101013c5891039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffff7f00000000ffefa6f909f7", @ANYRES32=r4], 0x2}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

[  817.415181][  T809] FAT-fs (loop4): Can't find a valid FAT filesystem
[  817.535656][  T825] netlink: 2220 bytes leftover after parsing attributes in process `syz-executor.3'.
[  817.559892][  T822] Dev loop1: unable to read RDB block 1
[  817.566258][  T822]  loop1: unable to read partition table
[  817.572751][  T822] loop1: partition table beyond EOD, truncated
22:09:47 executing program 2:

[  817.583825][  T822] loop_reread_partitions: partition scan of loop1 () failed (rc=-5)
22:09:47 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{}], 0x0, 0x0)
utime(&(0x7f0000000040)='./file0/file0\x00', 0x0)

[  817.722661][   T27] audit: type=1804 audit(1583791787.672:337): pid=833 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/513/file0" dev="sda1" ino=17317 res=1
22:09:47 executing program 2:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_setup(0x0, 0x0)
r1 = socket(0x11, 0x800000003, 0x8)
bind(r1, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
accept4$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @my=0x1}, 0x10, 0x800)
dup(0xffffffffffffffff)
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4)
dup(0xffffffffffffffff)
bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27)

22:09:47 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x0, 0x0)

[  817.807289][   T27] audit: type=1804 audit(1583791787.702:338): pid=833 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/513/file0" dev="sda1" ino=17317 res=1
22:09:47 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x0, 0x0)

[  817.981453][  T842] FAT-fs (loop4): bogus number of reserved sectors
[  818.003799][  T842] FAT-fs (loop4): Can't find a valid FAT filesystem
22:09:48 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e666174", 0xb}], 0x0, 0x0)
utime(&(0x7f0000000040)='./file0/file0\x00', 0x0)

22:09:48 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000803, 0x5f)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0)
r2 = open(&(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ftruncate(r2, 0x200004)
sendfile(r0, r2, 0x0, 0x80001d00c0d0)

22:09:48 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x0, 0x0)

[  818.249030][  T854] FAT-fs (loop4): bogus number of reserved sectors
[  818.255909][  T854] FAT-fs (loop4): Can't find a valid FAT filesystem
22:09:48 executing program 0:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00'], 0x1)
sendfile(r1, r0, 0x0, 0xa198)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r3, 0x0, 0x0)
sendfile(r3, r2, 0x0, 0xa198)
open(0x0, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)

22:09:48 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e666174", 0xb}], 0x0, 0x0)
utime(&(0x7f0000000040)='./file0/file0\x00', 0x0)

22:09:48 executing program 3:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r2)
socket$inet(0x10, 0x2, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080025944eeba71a4976e252922c000000002aba000000012e0b3836005404b0e0301a4ce875f2e0ff5f163ee340b7679500800000000000000101013c5891039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffff7f00000000ffefa6f909f7", @ANYRES32=r4], 0x2}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

22:09:48 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x0, &(0x7f0000000300))

[  818.536687][  T874] netlink: 2220 bytes leftover after parsing attributes in process `syz-executor.3'.
[  818.561329][  T871] FAT-fs (loop4): bogus number of reserved sectors
[  818.614228][  T871] FAT-fs (loop4): Can't find a valid FAT filesystem
22:09:48 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x0, &(0x7f0000000300))

22:09:48 executing program 2:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_setup(0x0, 0x0)
r1 = socket(0x11, 0x800000003, 0x8)
bind(r1, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
accept4$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @my=0x1}, 0x10, 0x800)
dup(0xffffffffffffffff)
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4)
dup(0xffffffffffffffff)
bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27)

22:09:48 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e666174", 0xb}], 0x0, 0x0)
utime(&(0x7f0000000040)='./file0/file0\x00', 0x0)

22:09:48 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x0, &(0x7f0000000300))

[  818.968959][  T995] FAT-fs (loop4): bogus number of reserved sectors
[  818.977021][  T995] FAT-fs (loop4): Can't find a valid FAT filesystem
22:09:49 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, 0x0)
utime(&(0x7f0000000040)='./file0/file0\x00', 0x0)

22:09:49 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000803, 0x5f)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0)
r2 = open(&(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ftruncate(r2, 0x200004)
sendfile(r0, r2, 0x0, 0x80001d00c0d0)

22:09:49 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000300)=[{0x0, 0x0, 0x1c0}])

[  819.366059][ T1118] FAT-fs (loop4): invalid media value (0x00)
[  819.403921][ T1118] FAT-fs (loop4): Can't find a valid FAT filesystem
22:09:49 executing program 2:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_setup(0x0, 0x0)
r1 = socket(0x11, 0x800000003, 0x8)
bind(r1, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
accept4$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @my=0x1}, 0x10, 0x800)
dup(0xffffffffffffffff)
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4)
dup(0xffffffffffffffff)
bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27)

22:09:49 executing program 0:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00'], 0x1)
sendfile(r1, r0, 0x0, 0xa198)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r3, &(0x7f0000000580)=ANY=[], 0x0)
sendfile(r3, r2, 0x0, 0xa198)
open(0x0, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)

22:09:49 executing program 3:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r2)
socket$inet(0x10, 0x2, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080025944eeba71a4976e252922c000000002aba000000012e0b3836005404b0e0301a4ce875f2e0ff5f163ee340b7679500800000000000000101013c5891039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffff7f00000000ffefa6f909f7", @ANYRES32=r4], 0x2}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

22:09:49 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, 0x0)
utime(&(0x7f0000000040)='./file0/file0\x00', 0x0)

[  819.558325][ T1124] Dev loop1: unable to read RDB block 1
[  819.559875][ T1130] FAT-fs (loop4): invalid media value (0x00)
[  819.572512][ T1130] FAT-fs (loop4): Can't find a valid FAT filesystem
[  819.620290][ T1124]  loop1: unable to read partition table
[  819.629621][ T1124] loop1: partition table beyond EOD, truncated
22:09:49 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, 0x0)
utime(&(0x7f0000000040)='./file0/file0\x00', 0x0)

[  819.670416][ T1124] loop_reread_partitions: partition scan of loop1 () failed (rc=-5)
[  819.679495][ T1141] netlink: 2220 bytes leftover after parsing attributes in process `syz-executor.3'.
[  819.748748][   T27] kauditd_printk_skb: 2 callbacks suppressed
[  819.748771][   T27] audit: type=1804 audit(1583791789.692:341): pid=1143 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/515/file0" dev="sda1" ino=17328 res=1
22:09:49 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000300)=[{0x0, 0x0, 0x1c0}])

[  819.865131][   T27] audit: type=1804 audit(1583791789.702:342): pid=1143 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/515/file0" dev="sda1" ino=17328 res=1
[  819.904522][ T1231] FAT-fs (loop4): invalid media value (0x00)
[  819.953217][ T1231] FAT-fs (loop4): Can't find a valid FAT filesystem
[  820.028589][ T1257] Dev loop1: unable to read RDB block 1
[  820.037282][ T1257]  loop1: unable to read partition table
[  820.043491][ T1257] loop1: partition table beyond EOD, truncated
[  820.050544][ T1257] loop_reread_partitions: partition scan of loop1 () failed (rc=-5)
22:09:50 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e666174000204010002000274", 0x14}], 0x0, 0x0)
utime(&(0x7f0000000040)='./file0/file0\x00', 0x0)

22:09:50 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000803, 0x5f)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0)
r2 = open(&(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ftruncate(r2, 0x200004)
sendfile(r0, r2, 0x0, 0x80001d00c0d0)

22:09:50 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000300)=[{0x0, 0x0, 0x1c0}])

22:09:50 executing program 2:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_setup(0x0, 0x0)
r1 = socket(0x11, 0x800000003, 0x8)
bind(r1, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
accept4$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @my=0x1}, 0x10, 0x800)
dup(0xffffffffffffffff)
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4)
dup(0xffffffffffffffff)
bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27)

22:09:50 executing program 0:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00'], 0x1)
sendfile(r1, r0, 0x0, 0xa198)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r3, &(0x7f0000000580)=ANY=[], 0x0)
sendfile(r3, r2, 0x0, 0xa198)
open(0x0, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)

[  820.455709][ T1273] FAT-fs (loop4): invalid media value (0x00)
[  820.539476][ T1273] FAT-fs (loop4): Can't find a valid FAT filesystem
22:09:50 executing program 3:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r2)
socket$inet(0x10, 0x2, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080025944eeba71a4976e252922c000000002aba000000012e0b3836005404b0e0301a4ce875f2e0ff5f163ee340b7679500800000000000000101013c5891039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffff7f00000000ffefa6f909f7", @ANYRES32=r4, @ANYBLOB], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

[  820.642616][   T27] audit: type=1804 audit(1583791790.592:343): pid=1287 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/516/file0" dev="sda1" ino=17498 res=1
[  820.680628][ T1278] Dev loop1: unable to read RDB block 1
22:09:50 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e666174000204010002000274", 0x14}], 0x0, 0x0)
utime(&(0x7f0000000040)='./file0/file0\x00', 0x0)

[  820.703553][   T27] audit: type=1804 audit(1583791790.632:344): pid=1287 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/516/file0" dev="sda1" ino=17498 res=1
[  820.712631][ T1278]  loop1: unable to read partition table
[  820.740623][ T1278] loop1: partition table beyond EOD, truncated
[  820.771180][ T1278] loop_reread_partitions: partition scan of loop1 () failed (rc=-5)
[  820.800936][ T1294] netlink: 2220 bytes leftover after parsing attributes in process `syz-executor.3'.
22:09:50 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000100), 0x0, 0x1c0}])

[  820.861045][ T1296] FAT-fs (loop4): invalid media value (0x00)
[  820.867540][ T1296] FAT-fs (loop4): Can't find a valid FAT filesystem
22:09:50 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e666174000204010002000274", 0x14}], 0x0, 0x0)
utime(&(0x7f0000000040)='./file0/file0\x00', 0x0)

[  821.078692][ T1307] Dev loop1: unable to read RDB block 1
[  821.084357][ T1307]  loop1: unable to read partition table
[  821.103054][ T1311] FAT-fs (loop4): invalid media value (0x00)
[  821.118017][ T1311] FAT-fs (loop4): Can't find a valid FAT filesystem
22:09:51 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000803, 0x5f)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0)
r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0)
ftruncate(0xffffffffffffffff, 0x200004)
sendfile(r0, r2, 0x0, 0x80001d00c0d0)

[  821.124919][ T1307] loop1: partition table beyond EOD, truncated
[  821.133685][ T1307] loop_reread_partitions: partition scan of loop1 () failed (rc=-5)
22:09:51 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400", 0x15}], 0x0, 0x0)
utime(&(0x7f0000000040)='./file0/file0\x00', 0x0)

22:09:51 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000100), 0x0, 0x1c0}])

22:09:51 executing program 0:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00'], 0x1)
sendfile(r1, r0, 0x0, 0xa198)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r3, &(0x7f0000000580)=ANY=[], 0x0)
sendfile(r3, r2, 0x0, 0xa198)
open(0x0, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)

22:09:51 executing program 2:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_setup(0x0, 0x0)
r1 = socket(0x11, 0x800000003, 0x8)
bind(r1, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
accept4$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @my=0x1}, 0x10, 0x800)
dup(0xffffffffffffffff)
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4)
dup(0xffffffffffffffff)
bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27)

[  821.490338][ T1324] Dev loop1: unable to read RDB block 1
[  821.497335][ T1324]  loop1: unable to read partition table
[  821.503568][ T1324] loop1: partition table beyond EOD, truncated
[  821.514434][ T1324] loop_reread_partitions: partition scan of loop1 () failed (rc=-5)
22:09:51 executing program 3:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r2)
socket$inet(0x10, 0x2, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080025944eeba71a4976e252922c000000002aba000000012e0b3836005404b0e0301a4ce875f2e0ff5f163ee340b7679500800000000000000101013c5891039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffff7f00000000ffefa6f909f7", @ANYRES32=r4, @ANYBLOB], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

22:09:51 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000100), 0x0, 0x1c0}])

[  821.670331][ T1330] FAT-fs (loop4): invalid media value (0x00)
[  821.714934][ T1344] netlink: 2220 bytes leftover after parsing attributes in process `syz-executor.3'.
[  821.730666][ T1330] FAT-fs (loop4): Can't find a valid FAT filesystem
[  821.789508][   T27] audit: type=1804 audit(1583791791.742:345): pid=1452 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/517/file0" dev="sda1" ino=17499 res=1
22:09:51 executing program 2:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_setup(0x0, 0x0)
r1 = socket(0x11, 0x800000003, 0x8)
bind(r1, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
accept4$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @my=0x1}, 0x10, 0x800)
dup(0xffffffffffffffff)
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4)
dup(0xffffffffffffffff)
bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27)

[  821.818464][   T27] audit: type=1804 audit(1583791791.772:346): pid=1452 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/517/file0" dev="sda1" ino=17499 res=1
22:09:51 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400", 0x15}], 0x0, 0x0)
utime(&(0x7f0000000040)='./file0/file0\x00', 0x0)

[  821.992820][ T1451] Dev loop1: unable to read RDB block 1
[  822.004767][ T1451]  loop1: unable to read partition table
[  822.021055][ T1451] loop1: partition table beyond EOD, truncated
[  822.032129][ T1451] loop_reread_partitions: partition scan of loop1 () failed (rc=-5)
22:09:52 executing program 2:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_setup(0x0, 0x0)
r1 = socket(0x11, 0x800000003, 0x8)
bind(r1, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
accept4$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @my=0x1}, 0x10, 0x800)
dup(0xffffffffffffffff)
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4)
dup(0xffffffffffffffff)
bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27)

[  822.065611][ T1570] FAT-fs (loop4): invalid media value (0x00)
[  822.090268][ T1570] FAT-fs (loop4): Can't find a valid FAT filesystem
22:09:52 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000803, 0x5f)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0)
r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0)
ftruncate(0xffffffffffffffff, 0x200004)
sendfile(r0, r2, 0x0, 0x80001d00c0d0)

22:09:52 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000100)="0200ee7e00ff01000000ff070000004c00"/32, 0x20, 0x1c0}])

22:09:52 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400", 0x15}], 0x0, 0x0)
utime(&(0x7f0000000040)='./file0/file0\x00', 0x0)

22:09:52 executing program 0:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00'], 0x1)
sendfile(r1, r0, 0x0, 0xa198)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r3, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0)
sendfile(r3, r2, 0x0, 0xa198)
open(0x0, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)

[  822.463516][ T1585] Dev loop1: unable to read RDB block 1
[  822.476050][ T1585]  loop1: unable to read partition table
[  822.482152][ T1585] loop1: partition table beyond EOD, truncated
[  822.488490][ T1585] loop_reread_partitions: partition scan of loop1 () failed (rc=-5)
22:09:52 executing program 3:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r2)
socket$inet(0x10, 0x2, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080025944eeba71a4976e252922c000000002aba000000012e0b3836005404b0e0301a4ce875f2e0ff5f163ee340b7679500800000000000000101013c5891039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffff7f00000000ffefa6f909f7", @ANYRES32=r4, @ANYBLOB], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

[  822.522715][ T1590] FAT-fs (loop4): invalid media value (0x00)
[  822.529577][ T1590] FAT-fs (loop4): Can't find a valid FAT filesystem
22:09:52 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000100)="0200ee7e00ff01000000ff070000004c00"/32, 0x20, 0x1c0}])

22:09:52 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
utime(0x0, 0x0)

[  822.759068][   T27] audit: type=1804 audit(1583791792.712:347): pid=1605 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/518/file0" dev="sda1" ino=17320 res=1
[  822.787602][ T1607] netlink: 2220 bytes leftover after parsing attributes in process `syz-executor.3'.
[  822.805463][   T27] audit: type=1804 audit(1583791792.732:348): pid=1605 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/518/file0" dev="sda1" ino=17320 res=1
[  822.893421][ T1604] Dev loop1: unable to read RDB block 1
[  822.905135][ T1604]  loop1: unable to read partition table
[  822.941883][ T1604] loop1: partition table beyond EOD, truncated
[  822.959553][ T1604] loop_reread_partitions: partition scan of loop1 () failed (rc=-5)
22:09:52 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
utime(0x0, 0x0)

22:09:53 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000100), 0x0, 0x1c0}])

22:09:53 executing program 2:

22:09:53 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000803, 0x5f)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0)
r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0)
ftruncate(0xffffffffffffffff, 0x200004)
sendfile(r0, r2, 0x0, 0x80001d00c0d0)

22:09:53 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
utime(0x0, 0x0)

22:09:53 executing program 2:

[  823.369023][ T1625] Dev loop1: unable to read RDB block 1
[  823.377266][ T1625]  loop1: unable to read partition table
[  823.388157][ T1625] loop1: partition table beyond EOD, truncated
[  823.407644][ T1625] loop_reread_partitions: partition scan of loop1 () failed (rc=-5)
22:09:53 executing program 0:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00'], 0x1)
sendfile(r1, r0, 0x0, 0xa198)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r3, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0)
sendfile(r3, r2, 0x0, 0xa198)
open(0x0, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)

22:09:53 executing program 2:

22:09:53 executing program 2:

22:09:53 executing program 3:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r2)
socket$inet(0x10, 0x2, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080025944eeba71a4976e252922c000000002aba000000012e0b3836005404b0e0301a4ce875f2e0ff5f163ee340b7679500800000000000000101013c5891039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffff7f00000000ffefa6f909f7", @ANYRES32=r4, @ANYBLOB="0000000bf1ffffff"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

22:09:53 executing program 4:

22:09:53 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000100), 0x0, 0x1c0}])

[  823.689688][   T27] audit: type=1804 audit(1583791793.632:349): pid=1644 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/519/file0" dev="sda1" ino=17490 res=1
22:09:53 executing program 2:

[  823.749372][   T27] audit: type=1804 audit(1583791793.682:350): pid=1644 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/519/file0" dev="sda1" ino=17490 res=1
22:09:53 executing program 2:

[  823.942116][ T1652] Dev loop1: unable to read RDB block 1
[  823.956905][ T1661] netlink: 2220 bytes leftover after parsing attributes in process `syz-executor.3'.
[  823.956977][ T1652]  loop1: unable to read partition table
22:09:53 executing program 4:

[  824.071225][ T1652] loop1: partition table beyond EOD, truncated
[  824.092075][ T1652] loop_reread_partitions: partition scan of loop1 () failed (rc=-5)
22:09:54 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000803, 0x5f)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0)
r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0)
ftruncate(r2, 0x0)
sendfile(r0, r2, 0x0, 0x80001d00c0d0)

22:09:54 executing program 2:

22:09:54 executing program 4:

22:09:54 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000100), 0x0, 0x1c0}])

22:09:54 executing program 2:

22:09:54 executing program 0:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00'], 0x1)
sendfile(r1, r0, 0x0, 0xa198)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r3, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0)
sendfile(r3, r2, 0x0, 0xa198)
open(0x0, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)

[  824.534471][ T1681] Dev loop1: unable to read RDB block 1
[  824.551737][ T1681]  loop1: unable to read partition table
[  824.558448][ T1681] loop1: partition table beyond EOD, truncated
[  824.577796][ T1681] loop_reread_partitions: partition scan of loop1 () failed (rc=-5)
22:09:54 executing program 3:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r2)
socket$inet(0x10, 0x2, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080025944eeba71a4976e252922c000000002aba000000012e0b3836005404b0e0301a4ce875f2e0ff5f163ee340b7679500800000000000000101013c5891039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffff7f00000000ffefa6f909f7", @ANYRES32=r4, @ANYBLOB="0000000bf1ffffff"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

22:09:54 executing program 4:

22:09:54 executing program 2:

22:09:54 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000100)="0200ee7e00ff01000000ff070000004c", 0x10, 0x1c0}])

22:09:54 executing program 2:

22:09:54 executing program 4:

[  824.868751][ T1695] Dev loop1: unable to read RDB block 1
[  824.902850][ T1702] netlink: 2220 bytes leftover after parsing attributes in process `syz-executor.3'.
[  824.929593][ T1695]  loop1: unable to read partition table
[  824.971900][ T1695] loop1: partition table beyond EOD, truncated
[  824.983341][ T1695] loop_reread_partitions: partition scan of loop1 () failed (rc=-5)
22:09:55 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000803, 0x5f)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0)
r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0)
ftruncate(r2, 0x0)
sendfile(r0, r2, 0x0, 0x80001d00c0d0)

22:09:55 executing program 2:

22:09:55 executing program 4:

22:09:55 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000100)="0200ee7e00ff01000000ff070000004c", 0x10, 0x1c0}])

22:09:55 executing program 2:

[  825.293682][ T1713] Dev loop1: unable to read RDB block 1
[  825.306113][ T1713]  loop1: unable to read partition table
[  825.332702][ T1713] loop1: partition table beyond EOD, truncated
22:09:55 executing program 4:

[  825.360571][ T1713] loop_reread_partitions: partition scan of loop1 () failed (rc=-5)
22:09:55 executing program 3:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r2)
socket$inet(0x10, 0x2, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080025944eeba71a4976e252922c000000002aba000000012e0b3836005404b0e0301a4ce875f2e0ff5f163ee340b7679500800000000000000101013c5891039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffff7f00000000ffefa6f909f7", @ANYRES32=r4, @ANYBLOB="0000000bf1ffffff"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

22:09:55 executing program 2:

22:09:55 executing program 0:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00'], 0x1)
sendfile(r1, r0, 0x0, 0xa198)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="000ffff0802bc8369ce73cb6fda400006224541f3780351157b252dd000000009154262a80420801444dd89f6bfd1510066a2128e6c04f112558c8bdac2ae91c22768a299a879ca5ea45ea6189f14f84644589436f645a783aac81cf5bc374f0ac00ef2728cfd3b16ae8a4ec80ebea0a"], 0x70)
sendfile(r3, r2, 0x0, 0xa198)
open(0x0, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)

22:09:55 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000100), 0x0, 0x1c0}])

22:09:55 executing program 4:

22:09:55 executing program 4:

[  825.844492][ T1730] Dev loop1: unable to read RDB block 1
[  825.872409][   T27] kauditd_printk_skb: 2 callbacks suppressed
[  825.872434][   T27] audit: type=1804 audit(1583791795.822:353): pid=1739 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/521/file0" dev="sda1" ino=17319 res=1
[  825.878410][ T1730]  loop1: unable to read partition table
[  825.921861][ T1741] netlink: 2220 bytes leftover after parsing attributes in process `syz-executor.3'.
[  825.934079][   T27] audit: type=1804 audit(1583791795.842:354): pid=1739 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/521/file0" dev="sda1" ino=17319 res=1
[  825.945036][ T1730] loop1: partition table beyond EOD, truncated
[  825.982566][ T1730] loop_reread_partitions: partition scan of loop1 () failed (rc=-5)
22:09:56 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000803, 0x5f)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0)
r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0)
ftruncate(r2, 0x0)
sendfile(r0, r2, 0x0, 0x80001d00c0d0)

22:09:56 executing program 2:

22:09:56 executing program 4:

22:09:56 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000100), 0x0, 0x1c0}])

22:09:56 executing program 2:

22:09:56 executing program 4:

[  826.361395][ T1753] Dev loop1: unable to read RDB block 1
[  826.373773][ T1753]  loop1: unable to read partition table
[  826.380341][ T1753] loop1: partition table beyond EOD, truncated
[  826.386981][ T1753] loop_reread_partitions: partition scan of loop1 () failed (rc=-5)
22:09:56 executing program 2:

22:09:56 executing program 4:

22:09:56 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000100), 0x0, 0x1c0}])

22:09:56 executing program 3:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r2)
socket$inet(0x10, 0x2, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080025944eeba71a4976e252922c000000002aba000000012e0b3836005404b0e0301a4ce875f2e0ff5f163ee340b7679500800000000000000101013c5891039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffff7f00000000ffefa6f909f7", @ANYRES32=r4, @ANYBLOB="0000000bf1ffffff000000ff"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

22:09:56 executing program 0:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00'], 0x1)
sendfile(r1, r0, 0x0, 0xa198)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="000ffff0802bc8369ce73cb6fda400006224541f3780351157b252dd000000009154262a80420801444dd89f6bfd1510066a2128e6c04f112558c8bdac2ae91c22768a299a879ca5ea45ea6189f14f84644589436f645a783aac81cf5bc374f0ac00ef2728cfd3b16ae8a4ec80ebea0a"], 0x70)
sendfile(r3, r2, 0x0, 0xa198)
open(0x0, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)

22:09:56 executing program 4:

[  826.829535][ T1771] Dev loop1: unable to read RDB block 1
[  826.836797][ T1771]  loop1: unable to read partition table
[  826.844186][ T1771] loop1: partition table beyond EOD, truncated
[  826.854858][ T1771] loop_reread_partitions: partition scan of loop1 () failed (rc=-5)
[  826.927742][ T1778] netlink: 2220 bytes leftover after parsing attributes in process `syz-executor.3'.
[  826.941591][   T27] audit: type=1804 audit(1583791796.892:355): pid=1779 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/522/file0" dev="sda1" ino=17507 res=1
[  827.042463][   T27] audit: type=1804 audit(1583791796.922:356): pid=1779 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/522/file0" dev="sda1" ino=17507 res=1
22:09:57 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000803, 0x5f)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0)
r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0)
ftruncate(r2, 0x200004)
sendfile(0xffffffffffffffff, r2, 0x0, 0x80001d00c0d0)

22:09:57 executing program 2:

22:09:57 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000100)}])

22:09:57 executing program 4:

22:09:57 executing program 4:

22:09:57 executing program 2:

22:09:57 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000100)}])

22:09:57 executing program 4:

22:09:57 executing program 2:

22:09:57 executing program 3:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r2)
socket$inet(0x10, 0x2, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080025944eeba71a4976e252922c000000002aba000000012e0b3836005404b0e0301a4ce875f2e0ff5f163ee340b7679500800000000000000101013c5891039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffff7f00000000ffefa6f909f7", @ANYRES32=r4, @ANYBLOB="0000000bf1ffffff000000ff"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

22:09:57 executing program 0:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00'], 0x1)
sendfile(r1, r0, 0x0, 0xa198)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="000ffff0802bc8369ce73cb6fda400006224541f3780351157b252dd000000009154262a80420801444dd89f6bfd1510066a2128e6c04f112558c8bdac2ae91c22768a299a879ca5ea45ea6189f14f84644589436f645a783aac81cf5bc374f0ac00ef2728cfd3b16ae8a4ec80ebea0a"], 0x70)
sendfile(r3, r2, 0x0, 0xa198)
open(0x0, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)

22:09:57 executing program 4:

[  827.930540][   T27] audit: type=1804 audit(1583791797.882:357): pid=1837 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/523/file0" dev="sda1" ino=17298 res=1
[  827.956129][ T1839] netlink: 2220 bytes leftover after parsing attributes in process `syz-executor.3'.
[  827.957827][   T27] audit: type=1804 audit(1583791797.882:358): pid=1837 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/523/file0" dev="sda1" ino=17298 res=1
22:09:58 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000803, 0x5f)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0)
r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0)
ftruncate(r2, 0x200004)
sendfile(0xffffffffffffffff, r2, 0x0, 0x80001d00c0d0)

22:09:58 executing program 2:

22:09:58 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000100)}])

22:09:58 executing program 4:

22:09:58 executing program 4:

22:09:58 executing program 2:

22:09:58 executing program 1:

22:09:58 executing program 1:

22:09:58 executing program 2:

22:09:58 executing program 3:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r2)
socket$inet(0x10, 0x2, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080025944eeba71a4976e252922c000000002aba000000012e0b3836005404b0e0301a4ce875f2e0ff5f163ee340b7679500800000000000000101013c5891039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffff7f00000000ffefa6f909f7", @ANYRES32=r4, @ANYBLOB="0000000bf1ffffff000000ff"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

22:09:58 executing program 4:

22:09:58 executing program 2:

[  828.849694][ T1874] netlink: 2220 bytes leftover after parsing attributes in process `syz-executor.3'.
22:09:59 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000803, 0x5f)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0)
r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0)
ftruncate(r2, 0x200004)
sendfile(0xffffffffffffffff, r2, 0x0, 0x80001d00c0d0)

22:09:59 executing program 1:

22:09:59 executing program 0:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00'], 0x1)
sendfile(r1, r0, 0x0, 0xa198)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="000ffff0802bc8369ce73cb6fda400006224541f3780351157b252dd000000009154262a80420801444dd89f6bfd1510066a2128e6c04f112558c8bdac2ae91c22768a299a879ca5ea45ea6189f14f84644589436f645a783aac81cf5bc374f0ac00ef2728cfd3b16ae8a4ec80ebea0a7e8c20a5986a2ab75b34dc27b332714d36cba3ac62ec7100c22eb5d6638b8e1d01468ad3328280706dfc31700ea3fe507bfd0f8169b2187e"], 0xa8)
sendfile(r3, r2, 0x0, 0xa198)
open(0x0, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)

22:09:59 executing program 2:

22:09:59 executing program 4:

22:09:59 executing program 4:

22:09:59 executing program 1:

22:09:59 executing program 2:

[  829.223536][   T27] audit: type=1804 audit(1583791799.172:359): pid=1885 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/524/file0" dev="sda1" ino=16705 res=1
22:09:59 executing program 4:

[  829.340724][   T27] audit: type=1804 audit(1583791799.172:360): pid=1885 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/524/file0" dev="sda1" ino=16705 res=1
22:09:59 executing program 3:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r2)
socket$inet(0x10, 0x2, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080025944eeba71a4976e252922c000000002aba000000012e0b3836005404b0e0301a4ce875f2e0ff5f163ee340b7679500800000000000000101013c5891039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffff7f00000000ffefa6f909f7", @ANYRES32=r4, @ANYBLOB="0000000bf1ffffff000000ff7f00"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

22:09:59 executing program 2:

22:09:59 executing program 1:

[  829.761686][ T1903] netlink: 2092 bytes leftover after parsing attributes in process `syz-executor.3'.
22:09:59 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000803, 0x5f)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0)
r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0)
ftruncate(r2, 0x200004)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x80001d00c0d0)

22:09:59 executing program 4:

22:09:59 executing program 1:

22:09:59 executing program 2:

22:09:59 executing program 0:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00'], 0x1)
sendfile(r1, r0, 0x0, 0xa198)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="000ffff0802bc8369ce73cb6fda400006224541f3780351157b252dd000000009154262a80420801444dd89f6bfd1510066a2128e6c04f112558c8bdac2ae91c22768a299a879ca5ea45ea6189f14f84644589436f645a783aac81cf5bc374f0ac00ef2728cfd3b16ae8a4ec80ebea0a7e8c20a5986a2ab75b34dc27b332714d36cba3ac62ec7100c22eb5d6638b8e1d01468ad3328280706dfc31700ea3fe507bfd0f8169b2187e"], 0xa8)
sendfile(r3, r2, 0x0, 0xa198)
open(0x0, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)

22:09:59 executing program 1:

22:10:00 executing program 4:

22:10:00 executing program 2:

[  830.162047][   T27] audit: type=1804 audit(1583791800.112:361): pid=1919 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/525/file0" dev="sda1" ino=16530 res=1
22:10:00 executing program 4:

[  830.262690][   T27] audit: type=1804 audit(1583791800.122:362): pid=1919 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/525/file0" dev="sda1" ino=16530 res=1
22:10:00 executing program 3:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r2)
socket$inet(0x10, 0x2, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080025944eeba71a4976e252922c000000002aba000000012e0b3836005404b0e0301a4ce875f2e0ff5f163ee340b7679500800000000000000101013c5891039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffff7f00000000ffefa6f909f7", @ANYRES32=r4, @ANYBLOB="0000000bf1ffffff000000ff7f00"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

22:10:00 executing program 1:

22:10:00 executing program 2:

[  830.678592][ T1935] netlink: 2092 bytes leftover after parsing attributes in process `syz-executor.3'.
22:10:00 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000803, 0x5f)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0)
r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0)
ftruncate(r2, 0x200004)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x80001d00c0d0)

22:10:00 executing program 4:

22:10:00 executing program 2:

22:10:00 executing program 1:

22:10:00 executing program 0:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00'], 0x1)
sendfile(r1, r0, 0x0, 0xa198)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="000ffff0802bc8369ce73cb6fda400006224541f3780351157b252dd000000009154262a80420801444dd89f6bfd1510066a2128e6c04f112558c8bdac2ae91c22768a299a879ca5ea45ea6189f14f84644589436f645a783aac81cf5bc374f0ac00ef2728cfd3b16ae8a4ec80ebea0a7e8c20a5986a2ab75b34dc27b332714d36cba3ac62ec7100c22eb5d6638b8e1d01468ad3328280706dfc31700ea3fe507bfd0f8169b2187e"], 0xa8)
sendfile(r3, r2, 0x0, 0xa198)
open(0x0, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)

22:10:00 executing program 4:

22:10:00 executing program 2:

22:10:01 executing program 1:

[  831.062290][   T27] audit: type=1804 audit(1583791801.012:363): pid=1948 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/526/file0" dev="sda1" ino=16547 res=1
22:10:01 executing program 4:

[  831.198584][   T27] audit: type=1804 audit(1583791801.042:364): pid=1948 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir598774818/syzkaller.5dVRyn/526/file0" dev="sda1" ino=16547 res=1
[  831.375484][ T1948] ==================================================================
[  831.383597][ T1948] BUG: KCSAN: data-race in __writeback_single_inode / xas_set_mark
[  831.391635][ T1948] 
[  831.394055][ T1948] write to 0xffff8881294858dc of 4 bytes by task 1943 on cpu 1:
[  831.402909][ T1948]  xas_set_mark+0x140/0x150
[  831.407397][ T1948]  __test_set_page_writeback+0x61f/0x7c0
[  831.413513][ T1948]  ext4_bio_write_page+0x159/0xb56
[  831.418904][ T1948]  mpage_submit_page+0xd5/0x190
[  831.423768][ T1948]  mpage_process_page_bufs+0x3df/0x400
[  831.429356][ T1948]  mpage_prepare_extent_to_map+0x43b/0x6e0
[  831.435175][ T1948]  ext4_writepages+0x585/0x1d40
[  831.440026][ T1948]  do_writepages+0x6b/0x170
[  831.444532][ T1948]  __filemap_fdatawrite_range+0x1bb/0x220
[  831.450254][ T1948]  file_write_and_wait_range+0xfb/0x160
[  831.455805][ T1948]  ext4_sync_file+0x26e/0x8b0
[  831.460474][ T1948]  vfs_fsync_range+0x7c/0x150
[  831.465281][ T1948]  ext4_buffered_write_iter+0x211/0x280
[  831.470840][ T1948]  ext4_file_write_iter+0xf4/0xd30
[  831.475960][ T1948]  do_iter_readv_writev+0x4a7/0x5d0
[  831.481402][ T1948]  do_iter_write+0x137/0x3a0
[  831.486909][ T1948]  vfs_iter_write+0x56/0x80
[  831.491433][ T1948]  iter_file_splice_write+0x530/0x830
[  831.496864][ T1948]  direct_splice_actor+0x97/0xb0
[  831.501874][ T1948]  splice_direct_to_actor+0x22f/0x540
[  831.507233][ T1948]  do_splice_direct+0x152/0x1d0
[  831.512186][ T1948]  do_sendfile+0x396/0x810
[  831.516593][ T1948]  __x64_sys_sendfile64+0x121/0x140
[  831.521806][ T1948]  do_syscall_64+0xc7/0x390
[  831.526312][ T1948]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  831.532183][ T1948] 
[  831.534497][ T1948] read to 0xffff8881294858dc of 4 bytes by task 1948 on cpu 0:
[  831.542035][ T1948]  __writeback_single_inode+0x376/0x910
[  831.547712][ T1948]  writeback_single_inode+0x219/0x2f0
[  831.553071][ T1948]  sync_inode_metadata+0x75/0xa0
[  831.558011][ T1948]  ext4_sync_file+0x47a/0x8b0
[  831.562791][ T1948]  vfs_fsync_range+0x7c/0x150
[  831.567520][ T1948]  ext4_buffered_write_iter+0x211/0x280
[  831.573231][ T1948]  ext4_file_write_iter+0xf4/0xd30
[  831.578537][ T1948]  do_iter_readv_writev+0x4a7/0x5d0
[  831.583754][ T1948]  do_iter_write+0x137/0x3a0
[  831.588334][ T1948]  vfs_iter_write+0x56/0x80
[  831.592829][ T1948]  iter_file_splice_write+0x530/0x830
[  831.598290][ T1948]  direct_splice_actor+0x97/0xb0
[  831.603214][ T1948]  splice_direct_to_actor+0x22f/0x540
[  831.608756][ T1948]  do_splice_direct+0x152/0x1d0
[  831.613599][ T1948]  do_sendfile+0x396/0x810
[  831.618045][ T1948]  __x64_sys_sendfile64+0x121/0x140
[  831.623328][ T1948]  do_syscall_64+0xc7/0x390
[  831.627832][ T1948]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  831.635277][ T1948] 
[  831.637587][ T1948] Reported by Kernel Concurrency Sanitizer on:
[  831.643723][ T1948] CPU: 0 PID: 1948 Comm: syz-executor.0 Not tainted 5.6.0-rc1-syzkaller #0
[  831.652284][ T1948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  831.662326][ T1948] ==================================================================
[  831.671603][ T1948] Kernel panic - not syncing: panic_on_warn set ...
[  831.678194][ T1948] CPU: 0 PID: 1948 Comm: syz-executor.0 Not tainted 5.6.0-rc1-syzkaller #0
[  831.686859][ T1948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  831.697066][ T1948] Call Trace:
[  831.700361][ T1948]  dump_stack+0x11d/0x187
[  831.704820][ T1948]  panic+0x210/0x640
[  831.708723][ T1948]  ? vprintk_func+0x89/0x13a
[  831.713427][ T1948]  kcsan_report.cold+0xc/0x14
[  831.718108][ T1948]  kcsan_setup_watchpoint+0x3e3/0x420
[  831.723491][ T1948]  __writeback_single_inode+0x376/0x910
[  831.729034][ T1948]  writeback_single_inode+0x219/0x2f0
[  831.734395][ T1948]  sync_inode_metadata+0x75/0xa0
[  831.739348][ T1948]  ext4_sync_file+0x47a/0x8b0
[  831.744022][ T1948]  ? __read_once_size.constprop.0+0x20/0x20
[  831.750435][ T1948]  vfs_fsync_range+0x7c/0x150
[  831.755631][ T1948]  ext4_buffered_write_iter+0x211/0x280
[  831.761260][ T1948]  ext4_file_write_iter+0xf4/0xd30
[  831.766366][ T1948]  ? common_file_perm+0x1d1/0x490
[  831.771376][ T1948]  ? current_time+0x6d/0xc0
[  831.775876][ T1948]  do_iter_readv_writev+0x4a7/0x5d0
[  831.781080][ T1948]  do_iter_write+0x137/0x3a0
[  831.785652][ T1948]  ? __kmalloc+0x21c/0x640
[  831.790059][ T1948]  vfs_iter_write+0x56/0x80
[  831.794609][ T1948]  iter_file_splice_write+0x530/0x830
[  831.800007][ T1948]  ? page_cache_pipe_buf_release+0xf0/0xf0
[  831.805857][ T1948]  direct_splice_actor+0x97/0xb0
[  831.810884][ T1948]  splice_direct_to_actor+0x22f/0x540
[  831.817173][ T1948]  ? generic_pipe_buf_nosteal+0x20/0x20
[  831.822713][ T1948]  do_splice_direct+0x152/0x1d0
[  831.827556][ T1948]  do_sendfile+0x396/0x810
[  831.831982][ T1948]  __x64_sys_sendfile64+0x121/0x140
[  831.837261][ T1948]  do_syscall_64+0xc7/0x390
[  831.841761][ T1948]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  831.847745][ T1948] RIP: 0033:0x45c4a9
[  831.851797][ T1948] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  831.871597][ T1948] RSP: 002b:00007f1ec6227c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  831.880209][ T1948] RAX: ffffffffffffffda RBX: 00007f1ec62286d4 RCX: 000000000045c4a9
[  831.888417][ T1948] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000006
[  831.896402][ T1948] RBP: 000000000076bfc0 R08: 0000000000000000 R09: 0000000000000000
[  831.904477][ T1948] R10: 000000000000a198 R11: 0000000000000246 R12: 00000000ffffffff
[  831.915657][ T1948] R13: 00000000000008d1 R14: 00000000004cb3b0 R15: 000000000076bfcc
[  831.925929][ T1948] Kernel Offset: disabled
[  831.930363][ T1948] Rebooting in 86400 seconds..