ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="040029bd7000fedbdf250e0000000400050134005a803000000009000100a44780e4b10000001e000100cab716f6f7b068a1d058d2e4bcee16fb454d9a752dd7a5a57d6100000400460008000100029a49322a003500000000000400050112769eb4525757db56f94ec7679ec9a7d920c1b8dc1eb657b0b73491615d7d4784b028424d3957c4f2c09c70b776271eef59ab6f9b704dfb3e24"], 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000480)={0x430, 0x3f3, 0x2, 0x70bd2b, 0x25dfdbfb, {0x0, 0x1, 0x32, [0x5, 0xffff, 0x1f, 0x80, 0x4, 0x7, 0x5, 0xff, 0x2, 0x6, 0x7, 0x7fff, 0x3, 0x2, 0x9, 0xffffffe1, 0x200, 0x4, 0xff, 0xc688, 0x10001, 0xffffffff, 0x80000001, 0x9, 0x554, 0x1, 0x407, 0x4, 0xb69c, 0x2, 0x5d7a, 0xff, 0x0, 0x3e31e303, 0x6, 0x0, 0xffffffff, 0x100, 0x4, 0x3, 0x9, 0x6, 0x6daebcf3, 0xff, 0x9, 0x3, 0x9, 0x0, 0x0, 0x401, 0x800, 0x81, 0x7, 0x40, 0x7fff, 0x2, 0x74, 0x6, 0xfff, 0x7fffffff, 0x737, 0x8001, 0x2, 0xffff], [0x5, 0x2, 0x8, 0x2, 0x7fffffff, 0x6a, 0x9a00, 0x43a5, 0x65bc, 0x0, 0x7ff, 0x8001, 0x9, 0x4, 0xfffffff7, 0x400, 0x9, 0xa8d, 0x9, 0x0, 0x80000000, 0x9, 0xff, 0x2bf9, 0xffff7fff, 0xffff, 0x1ff, 0x3, 0x7fff, 0x40, 0x7, 0x2, 0x0, 0x7, 0x2, 0x4, 0xd4, 0x4b56, 0x81, 0x2, 0x1ff, 0x7, 0x5, 0x9ca, 0x4, 0x0, 0x6, 0x5, 0x5, 0x1ff, 0x4, 0x8, 0x7, 0x6b6, 0x95, 0xd4e, 0xfff, 0x4, 0x2, 0x5, 0x8, 0x1f, 0x7fff, 0x5c6b], [0x2, 0x80000000, 0x2, 0x8001, 0x4, 0x2, 0x80, 0x800, 0x6, 0x5, 0x401, 0x40, 0x0, 0xff, 0x0, 0x20, 0x10000, 0x7, 0x1, 0x0, 0x5, 0x9, 0x2, 0x7fff, 0x400, 0x401, 0x8, 0xffff, 0x81, 0x200, 0x3, 0xe7, 0xfff, 0x7f, 0x7, 0x8000, 0xef08, 0x6, 0x9, 0x1, 0x6, 0xd9, 0x6, 0x3f, 0x5, 0x6, 0x10, 0x537f, 0x0, 0x7, 0xff, 0x1, 0x5e, 0xffff7e40, 0x2, 0x10001, 0x1000, 0xffffffff, 0x8, 0x101, 0x0, 0x37d3, 0x7, 0x3], [0xffffff11, 0x1, 0x2, 0xfff, 0x80000001, 0x4, 0x3, 0x5, 0x0, 0x100, 0x7, 0x40, 0xff, 0x9, 0x1, 0x6, 0xf, 0x8000, 0x18, 0x10, 0x1e27f70b, 0x8, 0x65b, 0x3, 0x3, 0x440d, 0x4, 0x200, 0x7ff, 0x401, 0x2, 0x62, 0x1, 0xfffffffc, 0x8000, 0x800, 0x7fffffff, 0x5, 0x8, 0xfffff000, 0x4, 0x6, 0xaa6, 0x1, 0xff, 0x0, 0x0, 0x2d, 0x2, 0x1, 0x10000, 0x3, 0x1, 0x20, 0x9, 0x832b, 0x6, 0x3, 0x101, 0x401, 0x57a, 0x4, 0x2, 0x401], 0xe, [']\x00', '\xfc\x00', '\x00', '-}!\x00', '^-*\x00', '\x00']}, ["", "", "", "", ""]}, 0x430}, 0x1, 0x0, 0x0, 0x4000080}, 0x815) 03:07:42 executing program 1: syz_io_uring_setup(0x45d8, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), 0x0) 03:07:42 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0xfeffffff}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:07:42 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0xffff8000}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:07:42 executing program 5: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)=0x0) r3 = add_key(&(0x7f0000000000)='logon\x00', &(0x7f0000000280)={'syz', 0x0}, &(0x7f0000000300)="e1f4f5b49f6c7bd169f667a0e9213aa287cd728a6d9c4eada40b52ed05997461383ce5cb4d90a455054c548c1e857ed7828a23f49722e6bb5875e80f96330b0939c73c0729e4f9d4440110752cc26ae5783761d47ed899304e839dadd7909257a916f85c291de13f0e4d95cbf463e1391465093f06daa302434c514dd0ecbc18366ac84a6d7d06c3612e9325bd", 0x8d, 0xfffffffffffffff9) keyctl$KEYCTL_MOVE(0x1e, r3, 0xfffffffffffffff9, 0x0, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x45d8, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x12345, {0x0, r5}}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) 03:07:42 executing program 1: syz_io_uring_setup(0x45d8, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), 0x0) 03:07:42 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0xffffc000}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:07:42 executing program 5: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x40}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x45d8, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x12345, {0x0, r4}}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) 03:07:43 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0xfffffffe}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:07:43 executing program 5: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x45d8, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x12345, {0x0, r4}}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) fcntl$setstatus(r5, 0x4, 0x64000) io_submit(r6, 0x6, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2703000000000009, 0x8003f00, 0x3, 0x1, 0x0, r5, &(0x7f0000000000), 0x3000}]) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r5, 0xc01064bd, &(0x7f0000000280)={&(0x7f0000000000)="603a3e533787c60ce976257850fcbf61038f6bcbb153d1c28f323c9e7a547b8381", 0x21}) 03:07:43 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:07:43 executing program 1: syz_io_uring_setup(0x45d8, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), 0x0) 03:07:43 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:07:43 executing program 5: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x80000002) r0 = syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x45d8, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)) accept4$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000280)=0x10, 0x800) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x12345, {0x0, r4}}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) 03:07:44 executing program 5: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0xffffffff, 0x0, 0x1}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x45d8, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x458040, 0x0) ioctl$HDIO_GETGEO(r4, 0x301, &(0x7f0000000280)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x200, 0x12345, {0x0, r5}}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) 03:07:44 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:07:44 executing program 1: syz_io_uring_setup(0x45d8, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) 03:07:44 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:07:44 executing program 5: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x45d8, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x12345, {0x0, r4}}, 0x80000) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000280)=0x4) 03:07:44 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x5}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:07:44 executing program 1: syz_io_uring_setup(0x45d8, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) 03:07:44 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x6}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:07:45 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x7}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:07:45 executing program 1: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x45d8, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x12345, {0x0, r4}}, 0x80000) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000280)=0x4) 03:07:45 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:07:45 executing program 5: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xde}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r2 = syz_io_uring_setup(0x45d8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8b}, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000040)) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$KVM_GET_FPU(0xffffffffffffffff, 0x81a0ae8c, &(0x7f0000000580)) io_setup(0x83, &(0x7f00000003c0)=0x0) fcntl$setstatus(r4, 0x4, 0x64000) io_submit(r5, 0x6, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2703000000000009, 0x8003f00, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) r6 = open_tree(r4, &(0x7f0000000300)='./bus\x00', 0x8100) signalfd(r2, &(0x7f0000000340)={[0x7db]}, 0x8) io_setup(0x83, &(0x7f00000003c0)=0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x64000) io_submit(r7, 0x6, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2703000000000009, 0x8003f00, 0x3, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x3000}]) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000400)='./bus\x00', 0x40, 0x0, 0x12345, {0x0, r8}}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) ioctl$KDDISABIO(r6, 0x4b37) 03:07:45 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x9}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:07:46 executing program 1: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x45d8, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x12345, {0x0, r4}}, 0x80000) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000280)=0x4) 03:07:46 executing program 5: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xfd30) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r2, 0x800443d3, &(0x7f0000000000)={@any, 0x8, 0x4, 0x3}) syz_io_uring_setup(0x45d8, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) 03:07:46 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xa}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:07:46 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xb}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:07:46 executing program 5: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x45d8, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x12345, {0x0, r4}}, 0x0) io_uring_enter(r0, 0x80450e, 0x0, 0x0, 0x0, 0x0) 03:07:46 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xc}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:07:46 executing program 1: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x45d8, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x12345, {0x0, r4}}, 0x80000) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000280)=0x4) 03:07:46 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xd}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:07:47 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xe}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:07:47 executing program 1: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x45d8, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x12345, {0x0, r4}}, 0x80000) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) 03:07:47 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x10}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:07:47 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x11}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:07:48 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x12}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:07:48 executing program 1: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x45d8, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x12345, {0x0, r4}}, 0x80000) 03:07:48 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x25}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:07:48 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x42}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:07:48 executing program 1: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x45d8, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 03:07:48 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x60}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:07:49 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x300}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:07:49 executing program 5: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x45d8, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x80000000}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00006d2000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)) r4 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000040)=ANY=[], 0xfd30) getsockopt$IP6T_SO_GET_INFO(r4, 0x29, 0x40, &(0x7f0000000300)={'raw\x00'}, &(0x7f0000000000)=0x54) r5 = msgget$private(0x0, 0x0) msgsnd(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="e5"], 0x2000, 0x0) msgctl$IPC_RMID(r5, 0x0) msgctl$MSG_STAT(r5, 0xb, &(0x7f0000000480)=""/203) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x12345, {0x0, r6}}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) 03:07:49 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x360}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:07:50 executing program 5: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000040)=ANY=[], 0xfd30) syz_io_uring_setup(0x45c8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x12345, {0x0, r5}}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) 03:07:50 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x500}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:07:50 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x600}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:07:50 executing program 5: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x45d8, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000000)={0x8, 'batadv_slave_1\x00', {'bond_slave_0\x00'}, 0x2}) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x12345, {0x0, r4}}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) 03:07:50 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x700}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:07:51 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x900}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:07:51 executing program 5: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x45d8, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000300), 0x8) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x10080, 0x0) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x40200, 0x0) sendto$inet6(r5, &(0x7f0000000480)="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", 0x1000, 0x20000000, &(0x7f0000000400)={0xa, 0x4e21, 0x4, @ipv4={[], [], @loopback}, 0x101}, 0x1c) ioctl$SOUND_MIXER_READ_RECMASK(r4, 0x80044dfd, &(0x7f0000000280)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x12345, {0x0, r6}}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) getsockname$l2tp6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000380)=0x20) 03:07:51 executing program 1: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x45d8, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 03:07:51 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xa00}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:07:51 executing program 5: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x45db, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) 03:07:51 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xb00}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:07:52 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xc00}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:07:52 executing program 5: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$KVM_KVMCLOCK_CTRL(0xffffffffffffffff, 0xaead) r0 = syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_io_uring_setup(0x45d8, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)) r5 = fcntl$dupfd(r3, 0x406, r3) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000300)={&(0x7f0000000000)=[0x0], 0x1}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x12345, {0x0, r6}}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) r7 = openat$mice(0xffffffffffffff9c, &(0x7f0000000400)='/dev/input/mice\x00', 0x111000) setsockopt$inet6_udp_int(r7, 0x11, 0x65, &(0x7f0000001580)=0x2, 0x4) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/qrtr-tun\x00', 0x208500) 03:07:52 executing program 1: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x45d8, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000000040)) 03:07:52 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xd00}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:07:52 executing program 5: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) fcntl$setstatus(r3, 0x4, 0x64000) io_submit(r4, 0x6, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2703000000000009, 0x8003f00, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x40) ptrace$setregs(0xd, 0x0, 0x10000007fffffff, &(0x7f0000000280)="c7e2227d49063c32d7eaff8306016cea08c5193456e2bbea30fc7682465bd3ec3b6562999e8b01b76f54850aee") ptrace$cont(0x9, r5, 0x0, 0x0) mq_notify(r3, &(0x7f0000000000)={0x0, 0x2f, 0x4, @tid=r5}) shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) syz_io_uring_setup(0x45d8, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000300)={0x81, 0x0, [0x4, 0xfffffffffffffff9, 0x7fff, 0x3]}) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x12345, {0x0, r7}}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) 03:07:52 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xe00}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:07:52 executing program 1: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) syz_io_uring_setup(0x45d8, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000000040)) 03:07:52 executing program 5: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000300)=0x4a, 0x4) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000000)={'ipvlan0\x00'}) r0 = syz_io_uring_setup(0xc88, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x45d8, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)='./bus\x00', 0x10e, 0x0, 0x12345, {0x0, r4}}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000280)={0x1f, 0x2, @any, 0x2, 0x1}, 0xe) r5 = openat(0xffffffffffffffff, &(0x7f0000001580)='./bus\x00', 0x2000, 0x14) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000015c0)={&(0x7f0000000340)="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", &(0x7f0000000480)=""/4096, &(0x7f0000001480)="cc2a1a5f719267f55a740ef2d126d18d9e259df4f289fc7558ea2499a4f321faccafc3e96e5e4cb04cb49875c992495f209f30", &(0x7f00000014c0)="82285694ba18562f5f499ad157aadbde7a7c2196eb9cd08ede74b713b78281f6325124a011e304b684ca21d08a6d1ebac60743fb6dceb58a6cf128b98675be9b92998a40916243d09e5a1d817fdaa37160bfd313b891afbc80996c4f9e6638047334c41e64f678ec0c237e1fc3163ef4a296f1ac1d012110956fb40e04757ff60a8f2df577e49760d6d6540743660d9a2f4f1d6e1524274070271a3e3c1d691e0e56a70f2b26e9fddd34668a7d70752594ca39914f1f80cc9179", 0x80000001, r5}, 0x38) 03:07:52 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1100}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:07:53 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1200}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:07:53 executing program 5: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x10, 0x0, 0x4}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x45d8, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x12345, {0x0, r4}}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) 03:07:53 executing program 1: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0x45d8, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000000040)) 03:07:53 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2500}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:07:53 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x3f00}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:07:53 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x4000}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:07:53 executing program 1: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_io_uring_setup(0x45d8, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000000040)) 03:07:54 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x4200}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:07:54 executing program 1: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_io_uring_setup(0x45d8, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000000040)) 03:07:54 executing program 1: syz_io_uring_setup(0x45d8, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000000040)) 03:07:54 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x6000}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:07:54 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x6003}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:07:54 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000000040)) 03:07:55 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x25000}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:07:55 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000000040)) 03:07:55 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x40000}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:07:55 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x80000}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:07:55 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000000040)) 03:07:55 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x400000}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:07:56 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x500200}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:07:56 executing program 1: syz_io_uring_setup(0x45d8, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000000040)) 03:07:56 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x506d20}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:07:56 executing program 1: syz_io_uring_setup(0x45d8, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000000040)) 03:07:57 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x600000}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:07:57 executing program 1: syz_io_uring_setup(0x45d8, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000000040)) 03:07:57 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x80ffff}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:07:57 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xc0ffff}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:07:57 executing program 1: syz_io_uring_setup(0x45d8, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f0000000040)) 03:07:58 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1000000}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:07:58 executing program 1: syz_io_uring_setup(0x45d8, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f0000000040)) 03:07:58 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2000000}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:07:58 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x3000000}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:07:58 executing program 1: syz_io_uring_setup(0x45d8, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f0000000040)) 03:07:59 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x4000000}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:07:59 executing program 1: syz_io_uring_setup(0x45d8, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), 0x0) 03:07:59 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x5000000}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:07:59 executing program 1: syz_io_uring_setup(0x45d8, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), 0x0) 03:07:59 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x6000000}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:08:00 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x7000000}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:08:00 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8000000}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:08:00 executing program 1: syz_io_uring_setup(0x45d8, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), 0x0) 03:08:00 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x9000000}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:08:00 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xa000000}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:08:00 executing program 1: syz_io_uring_setup(0x45d8, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000000040)) 03:08:01 executing program 5: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000300)={{0x5c, @multicast2, 0x4e22, 0x4, 'rr\x00', 0xb, 0xab7, 0x51}, {@loopback, 0x4e23, 0x2, 0x3, 0xdaa, 0x8000}}, 0x44) exit_group(0x0) r0 = syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x45d8, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x12345, {0x0, r4}}, 0x0) r5 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) prctl$PR_GET_NO_NEW_PRIVS(0x27) fcntl$setstatus(r5, 0x4, 0x64000) io_submit(r6, 0x6, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2703000000000009, 0x8003f00, 0x3, 0x1, 0x0, r5, &(0x7f0000000000), 0x3000}]) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000006b9c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000006bbc0)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}], 0xbe, "cbab7ffcace4a6"}) ioctl$BTRFS_IOC_INO_LOOKUP(r5, 0xd0009412, &(0x7f0000000480)={r7, 0x5}) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f0000000000)=0x1, 0x4) 03:08:01 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xb000000}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:08:01 executing program 1: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_io_uring_setup(0x45d8, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000000040)) 03:08:01 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xc000000}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:08:01 executing program 5: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)=0x0) syz_mount_image$nfs4(&(0x7f0000000000)='nfs4\x00', &(0x7f0000000280)='./bus\x00', 0xffffffffffffffe0, 0x3, &(0x7f00000003c0)=[{&(0x7f0000000300)="f66ef615c671a88f0cb49953c106eebb7ab2c5bc056eb7e1693234876c24c9b8facf67e64627929f9f98e679b4064ccc416e87168b4813dcb7803160b53b20c67f46ce251470d5b94aad6428906ba540102ad40191ab54e4d3f19c51521111d8a1eb280a97f0bb10372c8a859941ed5d8079b08c65d0b293a0b32d26913123e51ef7100d85ec0cb50d37ead1d86a7375bdd6094c599e5363f2e67a1b40", 0x9d}, {&(0x7f0000000480)="474da1bfc7c9c2e9b884953d4445abb5db09f8eb22518c218fe2b77010da5657ea57bc2ba495005646a0262923cf69fe2149eeac939348d39635cae63aca657986c848728cd7158b9de4e536cd468469474a7fed4cad8fe59c91771dd1fc3c275287b6b0e42e625577f90da08b12accc74f4d39486cbb2ac1c4572bb502a1ed8cabd388bdad9b9d3cbd3eb83cb026c", 0x8f, 0x7fff}, {&(0x7f0000000540)="db36520c21c10cceb52211d4994a7f43fd3905d8f0ae761a2243c72b14aca305e065a0913cde568c6bd931717b03980c66046a4c75b49e3f733d606cb6e2335cfc75da24ba7937c8a0821079a64f06e21d26e50d834be84cb2231d250bc96a527c0c504be40e441b941790c8b91933cb370f759f3fd484729e06e89194c272a7d7c00f823f42192fd063768e5c47fd124fb7b7038e235e37", 0x98, 0x100000001}], 0x4020, &(0x7f0000000600)={[{}, {}, {'#]%'}], [{@fsmagic={'fsmagic', 0x3d, 0x9}}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@fsname={'fsname'}}, {@seclabel='seclabel'}, {@dont_hash='dont_hash'}]}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x45d8, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x12345, {0x0, r4}}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) 03:08:01 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xd000000}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:08:01 executing program 1: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_io_uring_setup(0x45d8, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000000040)) 03:08:02 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xe000000}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:08:02 executing program 5: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000280)={0x3, &(0x7f0000000000)=[{@fixed}, {@fixed}, {@fixed}]}) r0 = syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x45d8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xf5}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x12345, {0x0, r4}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002940)={&(0x7f0000000300)=@caif, 0x80, &(0x7f0000000580)=[{&(0x7f0000000380)="287291a0af18daf005023345e3002de75ff526e1f3a8fbeeb61f1eaa2ef8617ed6b392c15b18664d414c0e6dd50b65f8e82861c561d3d233bcdb31df13d647e56be87f293de4613b45c14ba4580341d95c8b27a89c6db33397bbbe06fdd0824e9b3510938d36244d76b9990067082d1a0b2a44a3d8fb9eaad6c53f83d53372172e045f055839bf0fa512ccc27116a3b4ed7920f86eaec81114106bedc054069ea580c069eb", 0xa5}, {&(0x7f0000000480)="e5f5afd56caec846de046db3f231dc51a6b0e7ca0709da03b4c2da5dabd61c13dab9c430d5d8b49a2d1eae4c5139343600b52d4987f50f1922794963d2961a5ac26e8ff7e9a875619ba22e675158b3357604ec3c83568792b8234d7da82ed2570b431863724bd1fd350d0e2217cdead72d2c55bbfc94e45b4ab46c20ee94330d9a8394137dc27e2c3082d0d7341668906c1916cba560e63fb2bbf435b1e59fd49fbdd248607b4a981f04c3b67b490623471377", 0xb3}, {&(0x7f0000000540)="9c8b59a08861ad745d61a9b2dd02ce29e52ff1a11576341e7202a402247231d88430b21891490e257052491638", 0x2d}], 0x3, &(0x7f00000005c0)=[{0x50, 0x10d, 0x7, "476eb24ed3eabdf3bbd09647dd7b3213fa60c38e0be660cf08f8fcccba3658c5f80189c6663567e179a93c7c299170b0d5184fedb2999e9c76"}, {0x1010, 0x1, 0x6, "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"}, {0x110, 0x10e, 0xc0cf, "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"}, {0x70, 0x101, 0x269, "16a85a89bec7d0bd562f7abb780bb1203ebcca197ce9a532de3032c0ce1aee21df4bdffc5c6c6788ec50f1cf021661008f92ff5b1701039087270aaec6ad6f22487c5cc5b1efec6182b529138cd757486cfb293b142b56122bd9e7"}, {0xb0, 0x118, 0x1f, "7e3e14c5e7a2b5334e6be2fb7004352d7f6c8ffacde8f20cb687a98d95abec579623b3375ac7941707342d498f9d29158b4073b1a9d52dfc2c99d6ec91026a1288b3f3d9be5424cfeadbb394c162a7311ff82d8b114a0ccf4438c783b585a6c5c38c647afb5a918165df1354322433bdb776756f2e08e70c62eeb6d708a04158a3b506b677ac1b7ee39c0852894f82a3d5471ea82d99f55271fe"}, {0x50, 0x10c, 0x5, "ce11fcd89d6e6c260e38f0472ee31f600f885448741dee75d496c1ed11eb363a7a3ef3d30b2df9ab5392c0676eed25ddd0bde3df6e9b5d55bcf083"}, {0x1010, 0x107, 0x7f, "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"}, {0x58, 0x111, 0x9, "ae4eb0bd5fafb7059cdf2530435261d572f58f2740812e63a421440c1bcddcd8e083e6a9b40687043f0f8018e905b47fa2488d5f2fcdf8d8dc8e8a3eb07d948aeb264dea75ce67"}], 0x2348}, 0x804) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) 03:08:02 executing program 1: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_io_uring_setup(0x45d8, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000000040)) 03:08:02 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x10000000}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:08:02 executing program 1: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0x45d8, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000000040)) 03:08:02 executing program 5: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0xd8a, &(0x7f0000000300)={0x0, 0xc695, 0x20}, &(0x7f00006d4000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x45d8, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x12345, {0x0, r4}}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) 03:08:02 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x11000000}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:08:02 executing program 1: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0x45d8, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000000040)) 03:08:02 executing program 5: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x45d8, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x12345, {0x0, r4}}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) fcntl$setstatus(r5, 0x4, 0x64000) io_submit(r6, 0x6, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2703000000000009, 0x8003f00, 0x3, 0x1, 0x0, r5, &(0x7f0000000000), 0x3000}]) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x0, @dev}], 0x10) fsmount(0xffffffffffffffff, 0x1, 0xe) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000000)=ANY=[], &(0x7f00000000c0)=0x8) sendto$inet6(r7, &(0x7f00000002c0)="b5", 0x1, 0x0, &(0x7f0000000300)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x23, &(0x7f0000000180)={r9}, 0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000000300)={r9, @in={{0x2, 0x4e21, @remote}}}, &(0x7f0000000240)=0x84) 03:08:03 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x12000000}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:08:03 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x206d5000}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:08:03 executing program 1: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x10, 0x0, 0x4}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x45d8, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x12345, {0x0, r4}}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) 03:08:03 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x25000000}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:08:03 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x3f000000}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:08:03 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x40000000}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:08:03 executing program 5: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) getpeername$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000000000)=0x6e) syz_io_uring_setup(0x45d8, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x101000, 0x0) prctl$PR_SET_TSC(0x1a, 0x0) r6 = dup2(r0, r0) sendmsg$DEVLINK_CMD_PORT_GET(r6, &(0x7f0000002a00)={&(0x7f0000002900)={0x10, 0x0, 0x0, 0x42082180}, 0xc, &(0x7f00000029c0)={&(0x7f0000002940)={0x64, 0x0, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x8081}, 0x4024840) recvmsg$can_j1939(r5, &(0x7f00000028c0)={&(0x7f0000002780)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000002840)=[{&(0x7f0000002800)=""/1, 0x1}], 0x1, &(0x7f0000002880)=""/23, 0x17}, 0x10000) mmap$xdp(&(0x7f00006d3000/0x8000)=nil, 0x8000, 0xc, 0x810, r7, 0x100000000) sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000480)={0x22fc, 0x12, 0x4, 0x70bd25, 0x25dfdbff, {0x15, 0x81, 0x81, 0x6, {0x4e24, 0x5, [0x3, 0x9bd0, 0x401, 0x80000001], [0x5, 0x3, 0x7ff, 0x200], 0x0, [0x8, 0x3ff]}, 0x80, 0xfe5}, [@INET_DIAG_REQ_BYTECODE={0x91, 0x1, "5457c8b52186e8b557a36893af98d9afa6817060c9ca1d3c7803f64ac37cf487f5cf7fc3e5918879f80ce741e81ca0ddd9a65bba1bd638397017a0a1629550562314e75431f200c796469cbf948aa6090fa2fba713be16812fb88f322626f6273645b24ea0db9c84a7ff75837f7306d692e570be4a84c58cb5a1fc76abc9bd602396355d0aae17cb5c49d99ed6"}, @INET_DIAG_REQ_BYTECODE={0xb7, 0x1, "1aac103cf8b6e80843ece1757c25c9409b15e85a435a476977015e660e52389beb16803fbe295b53ef8781632b88d0959b8a72acf0d68f5f432373e35c7124a1d82bf48e6dc5deade5adf60c55a5312b25b17e9ded2e8226d138fe9337fe84edcbd37e3b703c082572b11574a7d43cf0c80bf4d5781d017fca1902150367ca2d12ee5968b193b575e839d5c621cb95783728427608da3e3e3a13e2cf15746beb7ce7ca5e7428ca1f5f4b13b74181e8590aa9fa"}, @INET_DIAG_REQ_BYTECODE={0x66, 0x1, "f69b76fe46b2985448e63b076c26f99555f20f2de67d2b755b109b64b07101ce6af67cfe94aca9a81264620ffae4616f758dec900c212b2e73ce2416adea737a1d1a3a263186ed43fa16e592e9556f835b93e043bbadf6de450fbfa2f6bfbe9ae3c5"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "800bd80831730f4d5cda9a54d9691fdb2df4247a97c4c2aa1f66e9d90144265c9b8950aabeaa5dc4ce0c7c57d416ebcd61af50be96a1545ac6a079ce35bf4f0c280009a889aec66e829e3cedccd2a01f8b6a8530926f428426c7104043a9446eea83f385d39b372e3c47496b9d7256e2b052cf91f63576217c27ab85c63263f9ab9cab54fbe60f49af34cd841fec9b9900e19826de50f4a11753aafca182eb19f899d9ded7c3551784cc29ca550f68b9da309b93abd5baa92d2ea2b6ae57def440784c1468a7bbc54b5e7e72cd136f8e399bdd5a1be126498c166bc53767dc4705ab07952e4e8cd50f6e715e3b19db1e35fade7cd98515030e029df0e6b754099c5c91ef5b86f2e4c0d9ec91db549528ca1d907f07a6f68ec162b12d3a4a286960f381d91c933b6d73dcc60c6f37a2300ab255acf3984934d85b447c09873198dd9da807a79fe5403b3c1d9f97765b65f4834464eff226c8cce9ac8f2568bdb7a0cb29ae8be55fca068af29910d944cfe19773ca1533de5ba11fa3ba903f4a81d63ebf946fa31a2318887c51b7f1571477498adad621b84747426ccb080cb86e173c52d52e03c2a6b68bfa7e38924af60dce12f7df568d6f1a99d090958221561343e22e4920bef37ef4506d4b268e0637b6812752a7e1cfa81a74f2ddb9905759981005253b41715d4358ecae907185428d93224212b18271866cb711d36d230471024ba2d21a6bf61d2f846e112db01937c142605d545cdb3dd7803d84fca78c2c2c8a6469166c1caef3bd4f65789c3785092ec48f0d5987ae02f7925d7a9c47ef453e02631ba4c7b99fff2aff6576a89d409ec66539c80596d2bfe61f65dc71cc8c75d8ff4083a2673d86f94443ebabc446c0734d907e30ef63f4dd3735df593241327472f8ad671d7678d07b0dab3127fd5636c3fee1c49157b21107fd7f1581f114899d8f3ae6842f389da82c43d89c6ce4447188e96dc7cc3e287c0135790154e6921784c9b763056e02ec65d2a9e3d4d964c0413a1a2a7a179faf203aa3e30b7c0e62f19004759e94df78529138f1beee5519dc58c4073ff96f99aa6a1f1c6b6be59829354f9a50c2c7798d4854a005ad215c7b489a98d3dddb4c066d28664b29e91c23a0bb59afa594ad1336436a86486b8ab2a38387732a252bad7e473f1a387d50651dc7f90d3d116d7bb097266b1ec417662aa765a985b67f0802d3398c9c25b84afaa2f228ad137b482ff9014b931ccf8d02e6549478d021ada4de2c9d6253aebb035af7fbd32b80683f92aedf35cabda6d008ab9a7fff0113ea49d92fa4f51c043a1de231ef286d6cf20259e6e106af655c24921354a05b60cc0e024bf7caa33c8e746060dd176c4be2cceccb6919717226e95b1d95ae4d6d3c116978447c7ee35ac3977c3209f6c398832dbde29ec7aa38d37040a7a097e76acd8bc6edf218c092e3bf86788cb990b83931134ac1730743cf202be645e8d0a18b36cf4ecde04ffa3deb051f0469533e24aa8e9ed1cbeccbbb304b8c5e24046cce536fac83adfb0fe6db7422bb96b0f00bdb615d4a2ed3d6a334b01f117e9080219a720ef1df835c47d6e91797e32f2239947bedfa7a1525377a7266321023d45b268bb0fc323ca9b0d912e3de49bde529e85b62f1610843b25dee8e30a51db02fd7ece198e6626e8aa7aac57f6578bc888a77f50a2ee50ad0f0a1170e8e49ddbf8ecfbfe0473208c361190c99e4470b9054c2be455a226c7ed8543e144c4ca4140e1f40db111ed9445fd3ee10bbf99e640fbfaf077b60a8eb1a498d390776d9197542467f2d0290bd02a8de4fccdac007396f0b5f7a022d59b0fdaef48dee0ab98d17a562463dbfa7d48e2dd2aabb7985600f330e0f1a6a25b702a5ce25a4f62130269d00c25cf0405ac42a05b1b53d5d8c42c5c66005c01726d5e3bb6501cf0c774647f573642271f4f677999fc7e5212647946a6c271df41bb3c4649e51588985be650a1d1ad17ee72007144546663ee26ef73aafd5bf312304370f8bc805254420d9b2577ecf3cc09bfffbac55b4d79bf6b0f9ff1009d4342d614588674bf514279dae542987fcf99db59257bd42de0b22ec8e6d49185c58d9ea2e478826382eb7156d015e7d6479ab7fbe7d8cde53f443e9fe82e22785dedfd3f024a6427893b3b4cb0cb57d8b1c0a72faa5f97932005648f6e48a2623d157493ab098e9c252313aaf9b09768eba8d151a4070baf684f63016d46c261ac5693d7a3fe7cce2fda48cb2f269de01a1ea0b9b92bd2724df12c464abfb2f60810164c2ec1b82c8247a34de86f2e97f9d9f629c4c1d3a011fc208bafdb733429cda3c606a41521bf0751574ba676508fa3ab82eb7dc750217238f30f6e9d501ca747e2c19b115baae8ff2a435bfbc9ba545bfcec07bd4e086a16b07852d2204eddfac7e8c2c774e49a9e78f7c5b57e0be4bc54475aaa1df71022117c47a61026f5fcfc5b62b19686abb1f1ecb17f9f16f3cb733eb2db20f9490a977754411da5207dc25db2dbcb63fd5dccf61f16ccf30a45f3968e02ecdf089bee3b016866d2c3318004382b90802bf379028ec4d883cdef12d81bb283e84117794d108874ee2f8a26267e585c816c5d24235adb086edb37af873de4bdba2acac07129b55f94a2e2312126bd79d662591f2663bb832095f51319cac23bc382fd9afe0b44c997c4b93ef8a56d7c718c5244ff7bc5f07d1c9ace71be4c6b22b2384248f248c1d0b9f09ddd2aefda529b524528de62a2fc5f57a30e1560fa1fc735553aaf5d6e371880125cf90884b27ce96de6ca89f16fb65794c45714d9e96dd1454b79a50729482b06395cd33269dd60c3f3195f948227673140b1d6afcd762f5cff48b481df6a74b43fcf052f6306d4300f54581d1755203887a900457adf0cfdbdf6bc6a0fd91e9e7a0b4d643f48d37120c38127f0be1c670bd8661c42bee4ea4d94049a662260c38b6a8f457f59a7f78f34f6c01fa62b71fee4538790cffc355245c338f66c0a39e9fb656de8f5678b8bd90267203bc29c80c8b9ed7f4af1b767c8d5e8a8a539a01c9866e75ee72df75b9564206269266d360454d5cbe49dcf8bb1ed624700e44eccee8c7c357b7d5778e6d252e07163b9b9afad2ddb7ee19cf4dbc47ab302ab7664c641f331b3152db4593757382d3254e420991a80e308893969feb3bf037c5e38d988d3e13ab52cebc1ca24bad4cb1673f0bd04b4a2d0703280697c3bda1a28cc621d7198bca072b8eb126ed63b5750bbfd0d1d9979b75c92e174a6eb122d190b5f1df4d01947f4c37374b84ecc2d65e914294484516a4fc8d6d3b82dfdba67c9bd7efcc804a0d19bcd232b9e2195af86568b788e79e11f5bc042abf09d787924cabfc774fe8ce2447912c6333c5f90c7fcd8346674d3928ce43fe53a61cbd6d4bc594a1972b3f4463ca159b687b801bbdf2c5f3876507b17d40a524ffc9f4cdb8e50e6321908c11a66ca4c4d7eb07b8cb19c3697003bfe813e367705c2a294e077297390249e1800b06ef510b825b54136f215763f5e0328f922cf2bf16c3b0a419d1aa6d327f8050f5a7bd059d1ee1c7534bb86198d0e1f24939adebb72a83163db1fa016f7f94ea52365db937d184e3d5c2d48ce11db1216595987664da459b471bf9a72e7ae172cd2e46d32a6e1702038f752b15e937e788a9df079d256c2cc569321e5255d59286b65df852f0b29a06d4c62e751a02a405ef28612d5d56e9b75ee7f52b9e073b3dd69f120d5f02235003aa681fc4ae8f0d3229f41dac9ac0561178d49f604561e1c309346c8c7bf3ad8abf8fe5d01985ad7077c174b437c3b149ba8d06defa00ea42a087b6e8e313f15f1a62e4e6b06edafc0a857b89a66e22f853bfe8bb7c783a566a2d86f335d9a6498be91ec05e0d699079a4a58325db82e510c9436a9989d199538425ea23f5f1758ff4492b3b9e271918cc4989edc98e17a270370f5f4f187741c42653c57ee91a69e81b3fcd5131fe6787709e1ee90209de05debc634496d9186c9bb21d4f2cef2a2a30c210805d081f7d990dfbaf8f41a3217ee4a5548ad4572cb8056577fc11b45f26557edc294973fe9bdfb6d3711f5f9135a1a9b4cbf253ded6381c26bb90f6826af4cc1f85ac87c2e49d15f4029e043ee86cfce5da921febcb7b3edd549e578e789cedb39c63a2e5dbe92852e2790a099dff8cebb76753911c6d199f7b3931599efb9aff2aaa4b770e49348e1068ae0331092d419a3d2fcf7f870974f26960a0f91189c0768dfc86eaf33ffa6e47e1b6296323282304f9f425c14017a0756c75d1f4e8da2ff6981d78f2a30903549720805bd2a843ebf103d30254068df787a52f202343b689d46bed745a3715221db2c99b4ad3408209e9e3c5b18d0b596cd4e6114cf57189982f2f4b573720d75c5ca9b01205281b0ebc9c7ad54ffb48a33bf160d7ee8e38bf0e563c1ba329f61223dfbb3fd1138602aad020c28c9646ac40afe7c20e4a6469b8b91cd46342b43824fc4b669a4dcb7fb231fba0188478ca1a281f53848fba99bc1037a7034686bda9e34e2e7369fa5cf5d58e832e26a9a87f249fa491dbe0c880ee7256d1fe622f5cf8a536d8d6cabc59d7106c8591bad1cec7e0993b74c3324d7c1a4860856a3dff003e726b8480c2691265e6ec842dd7c68642e8d1999ac66ea85c85f2615a037253cbf5d21dcf7d4f055c0594681db77c0630c9aca44d716c8d7a7076ffe0b76f60ac985d9921b75a5f234e0081a10c3c7327a9b464b927af6c08a034721b23af3e809a1e8fc50dbd19534148adafcba688e54f391f40e75845894464669db9db4b50b0f065cffce6621bba04be92df2d62ac0c71cf7a0e7349ee09c495754b8bfd122b59e762d0056bd66b01536cde68e60dccc4a26c4918c02dab305a279948fecd73dd59e6e651c176afa415fae5e3ff622b57bcdcf8f8d48c62f54e863bde20cd5470842ebf9fb90b991162f5e59a50c5c5bb845e8da1f6ec056e2496f8b93ac4c574cd93aefdc8baf79cfedcf8b59bedf20fce27659d533ab8c9668e3774c6132ea038ec2be2dbc2fb002c92b4a26deecb1f7d69478c983aea15fd1721e985347263ead41df0f497ee62e05f81b080ea6d0feb95a7a24d9e1ebd486258359f9750ccb95eae4c70ad2040aade91f4a4275bc91428e286afbc5d449d44cf4b015b8d92251043bb5a9a90d25ced43e9fb6f936679393bea5bbc53d027dc45a8c9ad804df4d963f139fb7b141e0249329d4a089de28091ff51c20d8bd8b0c98818f912f4dfb028e693967ca678fd638ba9d6bb021518f53d8ddc19d89b271ec59f3f333edebf87c9189618f93bfbc7eac5e3db9ed4eee678bb8d6fdcc69a19e2e6b75f12870410be9c970489e6eeb020d88d49542e664fbf3570be3d22bb86dc04ca605b092a1c3b2cd769df730f0e5b146aa50981006d1a553294fa625befac48a3c7a1ea3ac21e9d05bf7ccfcee6e9c91e70e7261c21990a3cf773cd1d5e81eff355f290adffb907348ba2ea1f29df778868ea677fcc57a8f69f819bae51e4c099fa78999277e7e2b550c66255c0d57cca0831e0967dd035ca118fb3135da39694cc2c8830939a0daabdd4713318b8d07361e5071b89d0fad92fee2f42b188b237689763f03dab53920aba3aa456526d68333234c7086e70d8fae34432d9afdb59c621d111fe575947e1d76a7a558071acb003b9ec33d0b7225bae6f8787c5fcf13dc300a4f3514e278fc248a50200efb27b017fd11cd1ec48c75fb080"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0xf1, 0x1, "85a4b2ab96fb02f7d3bbd050f31339fa59c0f5ae4f8069de7ec8012581f403ef137e94493ff23512c2bfbba625025af994258f46c93503c2397ceff7b0ff8150bd030961d677ce7245f225494bbdca328a46fa4dd57e10e8f4d9ab5e7b1d204ed5ec97daf94328933572a07ef0b51ab6054cca411809a4d8f180867a07e09b6cf1b818cb6ef2e95231f9db81c4a265c6f2d580057cf161a858025fbcc77c4025c91eab22d75798e7632a52fbf887a5be7973c46260307b8e7887e7a6a0f991eef919d22931f45b780ac57b53b1873e0187077ce47473ac05c370201e6227950574a73e0073cc0fe472c7ef0b77"}]}, 0x22fc}, 0x1, 0x0, 0x0, 0x4004085}, 0x4004) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002b40)=ANY=[@ANYBLOB="28000000cab37cbc83d9ab988a1cfa79dd3738f286e6d2511b46e09b28", @ANYRES16=r9, @ANYBLOB="01000000000000000000010000000000000002410000000800133a000000"], 0x28}}, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000002b00)={&(0x7f0000002a40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002ac0)={&(0x7f0000002a80)={0x24, r9, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x1}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x880}, 0x40000) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x12345, {0x0, r4}}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x3, 0x0, 0x0) 03:08:04 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x42000000}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:08:04 executing program 1: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) syz_io_uring_setup(0x45d8, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000000040)) 03:08:04 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x60030000}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:08:04 executing program 5: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f0000ffc000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x45d8, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000580)={0x2, 0x2, 0x3, {0x1, @pix_mp={0x1, 0x8, 0x56544943, 0x3, 0xb, [{0x45}, {0x49, 0xfff}, {0x10000, 0x6}, {0xdf7, 0x40}, {0x8}, {0x4, 0x438}, {0xfff, 0x1}, {0xdcb7, 0x2}], 0x8, 0x8, 0x7, 0x2}}, 0x3714}) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000280)={0x0, 0x7}, 0x8) r5 = syz_io_uring_setup(0x87, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) socket$nl_generic(0x10, 0x3, 0x10) r8 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x0, &(0x7f00000003c0)=0x0) fcntl$setstatus(r8, 0x4, 0x64000) io_submit(r9, 0x6, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2703000000000009, 0x8003f00, 0x3, 0x1, 0x0, r8, &(0x7f0000000000), 0x3000}]) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, r8, 0x0, &(0x7f0000000300)="0a8b2ecaa5a37dcf8c74f7f654e0be0f69", 0x11, 0x2100, 0x1, {0x0, r10}}, 0x0) syz_io_uring_complete(r6) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x12345, {0x0, r11}}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) 03:08:04 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xfeffffff}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:08:04 executing program 5: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x45d8, &(0x7f0000000080)={0x0, 0x0, 0xe, 0x0, 0x23f}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x12345, {0x0, r4}}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x28, 0x1411, 0x0, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x5}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000094}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) 03:08:05 executing program 5: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x45d8, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x141000, 0x0) sendmsg$AUDIT_TRIM(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x10, 0x3f6, 0x1, 0x70bd2d, 0x25dfdbfc, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x84000}, 0x8) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x12345, {0x0, r5}}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) 03:08:05 executing program 1: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xfeffffff}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:08:05 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xffff8000}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:08:05 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xffffc000}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:08:05 executing program 5: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)=0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f0000000300)=0xc) keyctl$get_persistent(0x16, r3, 0xfffffffffffffff9) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x45d8, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x12345, {0x0, r5}}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) 03:08:05 executing program 1: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000300)=0x4a, 0x4) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000000)={'ipvlan0\x00'}) r0 = syz_io_uring_setup(0xc88, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x45d8, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)='./bus\x00', 0x10e, 0x0, 0x12345, {0x0, r4}}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000280)={0x1f, 0x2, @any, 0x2, 0x1}, 0xe) r5 = openat(0xffffffffffffffff, &(0x7f0000001580)='./bus\x00', 0x2000, 0x14) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000015c0)={&(0x7f0000000340)="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", &(0x7f0000000480)=""/4096, &(0x7f0000001480)="cc2a1a5f719267f55a740ef2d126d18d9e259df4f289fc7558ea2499a4f321faccafc3e96e5e4cb04cb49875c992495f209f30", &(0x7f00000014c0)="82285694ba18562f5f499ad157aadbde7a7c2196eb9cd08ede74b713b78281f6325124a011e304b684ca21d08a6d1ebac60743fb6dceb58a6cf128b98675be9b92998a40916243d09e5a1d817fdaa37160bfd313b891afbc80996c4f9e6638047334c41e64f678ec0c237e1fc3163ef4a296f1ac1d012110956fb40e04757ff60a8f2df577e49760d6d6540743660d9a2f4f1d6e1524274070271a3e3c1d691e0e56a70f2b26e9fddd34668a7d70752594ca39914f1f80cc9179", 0x80000001, r5}, 0x38) 03:08:06 executing program 1: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000300)=0x4a, 0x4) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000000)={'ipvlan0\x00'}) r0 = syz_io_uring_setup(0xc88, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x45d8, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)='./bus\x00', 0x10e, 0x0, 0x12345, {0x0, r4}}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000280)={0x1f, 0x2, @any, 0x2, 0x1}, 0xe) r5 = openat(0xffffffffffffffff, &(0x7f0000001580)='./bus\x00', 0x2000, 0x14) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000015c0)={&(0x7f0000000340)="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", &(0x7f0000000480)=""/4096, &(0x7f0000001480)="cc2a1a5f719267f55a740ef2d126d18d9e259df4f289fc7558ea2499a4f321faccafc3e96e5e4cb04cb49875c992495f209f30", &(0x7f00000014c0)="82285694ba18562f5f499ad157aadbde7a7c2196eb9cd08ede74b713b78281f6325124a011e304b684ca21d08a6d1ebac60743fb6dceb58a6cf128b98675be9b92998a40916243d09e5a1d817fdaa37160bfd313b891afbc80996c4f9e6638047334c41e64f678ec0c237e1fc3163ef4a296f1ac1d012110956fb40e04757ff60a8f2df577e49760d6d6540743660d9a2f4f1d6e1524274070271a3e3c1d691e0e56a70f2b26e9fddd34668a7d70752594ca39914f1f80cc9179", 0x80000001, r5}, 0x38) 03:08:06 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:08:07 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:08:07 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c2f77dd4aa8a4723d2e2f6275732c776f726b6469723d2e2f66696c653145432c757070650b7fec727569723d2e2f"]) chdir(&(0x7f0000000380)='./bus\x00') r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0x82) sendfile(r1, r0, 0x0, 0xa198) recvfrom(0xffffffffffffffff, &(0x7f0000000640)=""/158, 0x9e, 0x2000, &(0x7f00000003c0)=@l2={0x1f, 0x5, @fixed={[], 0x11}, 0x101, 0x1}, 0x80) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r2 = syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x1}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x45d8, &(0x7f0000000300), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x12345, {0x0, r6}}, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000480)={0xb, {'syz1\x00', 'syz0\x00', 'syz0\x00', 0xa3, 0x3, 0x8, 0x10000, 0x80, 0x5, "c6dda4cca4668782592b3a45b392811a18b1451f82df94c76c04cbfec1079eb277a688502bb9d8d2f65e720f3af695f118c3d6fb1e06a8f9e8f01749ba549898c4cb6811dbe8a56ccdbd9570ef67bd8c7a358c72a9e0c5464ee5cf2170426d06baf52b15889a4b4f2cfc33e4adeba665cd96e4a11049491b8d66243ca9b96a373011569a5dadf35c84c395598f8851e9a436ab56128bf36a179488fd2a5c82b9f325ef"}}, 0x1bb) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) [ 947.875202][T11325] overlayfs: unrecognized mount option "l/wÝJ¨¤r=./bus" or missing value [ 947.916091][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 947.916182][ T28] audit: type=1804 audit(1600744087.470:1339): pid=11325 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1516/bus/file0" dev="sda1" ino=17301 res=1 errno=0 03:08:07 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x2]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) [ 948.114421][ T28] audit: type=1804 audit(1600744087.510:1340): pid=11325 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1516/bus/file0" dev="sda1" ino=17301 res=1 errno=0 03:08:07 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x3]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:08:08 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x4]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) [ 948.637287][T11333] overlayfs: unrecognized mount option "l/wÝJ¨¤r=./bus" or missing value 03:08:08 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x5]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:08:08 executing program 5: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)=0x0) r3 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000040)=ANY=[], 0xfd30) write$P9_RREADDIR(r3, &(0x7f0000000300)={0xdc, 0x29, 0x1, {0x3, [{{0x20, 0x2}, 0x0, 0x4, 0xb, './bus/file0'}, {{0x2, 0x1, 0x4}, 0x7fff, 0x80, 0x5, './bus'}, {{0x10, 0x4, 0x8}, 0x9, 0xa, 0x5, './bus'}, {{0x0, 0x3, 0x3}, 0x7, 0x7f, 0x5, './bus'}, {{0x2, 0x0, 0x5}, 0x8, 0xff, 0x5, './bus'}, {{0x10, 0x1, 0x5}, 0x5, 0xfd, 0x5, './bus'}, {{0x10, 0x1, 0x2}, 0x100, 0x4, 0x5, './bus'}]}}, 0xdc) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x45d8, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x12345, {0x0, r5}}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) 03:08:08 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x6]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:08:08 executing program 1: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:08:08 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x7]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:08:09 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x8]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:08:09 executing program 1: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:08:09 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(0xffffffffffffffff, 0x9) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000180)) ftruncate(0xffffffffffffffff, 0x800) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r5, 0x5386, &(0x7f0000000100)) lseek(0xffffffffffffffff, 0x1, 0x0) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r6, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, r4, 0x0, 0x865e) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x0, 0x800, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x840) 03:08:09 executing program 5: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = pkey_alloc(0x0, 0x3) pkey_free(r3) syz_io_uring_setup(0x45d8, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x12345, {0x0, r5}}, 0x0) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) r6 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) fcntl$setstatus(r6, 0x4, 0x64000) io_submit(r7, 0x6, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2703000000000009, 0x8003f00, 0x3, 0x1, 0x0, r6, &(0x7f0000000000), 0x3000}]) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300)='nl80211\x00') sendmsg$NL80211_CMD_SET_REG(r6, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='H\x00\x00@', @ANYRES16=r8, @ANYBLOB="000325bd7000fddbdf251a0000000400cc00050092000500000005009200ff0000000700210062620000050092000a00000005009200010000000500920001000000"], 0x48}, 0x1, 0x0, 0x0, 0x8008004}, 0x4000) 03:08:09 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x9]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:08:09 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0xa]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) [ 950.242775][ T28] audit: type=1804 audit(1600744089.800:1341): pid=11449 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1241/file1/bus" dev="loop0" ino=298 res=1 errno=0 [ 950.392709][ T28] audit: type=1804 audit(1600744089.800:1342): pid=11449 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1241/file1/bus" dev="loop0" ino=298 res=1 errno=0 03:08:10 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0xb]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:08:10 executing program 5: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000740)='/dev/cachefiles\x00', 0x80403, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000780)=0x4, 0x4) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r3, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10180000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x3}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x41) syz_io_uring_setup(0x45d8, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x31713, {0x0, r5}}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) 03:08:10 executing program 1: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x45d8, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000000040)) [ 950.539591][ T28] audit: type=1804 audit(1600744089.800:1343): pid=11449 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1241/file1/bus" dev="loop0" ino=298 res=1 errno=0 03:08:10 executing program 5: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x45d8, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x12345, {0x0, r4}}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) [ 950.675427][ T28] audit: type=1804 audit(1600744089.910:1344): pid=11449 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1241/file1/bus" dev="loop0" ino=298 res=1 errno=0 03:08:10 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0xc]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:08:10 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x1, 0x0) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r7 = mq_open(&(0x7f0000000100)='@^\xbe\x00', 0x800, 0x0, &(0x7f0000000140)={0xfc, 0x2, 0x7, 0x97e}) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r7, 0x80489439, &(0x7f0000000180)) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 950.854446][ T28] audit: type=1804 audit(1600744089.910:1345): pid=11469 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1241/file1/bus" dev="loop0" ino=298 res=1 errno=0 03:08:10 executing program 5: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x45d8, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x12345, {0x0, r4}}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) [ 951.045546][ T28] audit: type=1804 audit(1600744089.930:1346): pid=11449 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1241/file1/bus" dev="loop0" ino=298 res=1 errno=0 03:08:10 executing program 1: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x45d8, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000000040)) 03:08:10 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0xd]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:08:10 executing program 5: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x45d8, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xfd30) accept4$x25(r5, &(0x7f0000000000), &(0x7f0000000280)=0x12, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x12345, {0x0, r4}}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) 03:08:10 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0xe]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) [ 951.416652][ T28] audit: type=1804 audit(1600744090.970:1347): pid=11531 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1242/file1/bus" dev="sda1" ino=17315 res=1 errno=0 03:08:11 executing program 5: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x45d8, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x12345, {0x0, r4}}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) [ 951.639376][ T28] audit: type=1804 audit(1600744091.020:1348): pid=11534 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1242/file1/bus" dev="sda1" ino=17315 res=1 errno=0 03:08:11 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x10]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:08:11 executing program 1: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x45d8, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000000040)) 03:08:11 executing program 5: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pkey_alloc(0x0, 0x2) exit_group(0x0) r0 = syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, &(0x7f0000000280)={0x2, &(0x7f0000000000)=[{0x7, 0xa8, 0x12, 0x1}, {0x8, 0x72, 0x9, 0x10000}]}) syz_io_uring_setup(0x45d8, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x12345, {0x0, r4}}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) 03:08:11 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x11]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:08:11 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x12]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:08:12 executing program 1: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$KVM_KVMCLOCK_CTRL(0xffffffffffffffff, 0xaead) r0 = syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_io_uring_setup(0x45d8, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)) r5 = fcntl$dupfd(r3, 0x406, r3) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000300)={&(0x7f0000000000)=[0x0], 0x1}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x12345, {0x0, r6}}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) r7 = openat$mice(0xffffffffffffff9c, &(0x7f0000000400)='/dev/input/mice\x00', 0x111000) setsockopt$inet6_udp_int(r7, 0x11, 0x65, &(0x7f0000001580)=0x2, 0x4) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/qrtr-tun\x00', 0x208500) 03:08:12 executing program 5: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000500)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x45d8, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x12345, {0x0, r4}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x100000001) recvfrom$x25(0xffffffffffffffff, &(0x7f0000000300)=""/146, 0x92, 0x40002002, &(0x7f0000000000)={0x9, @null=' \x00'}, 0x12) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm_plock\x00', 0x400000, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x64000) io_submit(0x0, 0x6, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2703000000000009, 0x8003f00, 0x3, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x3000}]) ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000580)={0x0, @reserved}) r6 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) fcntl$setstatus(r6, 0x4, 0x64000) io_submit(r7, 0x6, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2703000000000009, 0x8003f00, 0x3, 0x1, 0x0, r6, &(0x7f0000000000), 0x3000}]) getsockopt$IP_VS_SO_GET_DESTS(r6, 0x0, 0x484, &(0x7f0000000480)=""/76, &(0x7f0000000400)=0x4c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f00000003c0)=0x2, 0x4) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) 03:08:12 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x1, 0x0) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) r7 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r7, &(0x7f0000000040)=ANY=[], 0xfd30) sendfile(r7, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:08:12 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x25]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:08:13 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x42]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) [ 953.943301][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 953.943358][ T28] audit: type=1804 audit(1600744093.500:1354): pid=11600 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1243/file1/bus" dev="sda1" ino=16673 res=1 errno=0 03:08:13 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x60]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:08:13 executing program 5: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$vcsu(&(0x7f0000000300)='/dev/vcsu#\x00', 0xb0d1, 0x8000) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, 0x0, 0x3, {0x0, 0xf0, 0x2}, 0x1}, 0x18) exit_group(0x0) r1 = syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)=0x0) syz_io_uring_setup(0x45d8, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x12345, {0x0, r4}}, 0x0) r5 = signalfd4(r0, &(0x7f0000000140)={[0x98c3]}, 0x8, 0x0) sendto$l2tp(r5, &(0x7f0000000380)="0beeca13e24f2a935a83c6a17955d00e2239bb17a730e8eaa0d43b49859cb4b5c6b3ad97e0aac09d", 0x28, 0x80, 0x0, 0x0) r6 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r6, &(0x7f0000000040)=ANY=[], 0xfd30) linkat(0xffffffffffffffff, &(0x7f0000000000)='./bus\x00', r6, &(0x7f0000000280)='./bus\x00', 0x1000) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) [ 954.127157][ T28] audit: type=1804 audit(1600744093.580:1355): pid=11603 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1243/file1/bus" dev="sda1" ino=16673 res=1 errno=0 [ 954.338673][ T28] audit: type=1804 audit(1600744093.580:1356): pid=11591 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1243/file1/bus" dev="sda1" ino=16673 res=1 errno=0 03:08:14 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x300]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) [ 954.502209][ T28] audit: type=1804 audit(1600744093.660:1357): pid=11600 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1243/file1/bus" dev="sda1" ino=16673 res=1 errno=0 [ 954.628061][ T28] audit: type=1804 audit(1600744094.180:1358): pid=11603 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1243/file1/bus" dev="sda1" ino=16673 res=1 errno=0 03:08:14 executing program 5: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)=0x0) r3 = dup3(r0, r0, 0x0) ioctl$BLKBSZGET(r3, 0x80081270, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000040)=ANY=[], 0xfd30) pwritev(r4, &(0x7f0000000300)=[{&(0x7f0000000000)="6f099dd696eba33df9108dd6dbe5a5cd051d798362cddbf45018ff9ea5c414e0ff8cb0fa36993945c808b423641a11f795", 0x31}, {&(0x7f0000000280)}], 0x2, 0x0, 0x4) syz_io_uring_setup(0x45d8, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x12345, {0x0, r6}}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) [ 954.749766][ T28] audit: type=1804 audit(1600744094.230:1359): pid=11600 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1243/file1/bus" dev="sda1" ino=16673 res=1 errno=0 [ 954.987728][ T28] audit: type=1804 audit(1600744094.230:1360): pid=11603 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1243/file1/bus" dev="sda1" ino=16673 res=1 errno=0 03:08:14 executing program 5: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x45d8, &(0x7f0000000300)={0x0, 0x10}, &(0x7f00006d6000/0x1000)=nil, &(0x7f00006d1000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x12345, {0x0, r4}}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) 03:08:14 executing program 1: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000500)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x45d8, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x12345, {0x0, r4}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x100000001) recvfrom$x25(0xffffffffffffffff, &(0x7f0000000300)=""/146, 0x92, 0x40002002, &(0x7f0000000000)={0x9, @null=' \x00'}, 0x12) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm_plock\x00', 0x400000, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x64000) io_submit(0x0, 0x6, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2703000000000009, 0x8003f00, 0x3, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x3000}]) ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000580)={0x0, @reserved}) r6 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) fcntl$setstatus(r6, 0x4, 0x64000) io_submit(r7, 0x6, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2703000000000009, 0x8003f00, 0x3, 0x1, 0x0, r6, &(0x7f0000000000), 0x3000}]) getsockopt$IP_VS_SO_GET_DESTS(r6, 0x0, 0x484, &(0x7f0000000480)=""/76, &(0x7f0000000400)=0x4c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f00000003c0)=0x2, 0x4) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) [ 955.161746][ T28] audit: type=1804 audit(1600744094.230:1361): pid=11600 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1243/file1/bus" dev="sda1" ino=16673 res=1 errno=0 [ 955.329573][ T28] audit: type=1804 audit(1600744094.240:1362): pid=11600 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1243/file1/bus" dev="sda1" ino=16673 res=1 errno=0 03:08:15 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x29, 0x5, 0x7, 0x7, 0x4, @mcast2, @mcast2, 0x1, 0x7800, 0x0, 0x1}}) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000200)={@local}, &(0x7f0000000240)=0x14) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100), 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x18, 0x0, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4008000}, 0x810) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(0xffffffffffffffff, 0x10000, 0x3) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x1, 0x0) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:08:15 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x360]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:08:15 executing program 1: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000500)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x45d8, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x12345, {0x0, r4}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x100000001) recvfrom$x25(0xffffffffffffffff, &(0x7f0000000300)=""/146, 0x92, 0x40002002, &(0x7f0000000000)={0x9, @null=' \x00'}, 0x12) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm_plock\x00', 0x400000, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x64000) io_submit(0x0, 0x6, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2703000000000009, 0x8003f00, 0x3, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x3000}]) ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000580)={0x0, @reserved}) r6 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) fcntl$setstatus(r6, 0x4, 0x64000) io_submit(r7, 0x6, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2703000000000009, 0x8003f00, 0x3, 0x1, 0x0, r6, &(0x7f0000000000), 0x3000}]) getsockopt$IP_VS_SO_GET_DESTS(r6, 0x0, 0x484, &(0x7f0000000480)=""/76, &(0x7f0000000400)=0x4c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f00000003c0)=0x2, 0x4) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) 03:08:15 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x500]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) [ 956.298679][ T28] audit: type=1804 audit(1600744095.850:1363): pid=11647 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1244/file1/bus" dev="loop0" ino=299 res=1 errno=0 03:08:16 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x600]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:08:16 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x6, &(0x7f0000000600)=[{&(0x7f00000000c0)="04de0a026b00027400f8", 0xa}, {&(0x7f0000000100)="a7f3d2e348f01c9263ce4edd13d7b333221c0a92b76c31187d5b4f05bd28d5757a24b7d3fb97ba1d60003bf9e2db86a9d7a12db511007c884b7eeb7d89036aea754d8ba5008f2d00a307af15fd34b3a60afeb3b13b07088276b71bb42318b1baeea0e5c5dd7ac8f7264638b2609855b03b3588c0c111505af86602acf3a0a5692f7837a076e2ad64df0bdac01864ce0b272100934929713756788da5ca615a5bd299b53757ef8e557627ce13d36ad39cabf1", 0xb2, 0x5}, {&(0x7f00000001c0)="43817547f89595492bfd8d274ca5a3b3b9a5c4d01bc70b2a81127c912df9ab8e6187c3a2ca1669f338fdcc114dcd6a3dbc76dd06430187f61bc7eb56a3bc9661f1f8e2ea5c8b28ee4175faf81a4b03986ddb893025ab90f660ea6bf7eeb2af3f785c7e41c7f0d1bb6a9ce938d9449c69a1e9d4b2457cbd6e206708cf86ba2adb3bc96de9477d1463e17d991b7f5d4e9ae15849b8e3d6d5d6e1736624a76d252a057767cdc51983e61f9c28987adda08f28da4885de9c5550b882add217669d44a29b8f41c55e91bbd3d76c8f47b3c8b7f09f462a0ad35166efdac14d2952663a76f637fb6d5d1f19549e9960d0497630855c", 0xf2, 0xffffffffffffff81}, {&(0x7f00000002c0)="3826a6c5913e3b9a6252b2da6ec4b6d0dc1093698044f1444802fc8d32937d364e6738c769cf3c2ffd63be2fbcb9546dc680cbeb845f27e0cda792527cacbf844472eae0bee7ef5dca0f1adb286237a2138cc2b02e7248f309e59dd1bebfaccd466cffcaffbe8d18cc2b5624d58131e98ab32d71e09377f6513788b7345260f26072a54d32e1b3e9ed4f015125108f47f284ca9cd5b6", 0x96, 0x800}, {&(0x7f0000000400)="142d9c0dfc40f90a9bd2957ec9a9c5bb574039d0f479e38b3e80f93c9ff0b15495c9935afcdf2d98705b541779078b7e448c35c69d7f9c7d6bc76f3632e988e86d0cd0fe47a26e294a95f5489ff194da507a2af56dea8cf36bae13671ecd06daa06852bf2e4b3a80cfc4cc18e00d9f46525f304cecfd449ed4ef138ee8632e85c8213708fa6c2c3791e9b23274c5d20a60e4b24644a22ae8a1fe088bdf2f4f027edefdd643782a29883a28792b07b303af129ae812afd1bb593066ba0b31afa3ef38c57f0531a4ba41899e2ec8ce4ce6", 0xd0, 0x34987158}, {&(0x7f0000000500)="55d83652135ee336428ff9a435410cbb2ac1b50063adc0cab062c40fe7f6ea74451c191166320389e6bc94b7a1ced5e70e2565dfc5ea5f31347ad8c9292f47628cdeb314bcaa09f0794850f724522f52b4a63cd9ea2dda66fdfce5b3e0ddec18c238e0105b04ffb6100167ed85c5e8dcd218b082a368ca5b6adf9fec270c216bcc2a1257b981be9f54fbe5525ab98531fa87bbf69e547e09e2e80993bf5f6c191cd163ba725db8fc75ef888d86643280ce61bfd0bdcd7beaeef89ab35742653a18214e861f34b24aedbd3ada2555fe1e22e07ec8b0d2c855", 0xd8}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = mq_open(&(0x7f0000000080)='msdos\x00', 0x800, 0xa, &(0x7f0000000380)={0x8001, 0x4, 0xa615, 0x401}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r5, 0x40189429, &(0x7f00000006c0)={0x0, 0xb0c, 0x3}) r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r6, 0x800) lseek(r6, 0x1, 0x0) r7 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x8400fffffffa) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:08:16 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x700]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:08:16 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x900]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:08:16 executing program 5: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$TCSETXW(0xffffffffffffffff, 0x5435, &(0x7f0000000000)={0x5, 0x4, [0xfeff, 0x7ff, 0x200, 0x9, 0x3ff], 0x2}) prctl$PR_SET_FPEMU(0xa, 0x2) r0 = syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0xfffffffa, 0x0, 0x1, 0x27e}, &(0x7f00006d1000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x45d8, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vsock\x00', 0x10001, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) r6 = shmget$private(0x0, 0x400000, 0x0, &(0x7f0000c00000/0x400000)=nil) shmat(r6, &(0x7f0000ffb000/0x1000)=nil, 0x0) shmat(r6, &(0x7f0000ce9000/0x1000)=nil, 0x7000) shmctl$IPC_STAT(r6, 0x2, &(0x7f0000000280)=""/35) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x12345, {0x0, r5}}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) [ 956.953177][T11687] FAT-fs (loop0): Unrecognized mount option "ï8Å1¤ºA‰ž.ÈÎLæ" or missing value 03:08:16 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0xa00]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:08:16 executing program 5: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x354e, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x12345, {0x0, r4}}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) 03:08:16 executing program 1: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$TCSETXW(0xffffffffffffffff, 0x5435, &(0x7f0000000000)={0x5, 0x4, [0xfeff, 0x7ff, 0x200, 0x9, 0x3ff], 0x2}) prctl$PR_SET_FPEMU(0xa, 0x2) r0 = syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0xfffffffa, 0x0, 0x1, 0x27e}, &(0x7f00006d1000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x45d8, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vsock\x00', 0x10001, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) r6 = shmget$private(0x0, 0x400000, 0x0, &(0x7f0000c00000/0x400000)=nil) shmat(r6, &(0x7f0000ffb000/0x1000)=nil, 0x0) shmat(r6, &(0x7f0000ce9000/0x1000)=nil, 0x7000) shmctl$IPC_STAT(r6, 0x2, &(0x7f0000000280)=""/35) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x12345, {0x0, r5}}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) 03:08:17 executing program 1: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$TCSETXW(0xffffffffffffffff, 0x5435, &(0x7f0000000000)={0x5, 0x4, [0xfeff, 0x7ff, 0x200, 0x9, 0x3ff], 0x2}) prctl$PR_SET_FPEMU(0xa, 0x2) r0 = syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0xfffffffa, 0x0, 0x1, 0x27e}, &(0x7f00006d1000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x45d8, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vsock\x00', 0x10001, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) r6 = shmget$private(0x0, 0x400000, 0x0, &(0x7f0000c00000/0x400000)=nil) shmat(r6, &(0x7f0000ffb000/0x1000)=nil, 0x0) shmat(r6, &(0x7f0000ce9000/0x1000)=nil, 0x7000) shmctl$IPC_STAT(r6, 0x2, &(0x7f0000000280)=""/35) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x12345, {0x0, r5}}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) 03:08:18 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0xb00]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:08:19 executing program 1: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$TCSETXW(0xffffffffffffffff, 0x5435, &(0x7f0000000000)={0x5, 0x4, [0xfeff, 0x7ff, 0x200, 0x9, 0x3ff], 0x2}) prctl$PR_SET_FPEMU(0xa, 0x2) r0 = syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0xfffffffa, 0x0, 0x1, 0x27e}, &(0x7f00006d1000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x45d8, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vsock\x00', 0x10001, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) r6 = shmget$private(0x0, 0x400000, 0x0, &(0x7f0000c00000/0x400000)=nil) shmat(r6, &(0x7f0000ffb000/0x1000)=nil, 0x0) shmat(r6, &(0x7f0000ce9000/0x1000)=nil, 0x7000) shmctl$IPC_STAT(r6, 0x2, &(0x7f0000000280)=""/35) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x12345, {0x0, r5}}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) 03:08:20 executing program 5: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x45d8, &(0x7f0000000080)={0x0, 0xe29b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x12345, {0x0, r4}}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) 03:08:20 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0xc00]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:08:20 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x64000) io_submit(0x0, 0x2, &(0x7f0000000280)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x6574, r0, &(0x7f0000000140)="055b7dbbd8801c078df99bcb67653d31bcc3ff9881eb2f25b68c2754bef63ec626d6772b516a2e21531e7be1be9e2db6bed28d90529eb7acf28385be9e3bfcca762ed8618570e4325f46dd82fe776e9181", 0x51, 0x4, 0x0, 0x2}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x81, 0xffffffffffffffff, &(0x7f0000000580)="40c8577a9df79e292c84b3ea6c3f86b5f839baded0a866d20f5db1826e117a53f8e7637101595f42dfe2c3678c8ab62bdea49dffcb47f283fc607fc8e63b42d8006a0bda69d36ea0eb71a3f84440289e51c5d9b5c5525c96c6f044684402575118c3939b6bda26e51a0d97acd5567f7fa798053e74a4935e5ff812fe79003100e6a3ead7eadc7a3a1b56552fbd1b71e9c482778007f41b148b24f93fcb9977ce4ac842a8de01c824fe9431b21bd49c250d79629b6f221707617885de41bae6bc50070681e440a18be55a098eab0f8fa0b5af05da28210b5f4eabdd114a56c16efc3ea3583c9727cbea53991cae25bfc3f5aa98d97843c84351e3cc5e3e73d3f82dc3a2df6e9d0bb99508454e703db5be499cf52e1aafe188dd6452db39fb1dadfb52a6bee451fd6c61bf45ee978d99937d8e92fee9bf21deaf0ea65011538c17e4709e01ae2b19ba425baeea56b0f93661d0911fa86aea3b653dc86f4403ca8164b792f0cb5016bb0c9647f9aace780ad8ce18659cbeea132bb7e0e1b8da4f0d88008dfb6c8b1499d023ad9f6c0e0763f5c0d63fc085debb504ad6a968980ddd6f420f7341413bbaa68dff728f7c84397f89af98682553951aed90ba9a207533963caed8d20172729718e1a02aff498fe35c409d798d854af252a6f8f24cf5ef0112e65b91705cef56317d2116973a0d8e15acc7519d4e2cce7b1ad57a57b912ca0aa837025f44c37d79c16f1223ca9731bce19979bd6b841e21ef570fc713ce7560724b77cc69b7841c8fc2728ccffe769727c36325789f5b8719ef4e6a7bc88038e1b7337917aab11caeb4723c414a5a5888b9b2876d153707cefaf08a6739feb94a2e17469316c0182835aecab8c3bb1e96629932222619bd18b60a252271f23c3f1abefc00caf6ee1f6c6c6f052db126ff58425f0f10fa50eb94daaee608ce019a40132e25c92cf3431bea91365ea249f8d4c69dd701aaebf54374e6ce9cfd12251b738e0a6ea3b19a6611199f1dcc9b7b237d655fd16aa9165aa05cff2f32cd342a79f3c8a1a1488163136335b9727992ee4fac85e7134f7049bb8e6685d6d1bd8bc919c14cc1002d36a9167dc78c2ca5185a1a66a63b0358022af9df1a9f383ec6da1a4851df27af9b679f67c87e7b3a9a6c832cb762612dda1933facb3c1af0635a8af162f3f5a4c7150e2d717218115afbfbbd688e7d7aec2846356f0efd37f756be41021d7d553f37a649b1d6f4e864def9cf717a13f36130cc77b31561dc7ab4979e84e55eacb043a4b99fff843b29d9dfdaafd89d3f31c0f887ea9d5028ae845c1a516ca93a4244d4e448d8602043aafd6a8b07f463881eb5139a16353ac424dc59e497f2e5a011edf1a76a1577c1d95da23625839352416026271d5997e7ae92ff2ff418488269a8bff5ef090df4b057af18ec77f1eafc2041a5fc81ecd32f8b662c7512c200c53fc7e50e866a25b01cafdb3951bac7561e4a14043b057819cc8cfdbe1ca382027388c377dfd5b85360643ba4851fa2e75c8f69db64d7cc0bc97282e9e0824471534189e0e9e14101a8b7c0dd0eca1e1fcf21f87b1b5014b940bf3be24fed8c0ff2de662cef97b1b4c2435f230dd565074b75bf11483f603147b1538e0ad666edffcbee4b3d2540a02c37fa0bff4efb1abf6c39d7e13c6ea3f18a8bcb8651b26e0143e1422609db35f27151583ba32bcdac0ee301238e38893e132aa42f2a1252d778ceb9ac98d4f6470372a1b0a8efc6345fe3e3aa2f36bdda28982445f0ffc1468ed84e1db2d946bda2fa7fe0ad23304fb08ef68a492022d521db0c2f92db7c327fe3eef555b271078c11176b5537e794dbc4f833a1deb4bb8a528cd3b7cce1f53b16af7f5e83de789ef7a6d47744de02a2bb91ab0a4eab1c01058325e933061c1601e26e52277890b185d25a293ed3d8d8175b9d74aa5bc2f578c00b4474359d97ad252133aa2e20e6fa3e3a521785ef0c7d9e6ab571cbfd132287d3a83c046f14f33a4ce3ace35dff13b5bce4ef9ae8cb07083ba17fca928e2af0b0c6640a4830df52e93b386a615a1809467379f9a37151df7a1e5f9977f58ecfae7adad2165ee5d7e9886c3158af8e3e98915adfca8a8e3095274c6b95cbe8d14e60eb937fd35f681ed30916988a00366476b1f849312c2876cb3636610f0fa3ba22f1f8159789ee17cef31e8c6128d070b7b1908fcc951929ba7a8fcbeb2403fc0b6725d83b46da70f47b3b57f1b0d62026f82d071d596f47660c15dda8920fef57e0ec9ef892c49f9fbaa65a35ed7d7510e55347c11383cf4282b2dfbc2698945aef7d9abde79dc5c324c70a9d2fc97bd29a937fb19be82a994d77bb1ea417e2bd558a0eb3835d742209d13038b7a8a7768f9993d8ef581118ee7555e0e9f338005643db72acf0ea7da22882536b38bbcee6332c40abfaa2fdf578299c3c67f6d3836cd70a9d41762bd322dcd6199ca413812647d56f2d174ab9b4e2ac3e9814fe7f5aaab9d6cc55d6c878a28fd7e81f497baaffb9ab40a48d77faa02456878716e4b33b2a745231510128a7b3684a46e6ef9e06f899ac7d4f573131b70558fa820a88095e8542b1fdb0c1923d8dd4abecd19b84bb1ff00aa6b25663f015f6c71fe83fbbdf6c772220adcab8d72873bd1387309c2dee1d0ebfc290c736421d10508d17d22bb009d982b3893ff0d491eecb4183585fb61a3fa478df525d2a038147b490cf96611a46ae77c515b3c5798f279b572cca442f67c2ce26d336bcdd92da7cacb095bb5daa38917e26dbb2431d76d32e1bf3cd4a6595d8651efa13767c2f0483cbd965cd2e4d2c165e24db77ba0d58737954a908f7e8f7d035ff5eec44e018f13a3a0fbc11c32d17b4f662fa7d03986726b1c1116dd5a05a06cd8087af8354c3dbdf0b957cdcf8d854b82d9cfb010f88248d0aef7091eb781e368216c521b806fcecd08335ea81b0e1c0f59dea5561d513978f1b69fd68458d7b0edb35977f516fe4243ec413bc4be064267a6c78173171e708e24358560ed9c87be295ae0b9dc8261c06eb01dd4ff1f006b2d5c1e11ce46744d9c353117f7463f4d19c55f01abe9e3a260fbbdfcfd103344a297975bbae2906a88153c4556ea8c3b4d070133a4fbf8ee3ce2168295bc0b331ee772ec46ec3198a9f2dea703b4d73469e0cf36eec0291930d895de3034dc48f4917c3833566c290667bc4e834023cbe340f986726fdb11d2b00ba2709eda80662d47aacc9299221d4ff3983f79eea9afbd44674dad2a2ac8f10fe23ad72053b5695b7800487d9ad92725422759120246f7e6ee692c2ce801a44b3c84f37d2262a4747ffdb6c19e8cdee9e635d1f59099b69af0c8ee963e5f132760bd564632e25b0427f0a1a24c8cb3b0e5c6f37ebad90512b535ce53a39344581fec24112c1c9854d129661d2995543330f06f6490135df49ea7b6aaaf6d67315a4bd02389fbd6ef175d6dd8f44ccc21143bfe6f9fc6a12b8309b1aa128c92e1d7d2d961b80c758a0b0673edc9ca391b1305f9dddc3827b8f00ef1eccf20c53b62a610fde6112e08f4ccea21dd0378669af412e5146d7fda892199681093ede41da9bf97bcce5d067c5316a2c18e0fa278d5dc6cb3ae1df802a4284873d59667e5f5faae20711ce036267a71c074267751c1ec1e9826a5a19825a695408fabf88b3475108da32c8f1e73b3bcbc5691214e9c8ae2316074338823aeb282aabfa06535abf19d60d34d1d5be50fbd1bb928d7dd855ec13b179741d5e16b0a1a5c41463149dd3e6afa0d950e066d4abcb20bd9f344457d7e3818b4afe66e40783d7f315cffc93335697b45c820b8514f33fb9a220ccdd6e363dbf6059fa1b5358890df2a7e561667581432918a3fde480203df645a879b12fd2f568d68345c79e81e0a2206650b3856498736834f890461ed22b8e55e07bb703fa4eeb08c92c8c17553ab376797bbf4cb957bc1f3e025d0333af835fae4c3cf80ab784c04efb3a4824834e11f7b9b20fa3eeed5b0f276a44d6b9acd2f18014053df065f93a2a919f4a796ae250329a2edd4fe81dfaba84bfa7bdb5830f3ceaca2f18e4ed58f6c623391ed770b486eb81ef01abcd0cfd2ae47efef1445a14ab54a8aba860fc8ae1b9b53aefdd9042a868fa78a438c44213fae68af435c143651d876c12aee7efef7fe80dd7066a821e2b8167b7184eb1f6223a513529062f9d06a34346e5f077466a4a8e0684fa031f78bdca7b7ec2e78f67e57d299393f1b7a0d49f0f53dd3229021e0038576a42377ce58bcaa91c9a0ad290e7986a688592cf4f13dd122ace045bc38f2dc7f59de9a979d12c7a4d95ee9d5a1521ac72e38d787d55715d4708317b8061459fdf75a4dda971f5615df18ceb7984202cd57a344110920dba4d1b7b216e38c88b340461a3520b9282ca71b1fb4f8ca7bb28273042c0f7e569273899c59943b6314ff40c51906182100638f1edb197e4a2ab96656bab3186330b6563a844dda8d34c6ce3aeb61053c5683ff157d5d4fcd860fb9cc2ea55e2f841bf029cad2ddbfc0ff40b5704c3a7dd7451010469b1bbfa1d72c556adbb52df42faacfd7595114f0014636fdc619341b6ab09d3e722e3f297ac7d93961be02c2068aca3cafa1afc7a439291f1b506e4fea953e7a25244902f4ec4c3c7e3f2aeb1a071fee760e42c9dbe1c472cd11e63261e0ebdfde35b0b352bdaa90ad3cb47cea51efc9002fb8212e765d0a296f96f41c8286f71c509bf510e489a4680f53b28fb726c8e9aea71df5adeccb578c7054b943a4e4dfd8ea806ec075bf13d145baf5688063502022036e873ea9a7c17246b843ccc741da2657e8ced17091421d10b40811570ffa8dc5b5da5095a998c955a76aa3a61f1b099536071219e1b098df0fadf3cd03fb64c0bfa297a11d372dcb3c57ea95a62b1ea39fabe3b6fe9b000d43a743b224022708108f3b45859885edd6ddf2bfb66d96c64ab680c1b84c190cc9864bf0ed60074354015770c3a54a46e3462922dbe2fdc40df6119fd0363eed3ee283cf57958af124d79452a7efb4160a8c2ac4f1c8aea5b3bc4bf8b72b70fda6d88584b0468560e54a4977486528e2f5d0c0479b9968f74ca883970b2e9d6a26bcb466faa1d7401888b2d26102912d533ce0354270452f672292ddf938bf1d44feffddd7ac48346f095812c1eb861f19df4e31c57af7403c361f13f0bd95f2c9dffbc2ebabc82da226a9789ff757ec2982cfb99912c7d568f9eb69b6854dab1d59719732a7ce49db504c32d319ed4ffa1f52ec877fbdf743b3dea72f73d99154c8a18ed119401df464c4e9cf2f9b739c52726d207e3cd07e7749fe6de8c93c441152308a43926d847591e1c6e492acfbdef3a930aaf606fd20300ccef32956370d00fc008bb3fd04b3666dca4e1d73fd5f291edb1747521d7a426007c5e3e3b0da53742616b8affbeaba0201eb46dbae440707b2ff6ff028be83ab354b272f6db00d6fe94b610d3065b79ef7796e780f5536d99b33a4cc2c64b531018bfdbb24731b5643853a21113ba55fefef6b210e20cece03986f9af21999f54f8668707109a84e617d9c15c68940487387b1b27550c7182387a0d9123bdb1177e3a9e7a3505bb9584020bd8355c542f636d9f6eeb23e41601d382d0a511f601418d4d2a88a72b31ca9831c8e825d767891ca91e5119ff359076128ecd5d5563bec305f8badb98257be33e2aadf0ce387374e7096e7b7715b83e8d864969f83a26fc3925aefac07a4a57ba5b984c15d33fcbe65b", 0x1000, 0x6, 0x0, 0x2}]) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000100)={0x6, 0xef2, 0x3}) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0400050900000000666174000404090a0200027400f8010673d33a85de24974944de7c39dae31cb5dc29ddf2b473db0c1c9f7cc13e4146d742a6178f86e7356e0d7e3ef5593859f6dd13fe4318cfe4a89d5d9177682f37506e4142279afdfd5f2aa540c83a1ef95b6784243e", 0x6c, 0xff80000000000000}], 0x0, &(0x7f0000000400)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r1, @ANYRES32=0x0]) r2 = fanotify_init(0x2, 0x40000) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r2, 0xc00000) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = creat(&(0x7f00000000c0)='./file1\x00', 0x124) ftruncate(r5, 0x800) lseek(r5, 0x1, 0x0) r6 = open(&(0x7f0000000240)='./bus\x00', 0xc4800, 0x10d) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 03:08:20 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0xd00]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:08:20 executing program 5: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x45d8, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000000)={0x2, 0x1, 0x3ff}) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x12345, {0x0, r4}}, 0x0) r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000300)='/dev/nvme-fabrics\x00', 0x408000, 0x0) read$qrtrtun(r5, &(0x7f0000000340)=""/48, 0x30) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) write$hidraw(0xffffffffffffffff, &(0x7f0000000280)="ef2b8e1ca716c07ee4d101805bc00a4d2831e3573fe7ee0d6c18ab041862f0581c3febfd8685", 0x26) r6 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) fcntl$setstatus(r6, 0x4, 0x64000) io_submit(r7, 0x6, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2703000000000009, 0x8003f00, 0x3, 0x1, 0x0, r6, &(0x7f0000000000), 0x3000}]) ioctl$SNDCTL_SEQ_RESET(r6, 0x5100) 03:08:20 executing program 1: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$TCSETXW(0xffffffffffffffff, 0x5435, &(0x7f0000000000)={0x5, 0x4, [0xfeff, 0x7ff, 0x200, 0x9, 0x3ff], 0x2}) prctl$PR_SET_FPEMU(0xa, 0x2) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0xfffffffa, 0x0, 0x1, 0x27e}, &(0x7f00006d1000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x45d8, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vsock\x00', 0x10001, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r5 = shmget$private(0x0, 0x400000, 0x0, &(0x7f0000c00000/0x400000)=nil) shmat(r5, &(0x7f0000ffb000/0x1000)=nil, 0x0) shmat(r5, &(0x7f0000ce9000/0x1000)=nil, 0x7000) shmctl$IPC_STAT(r5, 0x2, &(0x7f0000000280)=""/35) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x12345, {0x0, r4}}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) 03:08:20 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0xe00]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:08:22 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x1100]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:08:22 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x1200]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:08:22 executing program 5: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x45d8, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000280), &(0x7f0000000300)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, 0xee01, r8) fstat(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$bt_hci_HCI_FILTER(r7, 0x0, 0x2, &(0x7f00000004c0)={0x8, [0x8, 0x3], 0xfff9}, 0x10) setgroups(0x6, &(0x7f0000000480)=[0xee00, r5, r6, r8, r9, 0xee01]) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x12345, {0x0, r4}}, 0x0) ioctl$sock_inet_SIOCADDRT(r7, 0x890b, &(0x7f0000000540)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e22, @rand_addr=0x64010100}, {0x2, 0x4e21, @local}, 0x2, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000500)='veth1_to_batadv\x00', 0x7664, 0x1, 0x6}) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) [ 963.460111][T11807] FAT-fs (loop0): Unrecognized mount option "0xffffffffffffffff18446744073709551615" or missing value 03:08:23 executing program 1: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$TCSETXW(0xffffffffffffffff, 0x5435, &(0x7f0000000000)={0x5, 0x4, [0xfeff, 0x7ff, 0x200, 0x9, 0x3ff], 0x2}) prctl$PR_SET_FPEMU(0xa, 0x2) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0xfffffffa, 0x0, 0x1, 0x27e}, &(0x7f00006d1000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x45d8, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vsock\x00', 0x10001, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r5 = shmget$private(0x0, 0x400000, 0x0, &(0x7f0000c00000/0x400000)=nil) shmat(r5, &(0x7f0000ffb000/0x1000)=nil, 0x0) shmat(r5, &(0x7f0000ce9000/0x1000)=nil, 0x7000) shmctl$IPC_STAT(r5, 0x2, &(0x7f0000000280)=""/35) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x12345, {0x0, r4}}, 0x0) [ 963.597268][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 963.597281][ T28] audit: type=1804 audit(1600744103.150:1376): pid=11813 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1246/bus" dev="sda1" ino=16723 res=1 errno=0 03:08:23 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x2500]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) [ 963.641027][ T28] audit: type=1804 audit(1600744103.200:1377): pid=11813 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1246/bus" dev="sda1" ino=16723 res=1 errno=0 [ 963.833091][ T28] audit: type=1804 audit(1600744103.390:1378): pid=11814 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1246/bus" dev="sda1" ino=16723 res=1 errno=0 [ 963.944736][ T28] audit: type=1804 audit(1600744103.420:1379): pid=11814 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1246/bus" dev="sda1" ino=16723 res=1 errno=0 03:08:23 executing program 5: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x45d8, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0xb, 0x2}) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x12345, {0x0, r4}}, 0x0) r5 = creat(&(0x7f0000000500)='./bus\x00', 0x80) io_setup(0x83, &(0x7f00000003c0)=0x0) fcntl$setstatus(r5, 0x4, 0x64000) io_submit(r6, 0x6, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2703000000000009, 0x8003f00, 0x3, 0x1, 0x0, r5, &(0x7f0000000000), 0x3000}]) ioctl$TUNSETSTEERINGEBPF(r5, 0x800454e0, &(0x7f00000004c0)) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000180)={r8}, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0x0, 0x7, 0x2, 0x1f, r8}, 0x10) r9 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ubi_ctrl\x00', 0xa000, 0x0) sendmsg$IPVS_CMD_FLUSH(r9, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xb8, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x70, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, [], 0x1}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x43}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x13}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0xb8}, 0x1, 0x0, 0x0, 0x1}, 0x4000) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) 03:08:23 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r5, 0x800) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xd0, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x8880}, 0x40800) lseek(r5, 0x1, 0x0) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 964.901154][ T28] audit: type=1804 audit(1600744104.460:1380): pid=11838 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1247/file1/bus" dev="loop0" ino=300 res=1 errno=0 [ 965.039640][ T28] audit: type=1804 audit(1600744104.470:1381): pid=11838 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1247/file1/bus" dev="loop0" ino=300 res=1 errno=0 03:08:24 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) r4 = inotify_init() poll(&(0x7f0000000100)=[{r4, 0x2000}], 0x1, 0x9) lseek(r3, 0x0, 0x2) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000180)={0x0, 0x8}, &(0x7f00000001c0)=0x8) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r6, 0x800) lseek(r6, 0x1, 0x0) r7 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x8400fffffffa) sendfile(r3, r5, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:08:24 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x3f00]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) [ 965.553235][ T28] audit: type=1804 audit(1600744105.110:1382): pid=11852 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1248/file1/bus" dev="loop0" ino=301 res=1 errno=0 03:08:25 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x4000]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) [ 965.729172][ T28] audit: type=1804 audit(1600744105.170:1383): pid=11852 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1248/file1/bus" dev="loop0" ino=301 res=1 errno=0 03:08:25 executing program 5: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000040)=ANY=[], 0xfd30) getpeername$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000580)=0x1c) r1 = socket(0x9, 0x800, 0x1f) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYRES16=r2, @ANYBLOB="000425bdda3695c03060aef5f15d8e82a428fcdbdf251100000008000600ffff000008000500e800000008000400ff0f00000a34ab1cdacf04c775aa778012bcfc6694764361d7615dd49fe8378659282eca09832c39f42d7c4b985dcb82fdfd7d3ead8d46cb42541ddcee6765d3a4597d641d20bb4a8b3c6dea333d62fccb0ac56e099e7c0705fc8b5f1ea311fcb0fec731dbc3b7c10e951911b8249ee97edec754cdba694dc0a12c7b5c8e5a8a37"], 0x2c}}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB="e8000000", @ANYRES16=r2, @ANYBLOB="00082abd7000fbdbdf250e000000080006000000010008000500b206000000040081f0000008000900010000001c000180080009006f000000080009005a000000080008000900000084000380060007004e24000014000600fe8000000000000000000000000000aa14000600fe800000000000000000000000000026050008000200000008000500ffffffff060007004e210000140002006d6163766c616e300000000000000000080005007f000001140002006e657464657673696d30000000000000080005000a010101080004000080000008000600018000000000000000"], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x44014) ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) r3 = syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000300), 0x0, 0x4) syz_io_uring_setup(0x45db, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r3, 0xc0305302, &(0x7f0000000500)={0x0, 0x4, 0xe69, 0xfffffc01, 0x6}) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0x80087601, &(0x7f0000000280)) pipe(&(0x7f0000000000)={0xffffffffffffffff}) io_uring_register$IORING_UNREGISTER_EVENTFD(r8, 0x5, 0x0, 0x0) syz_io_uring_submit(r6, r5, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x12345, {0x0, r7}}, 0x0) io_uring_enter(r3, 0x450e, 0x0, 0x0, 0x0, 0x0) 03:08:25 executing program 1: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$TCSETXW(0xffffffffffffffff, 0x5435, &(0x7f0000000000)={0x5, 0x4, [0xfeff, 0x7ff, 0x200, 0x9, 0x3ff], 0x2}) prctl$PR_SET_FPEMU(0xa, 0x2) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0xfffffffa, 0x0, 0x1, 0x27e}, &(0x7f00006d1000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x45d8, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000000040)) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vsock\x00', 0x10001, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r2 = shmget$private(0x0, 0x400000, 0x0, &(0x7f0000c00000/0x400000)=nil) shmat(r2, &(0x7f0000ffb000/0x1000)=nil, 0x0) shmat(r2, &(0x7f0000ce9000/0x1000)=nil, 0x7000) shmctl$IPC_STAT(r2, 0x2, &(0x7f0000000280)=""/35) 03:08:26 executing program 5: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) fcntl$setstatus(r0, 0x4, 0x64000) io_submit(r1, 0x6, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2703000000000009, 0x8003f00, 0x3, 0x1, 0x0, r0, &(0x7f0000000000), 0x3000}]) r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) fcntl$setstatus(r2, 0x4, 0x64000) io_submit(r3, 0x6, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2703000000000009, 0x8003f00, 0x3, 0x1, 0x0, r2, &(0x7f0000000000), 0x3000}]) ioctl$TIOCGRS485(r2, 0x542e, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x7) r4 = syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x45d8, &(0x7f0000000080)={0x0, 0x0, 0x27}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r6, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x12345, {0x0, r8}}, 0x0) io_uring_enter(r4, 0x450e, 0x0, 0x0, 0x0, 0x0) 03:08:28 executing program 5: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x45d8, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f0000000340)={0x0, 0x4, 0x8, 0x1, 0x8, 0x2, 0xc4, 0x1, {0x0, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x10001, 0x2, 0x3f, 0x3, 0xf8d}}, &(0x7f0000000400)=0xb0) pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x4000) write$char_usb(r5, &(0x7f0000000480)="9dff7f000000000000b434dde4214edf0206515f64a75230ab8b0b5802e79d331e271ccc73562972a603254c066299799913ccedc5a416a4646d2be527efb670cae77fa34dc67907aa9d6cf2d950d3b2932d080000000000000000000000003c228247a4c00fe52a4ff6f80c06bd54285ed4fc8bfcaa8cf7afc325cfb05801f3d0f35419f530f52ac2c56331212cd17af0b206959ad8112fd35d09895d995531dcbad4e219c462a94b67298a73aa9fea98ca0914a7f454a5ff696a44924b5cfcba678bb186752e9eec722abd968950278d", 0xd1) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r4, 0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x12345, {0x0, r6}}, 0x0) ioctl$CHAR_RAW_BSZGET(r4, 0x80081270, &(0x7f0000000280)) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) [ 968.794099][ T28] audit: type=1804 audit(1600744108.350:1384): pid=11868 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1248/file1/bus" dev="loop0" ino=301 res=1 errno=0 03:08:28 executing program 5: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0xfffffffe}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x9, 0x0, 0x4) syz_io_uring_setup(0x45d8, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x12345, {0x0, r4}}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) [ 968.971119][ T28] audit: type=1804 audit(1600744108.370:1385): pid=11870 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1248/file1/bus" dev="loop0" ino=301 res=1 errno=0 [ 969.057969][ T28] audit: type=1804 audit(1600744108.390:1386): pid=11872 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1248/file1/bus" dev="loop0" ino=301 res=1 errno=0 [ 969.246356][ T28] audit: type=1804 audit(1600744108.390:1387): pid=11871 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1248/file1/bus" dev="loop0" ino=301 res=1 errno=0 03:08:28 executing program 5: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)=0x0) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x8, 0x200000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x200045d8, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000040)) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x12345}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) 03:08:28 executing program 1: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$TCSETXW(0xffffffffffffffff, 0x5435, &(0x7f0000000000)={0x5, 0x4, [0xfeff, 0x7ff, 0x200, 0x9, 0x3ff], 0x2}) prctl$PR_SET_FPEMU(0xa, 0x2) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0xfffffffa, 0x0, 0x1, 0x27e}, &(0x7f00006d1000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x45d8, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000000040)) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vsock\x00', 0x10001, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r2 = shmget$private(0x0, 0x400000, 0x0, &(0x7f0000c00000/0x400000)=nil) shmat(r2, &(0x7f0000ffb000/0x1000)=nil, 0x0) shmat(r2, &(0x7f0000ce9000/0x1000)=nil, 0x7000) shmctl$IPC_STAT(r2, 0x2, &(0x7f0000000280)=""/35) [ 969.395599][ T28] audit: type=1804 audit(1600744108.390:1388): pid=11874 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1248/file1/bus" dev="loop0" ino=301 res=1 errno=0 03:08:29 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(0xffffffffffffffff, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000001c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x801000, &(0x7f00000000c0)=ANY=[@ANYRES32]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000100)={0x7, 0x7b, 0x2}, 0xffffffffffffff2c) fcntl$setstatus(r1, 0x4, 0x6900) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x18) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x800) lseek(r3, 0x1, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000140)='devices.allow\x00', 0x2, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r5, 0xc0406619, &(0x7f0000000180)={{0x2, 0x0, @descriptor="0b064a83c9395899"}}) sendfile(r3, r4, 0x0, 0x8400fffffffa) sendfile(r1, r2, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0xfffc) 03:08:29 executing program 5: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x45d8, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x12345, {0x0, r4}}, 0x0) io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0x0) [ 969.755223][ T28] audit: type=1804 audit(1600744109.310:1389): pid=11940 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1249/file1/bus" dev="sda1" ino=16862 res=1 errno=0 03:08:29 executing program 5: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x45d8, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x12345, {0x0, r4}}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x3}, 0x2) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000000280)='caif0\x00') io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) [ 969.869935][ T28] audit: type=1804 audit(1600744109.350:1390): pid=11940 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1249/file1/bus" dev="sda1" ino=16862 res=1 errno=0 03:08:29 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x4200]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:08:29 executing program 1: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$TCSETXW(0xffffffffffffffff, 0x5435, &(0x7f0000000000)={0x5, 0x4, [0xfeff, 0x7ff, 0x200, 0x9, 0x3ff], 0x2}) prctl$PR_SET_FPEMU(0xa, 0x2) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0xfffffffa, 0x0, 0x1, 0x27e}, &(0x7f00006d1000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x45d8, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000000040)) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vsock\x00', 0x10001, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r2 = shmget$private(0x0, 0x400000, 0x0, &(0x7f0000c00000/0x400000)=nil) shmat(r2, &(0x7f0000ffb000/0x1000)=nil, 0x0) shmctl$IPC_STAT(r2, 0x2, &(0x7f0000000280)=""/35) [ 970.041917][ T28] audit: type=1804 audit(1600744109.370:1391): pid=11940 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1249/file1/bus" dev="sda1" ino=16862 res=1 errno=0 03:08:29 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x6000]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:08:29 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x6003]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) [ 970.176328][ T28] audit: type=1804 audit(1600744109.560:1392): pid=11955 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1249/file1/file1/bus" dev="sda1" ino=16663 res=1 errno=0 03:08:29 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x62800) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x1, 0x0) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000100)) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000140)=0x408, 0x4) 03:08:30 executing program 5: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0xd8a, &(0x7f0000000300), &(0x7f0000ffe000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r3 = syz_io_uring_setup(0x45d8, &(0x7f0000000080)={0x0, 0x0, 0xc}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f00006d4000/0x3000)=nil, 0x3000, 0xd, 0x50, r3, 0x8000000) syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x100, 0x105000) r5 = syz_io_uring_setup(0x76be, &(0x7f0000000180), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r10 = dup(r9) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, r8, r10}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_WRITE={0x17, 0x4, 0x0, @fd_index=0x1, 0x8, &(0x7f0000001480)="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", 0x108a, 0x20, 0x0, {0x0, r8}}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) 03:08:30 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x25000]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:08:30 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x40000]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:08:30 executing program 1: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$TCSETXW(0xffffffffffffffff, 0x5435, &(0x7f0000000000)={0x5, 0x4, [0xfeff, 0x7ff, 0x200, 0x9, 0x3ff], 0x2}) prctl$PR_SET_FPEMU(0xa, 0x2) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0xfffffffa, 0x0, 0x1, 0x27e}, &(0x7f00006d1000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x45d8, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000000040)) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vsock\x00', 0x10001, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r2 = shmget$private(0x0, 0x400000, 0x0, &(0x7f0000c00000/0x400000)=nil) shmat(r2, &(0x7f0000ffb000/0x1000)=nil, 0x0) shmctl$IPC_STAT(r2, 0x2, &(0x7f0000000280)=""/35) [ 970.830711][ T28] audit: type=1804 audit(1600744110.390:1393): pid=12002 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1250/file1/bus" dev="loop0" ino=302 res=1 errno=0 03:08:31 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x80000]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:08:31 executing program 5: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x45d8, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x12345, {0x0, r4}}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000000)) ioctl$KVM_GET_CLOCK(0xffffffffffffffff, 0x8030ae7c, &(0x7f0000000280)) 03:08:31 executing program 1: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$TCSETXW(0xffffffffffffffff, 0x5435, &(0x7f0000000000)={0x5, 0x4, [0xfeff, 0x7ff, 0x200, 0x9, 0x3ff], 0x2}) prctl$PR_SET_FPEMU(0xa, 0x2) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0xfffffffa, 0x0, 0x1, 0x27e}, &(0x7f00006d1000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x45d8, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000000040)) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vsock\x00', 0x10001, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r2 = shmget$private(0x0, 0x400000, 0x0, &(0x7f0000c00000/0x400000)=nil) shmat(r2, &(0x7f0000ffb000/0x1000)=nil, 0x0) shmctl$IPC_STAT(r2, 0x2, &(0x7f0000000280)=""/35) 03:08:33 executing program 5: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0xd8a, &(0x7f0000000240), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x45d8, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x12345, {0x0, r4}}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) 03:08:33 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x400000]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:08:33 executing program 5: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x45d8, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00006d1000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r5 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./bus\x00', 0x800) io_uring_enter(r5, 0x2396, 0x818d, 0x1, &(0x7f0000000340)={[0xa23]}, 0x8) r6 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r6, &(0x7f0000000040)=ANY=[], 0xfd30) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r6, 0x400c6615, &(0x7f0000000300)={0x0, @aes128}) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x12345, {0x0, r4}}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) 03:08:33 executing program 1: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$TCSETXW(0xffffffffffffffff, 0x5435, &(0x7f0000000000)={0x5, 0x4, [0xfeff, 0x7ff, 0x200, 0x9, 0x3ff], 0x2}) prctl$PR_SET_FPEMU(0xa, 0x2) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0xfffffffa, 0x0, 0x1, 0x27e}, &(0x7f00006d1000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x45d8, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000000040)) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vsock\x00', 0x10001, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r2 = shmget$private(0x0, 0x400000, 0x0, &(0x7f0000c00000/0x400000)=nil) shmat(r2, &(0x7f0000ce9000/0x1000)=nil, 0x7000) shmctl$IPC_STAT(r2, 0x2, &(0x7f0000000280)=""/35) 03:08:33 executing program 5: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x404800, 0x0) ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0) exit_group(0x0) r1 = syz_io_uring_setup(0xd8a, &(0x7f0000000300)={0x0, 0x3, 0x0, 0x402, 0x40000}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x45d8, &(0x7f0000000080)={0x0, 0x3bbf, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x12345, {0x0, r5}}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) 03:08:33 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x500200]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:08:33 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20010}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044000}, 0x80) ftruncate(r5, 0x800) lseek(r5, 0x1, 0x0) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:08:34 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x506d20]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:08:34 executing program 1: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$TCSETXW(0xffffffffffffffff, 0x5435, &(0x7f0000000000)={0x5, 0x4, [0xfeff, 0x7ff, 0x200, 0x9, 0x3ff], 0x2}) prctl$PR_SET_FPEMU(0xa, 0x2) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0xfffffffa, 0x0, 0x1, 0x27e}, &(0x7f00006d1000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x45d8, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000000040)) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vsock\x00', 0x10001, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) shmat(0x0, &(0x7f0000ce9000/0x1000)=nil, 0x7000) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000280)=""/35) 03:08:34 executing program 5: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x8000d8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x3a2}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)=0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x45d8, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x12345, {0x0, r4}}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x3}, 0x8) openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x40c02, 0x0) 03:08:36 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x600000]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:08:36 executing program 5: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r5}, {r3}], 0x2, &(0x7f0000000200), 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x45d8, &(0x7f0000000080)={0x0, 0x1d5f, 0x0, 0x0, 0x8000000}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x40010, r7, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r9 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r9, &(0x7f0000000040)=ANY=[], 0xfd30) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000)={0x0, r9}, 0x10) r10 = pidfd_open(0xffffffffffffffff, 0x0) fstatfs(r10, &(0x7f0000000300)=""/150) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x12345, {0x0, r8}}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) [ 976.875332][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 976.875344][ T28] audit: type=1804 audit(1600744116.430:1396): pid=12104 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1251/file1/bus" dev="loop0" ino=303 res=1 errno=0 03:08:36 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x80ffff]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:08:36 executing program 5: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)=0x0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) fcntl$setstatus(r3, 0x4, 0x64000) io_submit(r4, 0x6, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2703000000000009, 0x8003f00, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) r5 = signalfd(r0, &(0x7f0000000000)={[0x3]}, 0x8) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000340)={0x0, 0x2, 0x4, 0x70000, 0x26bd0000, {r6, r7/1000+10000}, {0x5, 0xc, 0x80, 0x1, 0x40, 0x2, "930aac29"}, 0x7, 0x3, @planes=&(0x7f0000000300)={0x6, 0x8, @mem_offset=0x583, 0x1}, 0xfffeffff, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f00000003c0)={0x44, 0x2, 0x4, 0x0, 0x80000001, {0x0, 0xea60}, {0x4, 0x6, 0x7f, 0x1, 0x8, 0x1f, "1240badb"}, 0x8000, 0x2, @fd=r5, 0x1, 0x0, r8}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x45d8, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, r2, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x12345, {0x0, r10}}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) [ 977.115237][ T28] audit: type=1804 audit(1600744116.470:1397): pid=12104 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1251/file1/bus" dev="loop0" ino=303 res=1 errno=0 03:08:36 executing program 1: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$TCSETXW(0xffffffffffffffff, 0x5435, &(0x7f0000000000)={0x5, 0x4, [0xfeff, 0x7ff, 0x200, 0x9, 0x3ff], 0x2}) prctl$PR_SET_FPEMU(0xa, 0x2) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0xfffffffa, 0x0, 0x1, 0x27e}, &(0x7f00006d1000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x45d8, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000000040)) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vsock\x00', 0x10001, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) shmat(0x0, &(0x7f0000ce9000/0x1000)=nil, 0x7000) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000280)=""/35) 03:08:36 executing program 5: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) pipe2$9p(&(0x7f0000000000), 0x800) r0 = syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x45d8, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x12345, {0x0, r4}}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) [ 977.267339][ T28] audit: type=1804 audit(1600744116.490:1398): pid=12104 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1251/file1/bus" dev="loop0" ino=303 res=1 errno=0 03:08:36 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0xc0ffff]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:08:37 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x1000000]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) [ 977.660724][ T28] audit: type=1804 audit(1600744117.220:1399): pid=12122 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1251/file1/bus" dev="loop0" ino=303 res=1 errno=0 [ 977.779293][ T28] audit: type=1804 audit(1600744117.220:1400): pid=12122 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1251/file1/bus" dev="loop0" ino=303 res=1 errno=0 [ 977.779365][ T28] audit: type=1804 audit(1600744117.220:1401): pid=12110 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1251/file1/bus" dev="loop0" ino=303 res=1 errno=0 [ 977.779429][ T28] audit: type=1804 audit(1600744117.220:1402): pid=12166 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1251/file1/bus" dev="loop0" ino=303 res=1 errno=0 03:08:37 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) r4 = open(&(0x7f0000000100)='./bus\x00', 0x8000, 0x0) ftruncate(r4, 0x800) lseek(r3, 0x0, 0x2) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r6, 0x800) lseek(r6, 0x1, 0x0) r7 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x8400fffffffa) sendfile(r3, r5, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:08:37 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x2000000]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:08:37 executing program 1: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$TCSETXW(0xffffffffffffffff, 0x5435, &(0x7f0000000000)={0x5, 0x4, [0xfeff, 0x7ff, 0x200, 0x9, 0x3ff], 0x2}) prctl$PR_SET_FPEMU(0xa, 0x2) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0xfffffffa, 0x0, 0x1, 0x27e}, &(0x7f00006d1000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x45d8, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000000040)) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vsock\x00', 0x10001, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) shmat(0x0, &(0x7f0000ce9000/0x1000)=nil, 0x7000) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000280)=""/35) 03:08:38 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x3000000]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:08:38 executing program 1: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$TCSETXW(0xffffffffffffffff, 0x5435, &(0x7f0000000000)={0x5, 0x4, [0xfeff, 0x7ff, 0x200, 0x9, 0x3ff], 0x2}) prctl$PR_SET_FPEMU(0xa, 0x2) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0xfffffffa, 0x0, 0x1, 0x27e}, &(0x7f00006d1000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x45d8, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000000040)) openat$vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vsock\x00', 0x10001, 0x0) r1 = shmget$private(0x0, 0x400000, 0x0, &(0x7f0000c00000/0x400000)=nil) shmat(r1, &(0x7f0000ce9000/0x1000)=nil, 0x7000) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/35) 03:08:38 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x4000000]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) [ 978.726754][ T28] audit: type=1804 audit(1600744118.280:1403): pid=12183 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1252/file1/bus" dev="sda1" ino=17155 res=1 errno=0 [ 978.852801][ T28] audit: type=1804 audit(1600744118.280:1404): pid=12183 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1252/file1/bus" dev="sda1" ino=17155 res=1 errno=0 03:08:38 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x5000000]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) [ 978.998401][ T28] audit: type=1804 audit(1600744118.280:1405): pid=12183 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1252/file1/bus" dev="sda1" ino=17155 res=1 errno=0 03:08:38 executing program 1: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$TCSETXW(0xffffffffffffffff, 0x5435, &(0x7f0000000000)={0x5, 0x4, [0xfeff, 0x7ff, 0x200, 0x9, 0x3ff], 0x2}) prctl$PR_SET_FPEMU(0xa, 0x2) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0xfffffffa, 0x0, 0x1, 0x27e}, &(0x7f00006d1000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x45d8, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000000040)) r1 = shmget$private(0x0, 0x400000, 0x0, &(0x7f0000c00000/0x400000)=nil) shmat(r1, &(0x7f0000ce9000/0x1000)=nil, 0x7000) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/35) 03:08:38 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x6000000]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:08:39 executing program 1: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$TCSETXW(0xffffffffffffffff, 0x5435, &(0x7f0000000000)={0x5, 0x4, [0xfeff, 0x7ff, 0x200, 0x9, 0x3ff], 0x2}) prctl$PR_SET_FPEMU(0xa, 0x2) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0xfffffffa, 0x0, 0x1, 0x27e}, &(0x7f00006d1000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x45d8, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000000040)) r1 = shmget$private(0x0, 0x400000, 0x0, &(0x7f0000c00000/0x400000)=nil) shmat(r1, &(0x7f0000ce9000/0x1000)=nil, 0x7000) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/35) 03:08:39 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x7000000]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:08:39 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x8000000]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:08:39 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x80) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x1a7580, 0x0) ioctl$RTC_PIE_ON(r5, 0x7005) r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r6, 0x800) lseek(r6, 0x1, 0x0) r7 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) sendfile(r6, r7, 0x0, 0x8400fffffffa) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:08:39 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x9000000]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:08:39 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0xa000000]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:08:39 executing program 1: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$TCSETXW(0xffffffffffffffff, 0x5435, &(0x7f0000000000)={0x5, 0x4, [0xfeff, 0x7ff, 0x200, 0x9, 0x3ff], 0x2}) prctl$PR_SET_FPEMU(0xa, 0x2) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0xfffffffa, 0x0, 0x1, 0x27e}, &(0x7f00006d1000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r1 = shmget$private(0x0, 0x400000, 0x0, &(0x7f0000c00000/0x400000)=nil) shmat(r1, &(0x7f0000ce9000/0x1000)=nil, 0x7000) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/35) 03:08:39 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0xb000000]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:08:40 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0xc000000]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:08:40 executing program 1: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$TCSETXW(0xffffffffffffffff, 0x5435, &(0x7f0000000000)={0x5, 0x4, [0xfeff, 0x7ff, 0x200, 0x9, 0x3ff], 0x2}) prctl$PR_SET_FPEMU(0xa, 0x2) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0xfffffffa, 0x0, 0x1, 0x27e}, &(0x7f00006d1000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r1 = shmget$private(0x0, 0x400000, 0x0, &(0x7f0000c00000/0x400000)=nil) shmat(r1, &(0x7f0000ce9000/0x1000)=nil, 0x7000) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/35) 03:08:40 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0xd000000]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:08:40 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0xe000000]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:08:40 executing program 1: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$TCSETXW(0xffffffffffffffff, 0x5435, &(0x7f0000000000)={0x5, 0x4, [0xfeff, 0x7ff, 0x200, 0x9, 0x3ff], 0x2}) prctl$PR_SET_FPEMU(0xa, 0x2) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0xfffffffa, 0x0, 0x1, 0x27e}, &(0x7f00006d1000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r1 = shmget$private(0x0, 0x400000, 0x0, &(0x7f0000c00000/0x400000)=nil) shmat(r1, &(0x7f0000ce9000/0x1000)=nil, 0x7000) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/35) 03:08:40 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x10000000]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:08:40 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0xa000000000003, 0x0) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:08:40 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x11000000]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:08:41 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x12000000]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:08:41 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x206d5000]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:08:41 executing program 1: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$TCSETXW(0xffffffffffffffff, 0x5435, &(0x7f0000000000)={0x5, 0x4, [0xfeff, 0x7ff, 0x200, 0x9, 0x3ff], 0x2}) prctl$PR_SET_FPEMU(0xa, 0x2) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0xfffffffa, 0x0, 0x1, 0x27e}, &(0x7f00006d1000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f0000c00000/0x400000)=nil) shmat(r0, &(0x7f0000ce9000/0x1000)=nil, 0x7000) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000280)=""/35) 03:08:41 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x25000000]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:08:42 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x3f000000]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) [ 983.124840][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 983.124851][ T28] audit: type=1804 audit(1600744122.680:1423): pid=12331 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1254/file1/bus" dev="loop0" ino=304 res=1 errno=0 [ 983.256982][ T28] audit: type=1804 audit(1600744122.710:1424): pid=12317 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1254/file1/bus" dev="loop0" ino=304 res=1 errno=0 03:08:42 executing program 1: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$TCSETXW(0xffffffffffffffff, 0x5435, &(0x7f0000000000)={0x5, 0x4, [0xfeff, 0x7ff, 0x200, 0x9, 0x3ff], 0x2}) prctl$PR_SET_FPEMU(0xa, 0x2) r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f0000c00000/0x400000)=nil) shmat(r0, &(0x7f0000ce9000/0x1000)=nil, 0x7000) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000280)=""/35) [ 983.400731][ T28] audit: type=1804 audit(1600744122.710:1425): pid=12332 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1254/file1/bus" dev="loop0" ino=304 res=1 errno=0 [ 983.487484][ T28] audit: type=1804 audit(1600744122.710:1426): pid=12333 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1254/file1/bus" dev="loop0" ino=304 res=1 errno=0 03:08:43 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x40000000]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:08:43 executing program 1: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$TCSETXW(0xffffffffffffffff, 0x5435, &(0x7f0000000000)={0x5, 0x4, [0xfeff, 0x7ff, 0x200, 0x9, 0x3ff], 0x2}) prctl$PR_SET_FPEMU(0xa, 0x2) r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f0000c00000/0x400000)=nil) shmat(r0, &(0x7f0000ce9000/0x1000)=nil, 0x7000) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000280)=""/35) 03:08:43 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x42000000]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:08:43 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6900) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r4, 0xc01c64ad, &(0x7f0000000140)={0x9, 0x6ccd, 0x6, 0x7, 0x2b9034fa, 0x7ff, 0x9}) fcntl$setsig(0xffffffffffffffff, 0xa, 0xa) ftruncate(r3, 0x800) lseek(r3, 0x1, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x8400fffffffa) sendfile(r1, r2, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 03:08:44 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x60030000]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:08:44 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0xfeffffff]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) [ 984.774072][ T28] audit: type=1804 audit(1600744124.330:1427): pid=12386 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1255/bus" dev="sda1" ino=16732 res=1 errno=0 [ 984.839009][ T28] audit: type=1804 audit(1600744124.370:1428): pid=12386 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1255/bus" dev="sda1" ino=16732 res=1 errno=0 [ 984.950158][ T28] audit: type=1804 audit(1600744124.380:1429): pid=12386 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1255/bus" dev="sda1" ino=16732 res=1 errno=0 03:08:44 executing program 5: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000380)={0x0, 0xfb, 0x55, 0x4, 0x9, "ebc82bbd341fc541866c525688cb3cb8", "5df96c94aab7eb7dee9b79c0dbe05503bd03cff09879b357ee7af87c9e30ade8fbf4b2c2945d930fd45f1671c90b3fb4530469f7a5f5c8bea0798373ef144a77"}, 0x55, 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000040)=ANY=[], 0xfd30) r1 = syz_io_uring_setup(0x78c5, &(0x7f0000000300)={0x0, 0x0, 0x4, 0x0, 0x119, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x45d8, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x0, 0x204}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x12345, {0x0, r5}}, 0x0) r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x800, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000140)={0xcdf2, 0x0, 0x2}) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000280)={0x9, r7}) ioctl$DRM_IOCTL_AGP_UNBIND(r6, 0x40106437, &(0x7f00000001c0)={r7}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r6, 0x4140, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYRES64], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x74, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x101}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_PEERS={0x10, 0x8, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7}]}]}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x74}, 0x1, 0x0, 0x0, 0x404c801}, 0x20040000) 03:08:44 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0xffff8000]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:08:44 executing program 5: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x80, &(0x7f0000000140)=0x205, 0x0, 0x4) syz_io_uring_setup(0x45d8, &(0x7f0000000300), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)) mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x9, 0xb, 0x1) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x12345, {0x0, r4}}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) 03:08:45 executing program 1: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$TCSETXW(0xffffffffffffffff, 0x5435, &(0x7f0000000000)={0x5, 0x4, [0xfeff, 0x7ff, 0x200, 0x9, 0x3ff], 0x2}) prctl$PR_SET_FPEMU(0xa, 0x2) r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f0000c00000/0x400000)=nil) shmat(r0, &(0x7f0000ce9000/0x1000)=nil, 0x7000) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000280)=""/35) 03:08:45 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0xffffc000]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) [ 985.392623][ T28] audit: type=1804 audit(1600744124.950:1430): pid=12395 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1255/file1/bus" dev="loop0" ino=305 res=1 errno=0 [ 985.520136][ T28] audit: type=1804 audit(1600744124.950:1431): pid=12396 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1255/file1/bus" dev="loop0" ino=305 res=1 errno=0 [ 985.709751][ T28] audit: type=1804 audit(1600744124.950:1432): pid=12396 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1255/file1/bus" dev="loop0" ino=305 res=1 errno=0 03:08:45 executing program 5: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x45d8, &(0x7f0000000080)={0x0, 0xc60b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x6000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x12345, {0x0, r4}}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) 03:08:45 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x1, 0x0) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x1b9701, 0x60) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x64000) io_submit(0x0, 0x6, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2703000000000009, 0x8003f00, 0x3, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x3000}]) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000100), &(0x7f0000000140)=0x4) 03:08:45 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0xfffffffe]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:08:45 executing program 5: r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x4) preadv(r0, &(0x7f0000000780)=[{&(0x7f0000000300)=""/241, 0xf1}, {&(0x7f0000000480)=""/203, 0xcb}, {&(0x7f0000000580)=""/252, 0xfc}, {&(0x7f0000000680)=""/68, 0x44}, {&(0x7f0000000700)=""/102, 0x66}], 0x5, 0x1f, 0x7fff) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = syz_io_uring_setup(0x7a67, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x3, 0xeb}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x45d8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfffffffa, 0x1ee}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x12345, {0x0, r5}}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) 03:08:46 executing program 1: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$TCSETXW(0xffffffffffffffff, 0x5435, &(0x7f0000000000)={0x5, 0x4, [0xfeff, 0x7ff, 0x200, 0x9, 0x3ff], 0x2}) r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f0000c00000/0x400000)=nil) shmat(r0, &(0x7f0000ce9000/0x1000)=nil, 0x7000) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000280)=""/35) 03:08:46 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:08:46 executing program 5: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x45d8, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) fcntl$setstatus(r4, 0x4, 0x64000) io_submit(r5, 0x6, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2703000000000009, 0x8003f00, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r4, 0x800c6613, &(0x7f0000000000)=@v2={0x2, @aes128, 0x0, [], "f0ac5b890b86de86f56caaf93aa593e4"}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x40000, 0x12345, {0x0, r6}}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) fcntl$addseals(r7, 0x409, 0x1) 03:08:46 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x2]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:08:47 executing program 5: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) fcntl$setstatus(r0, 0x4, 0x64000) io_submit(r1, 0x6, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2703000000000009, 0x8003f00, 0x3, 0x1, 0x0, r0, &(0x7f0000000000), 0x3000}]) r2 = syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x3, 0x0, 0x3, 0x0, 0x0, r0}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = syz_io_uring_setup(0x45d8, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0x0, 0x4}) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x12345, {0x0, r7}}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) 03:08:47 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x3]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:08:47 executing program 5: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) write$snddsp(0xffffffffffffffff, &(0x7f0000000480)="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", 0x1000) syz_io_uring_setup(0x45d8, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x12345, {0x0, r4}}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) 03:08:47 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x4]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:08:47 executing program 5: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0) syz_io_uring_setup(0x45d8, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x4a) ioctl$PERF_EVENT_IOC_QUERY_BPF(r4, 0xc008240a, &(0x7f0000000280)={0x1, 0x0, [0x0]}) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x12345, {0x0, r5}}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) 03:08:48 executing program 5: clone(0x2006c576c7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x45d8, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) read$char_usb(0xffffffffffffffff, &(0x7f0000000000)=""/40, 0x28) r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) fcntl$setstatus(r2, 0x4, 0x64000) io_submit(r3, 0x6, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2703000000000009, 0x8003f00, 0x3, 0x1, 0x0, r2, &(0x7f0000000000), 0x3000}]) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f00000001c0)) syz_io_uring_submit(r0, 0x0, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x12345, {0x0, r1}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x450e, 0x0, 0x0, 0x0, 0x0) 03:08:48 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x5]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:08:48 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_S390_UCAS_UNMAP(0xffffffffffffffff, 0x4018ae51, &(0x7f00000001c0)={0x5, 0xffff, 0x3}) r2 = dup2(r1, r0) r3 = syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./bus\x00', 0xff, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x8400, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x6900) ftruncate(r4, 0x800) lseek(0xffffffffffffffff, 0x7, 0x2) r5 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x0, r3, 0x7fffffff, 0x800, 0xfffffffffffffe00, 0xffff}) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r7 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x1, 0x0) r8 = open(&(0x7f0000000140)='./file1\x00', 0x0, 0x81) sendfile(r7, r8, 0x0, 0x8400fffffffa) sendfile(r4, r6, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:08:49 executing program 1: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$TCSETXW(0xffffffffffffffff, 0x5435, &(0x7f0000000000)={0x5, 0x4, [0xfeff, 0x7ff, 0x200, 0x9, 0x3ff], 0x2}) r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f0000c00000/0x400000)=nil) shmat(r0, &(0x7f0000ce9000/0x1000)=nil, 0x7000) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000280)=""/35) 03:08:49 executing program 5: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x9) r0 = syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x45d8, &(0x7f0000000080)={0x0, 0x0, 0x10, 0x0, 0x8000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x12345, {0x0, r4}}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) 03:08:49 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x6]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:08:49 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) r3 = syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x6900) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r6, 0x800) r7 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r7, &(0x7f0000000040)=ANY=[], 0xffffff7d) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r3, &(0x7f0000000100)) lseek(r6, 0x1, 0x0) r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r6, r8, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 990.613687][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 990.613777][ T28] audit: type=1804 audit(1600744130.171:1438): pid=12601 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1258/file1/bus" dev="loop0" ino=306 res=1 errno=0 03:08:50 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x7]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) [ 990.689171][ T28] audit: type=1804 audit(1600744130.211:1439): pid=12601 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1258/file1/bus" dev="loop0" ino=306 res=1 errno=0 03:08:50 executing program 5: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x45d8, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)) ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, &(0x7f0000000340)) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x100, 0x0) write$FUSE_NOTIFY_STORE(r4, &(0x7f0000000480)=ANY=[@ANYBLOB="2d0000000400000000000000000000000500000000000000000000000008000005000000000000000000210000cdf7b605f2c38e0246c45461ff64d4350bd5c76d1933a10dd1132d9a01fa3b113fc75320a9a8099be8b2723bb41704d26f777328068c652af0b9118210b68c888bbf620a9ad118e57fc64bf38fe5e1242d5eacb50611d3bf0d2314ad27fff3cf2a3e6411848fab077a126d916888ebf876c953d6e9678c603186ca3b5ae97abe8976652dfd3f1ae612e684b3715d2634cab79fd437fdc2fd65bcc4b1a349d7dd"], 0x2d) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x12345, {0x0, r5}}, 0x0) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$TIOCGSID(r6, 0x5429, &(0x7f0000000300)) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) [ 990.839583][ T28] audit: type=1804 audit(1600744130.211:1440): pid=12601 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1258/file1/bus" dev="loop0" ino=306 res=1 errno=0 03:08:50 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x8]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) [ 991.171625][ T28] audit: type=1804 audit(1600744130.731:1441): pid=12615 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1258/file1/bus" dev="loop0" ino=306 res=1 errno=0 03:08:50 executing program 1: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f0000c00000/0x400000)=nil) shmat(r0, &(0x7f0000ce9000/0x1000)=nil, 0x7000) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000280)=""/35) [ 991.353983][ T28] audit: type=1804 audit(1600744130.911:1442): pid=12615 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1258/file1/bus" dev="loop0" ino=306 res=1 errno=0 [ 991.459257][ T28] audit: type=1804 audit(1600744130.911:1443): pid=12615 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1258/file1/bus" dev="loop0" ino=306 res=1 errno=0 03:08:51 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x9]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) [ 991.639905][ T28] audit: type=1804 audit(1600744131.101:1444): pid=12622 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1258/file1/bus" dev="loop0" ino=306 res=1 errno=0 03:08:51 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0xa]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:08:51 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r2, 0xffffffffffffffff, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) io_submit(0x0, 0x6, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2703000000000009, 0x8003f00, 0x3, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x3000}]) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000100)='security.evm\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="040818"], 0x7, 0xc40718eb7b60cc28) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x1, 0x0) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:08:51 executing program 1: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f0000c00000/0x400000)=nil) shmat(r0, &(0x7f0000ce9000/0x1000)=nil, 0x7000) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000280)=""/35) 03:08:51 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0xb]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:08:51 executing program 1: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f0000c00000/0x400000)=nil) shmat(r0, &(0x7f0000ce9000/0x1000)=nil, 0x7000) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000280)=""/35) 03:08:51 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0xc]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) [ 992.340536][ T28] audit: type=1804 audit(1600744131.901:1445): pid=12667 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1259/file1/bus" dev="loop0" ino=307 res=1 errno=0 03:08:51 executing program 1: r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f0000c00000/0x400000)=nil) shmat(r0, &(0x7f0000ce9000/0x1000)=nil, 0x7000) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000280)=""/35) 03:08:52 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0xd]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) [ 992.448517][ T28] audit: type=1804 audit(1600744131.901:1446): pid=12667 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1259/file1/bus" dev="loop0" ino=307 res=1 errno=0 [ 992.551200][ T28] audit: type=1804 audit(1600744131.901:1447): pid=12667 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1259/file1/bus" dev="loop0" ino=307 res=1 errno=0 03:08:52 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0xe]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:08:52 executing program 5: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x25, 0x0, "5e09d7e32812619e8aad15499903d847de8f0cae642a2aef6175a22b529c21711ea66d829aafc0d76fbf32dbfe9c553837eb57ccf8c9561b3c2e123df4c02c833ee23d06076644d32c3f436e064e5571"}, 0xd8) r0 = syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000040)=ANY=[], 0xfd30) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f0000000480)={{0x0, 0x6, 0x5, 0x8000, 'syz1\x00', 0x2d}, 0x2, 0x2, 0x86de, 0x0, 0x1, 0x800, 'syz0\x00', &(0x7f0000000280)=['-\x00'], 0x2, [], [0xb48, 0xff, 0x2]}) syz_io_uring_setup(0x45d8, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x12345, {0x0, r5}}, 0x0) ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) 03:08:52 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x10]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:08:52 executing program 1: r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f0000c00000/0x400000)=nil) shmat(0x0, &(0x7f0000ce9000/0x1000)=nil, 0x7000) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000280)=""/35) 03:08:52 executing program 5: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x12345, {0x0, r3}}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) 03:08:56 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x11]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:08:57 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) getsockopt$inet6_buf(r1, 0x29, 0xcc, &(0x7f0000000100)=""/12, &(0x7f0000000140)=0xc) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x1, 0x0) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:08:57 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x12]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) [ 998.130738][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 998.130751][ T28] audit: type=1804 audit(1600744137.691:1452): pid=12730 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1260/bus" dev="sda1" ino=16542 res=1 errno=0 03:08:57 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x25]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:08:57 executing program 1: r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f0000c00000/0x400000)=nil) shmat(0x0, &(0x7f0000ce9000/0x1000)=nil, 0x7000) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000280)=""/35) 03:08:57 executing program 5: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x45d8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x12345, {0x0, r4}}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) [ 998.292391][ T28] audit: type=1804 audit(1600744137.741:1453): pid=12730 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1260/bus" dev="sda1" ino=16542 res=1 errno=0 [ 998.451285][ T28] audit: type=1804 audit(1600744137.741:1454): pid=12730 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1260/bus" dev="sda1" ino=16542 res=1 errno=0 [ 998.871927][ T28] audit: type=1804 audit(1600744138.431:1455): pid=12764 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1260/file1/bus" dev="loop0" ino=308 res=1 errno=0 03:08:58 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x42]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) [ 999.032396][ T28] audit: type=1804 audit(1600744138.431:1456): pid=12742 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1260/file1/bus" dev="loop0" ino=308 res=1 errno=0 [ 999.162557][ T28] audit: type=1804 audit(1600744138.461:1457): pid=12761 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1260/file1/bus" dev="loop0" ino=308 res=1 errno=0 03:08:58 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x60]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:08:58 executing program 5: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x1}) syz_io_uring_setup(0x45d8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)) clock_nanosleep(0x4, 0x0, &(0x7f0000000400)={0x0, 0x989680}, &(0x7f0000000480)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x12345, {0x0, r4}}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x10) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xfd30) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r5, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x408808}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x7, 0x1, 0x5, 0x0, 0x0, {0xc, 0x0, 0xa}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x10) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000280)={0x1, 0x7e}, 0x2) 03:08:59 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x300]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:09:00 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYRES64], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x804}, 0x90) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x1, 0x0) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:09:00 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x360]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:09:00 executing program 5: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000)=0x7, 0x4) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000480)='/dev/nvme-fabrics\x00', 0x2000, 0x0) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="84000000010703000000000013000000f00461d44e462ff49b4cec0f5d74a700000000800000010c00064000dfffffffffff030c000340000000000000000e0c00034000000000000000012c00078008000140000026b8080001400900054b08000100024000000065080001400000000508000540000000000c000340000000000000880618568dbccec97033a268ecf561836e513fa300d87c12edeae996df1c356a0af610892b1834e9e20600cf2c78e757f522"], 0x84}, 0x1, 0x0, 0x0, 0x80}, 0x4010) r1 = syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = fsmount(0xffffffffffffffff, 0x0, 0x84) r5 = accept4$rose(0xffffffffffffffff, &(0x7f0000000280)=@short={0xb, @remote, @default, 0x1, @null}, &(0x7f0000000300)=0x1c, 0x80000) ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0205647, &(0x7f00000003c0)={0x0, 0x7ff, 0xffffffff, r5, 0x0, &(0x7f0000000380)={0x9a0001, 0x0, [], @p_u32=&(0x7f0000000340)=0x7}}) syz_io_uring_setup(0x45d8, &(0x7f0000000080), &(0x7f00006d6000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x40, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_io_uring_submit(r6, r3, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x12345, {0x0, r7}}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) pkey_alloc(0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x64000) io_submit(0x0, 0x6, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2703000000000009, 0x8003f00, 0x3, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x3000}]) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) [ 1000.819173][ T28] audit: type=1804 audit(1600744140.371:1458): pid=12804 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1261/bus" dev="sda1" ino=16527 res=1 errno=0 [ 1000.919756][ T28] audit: type=1804 audit(1600744140.401:1459): pid=12804 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1261/bus" dev="sda1" ino=16527 res=1 errno=0 [ 1001.064940][ T28] audit: type=1804 audit(1600744140.421:1460): pid=12804 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1261/bus" dev="sda1" ino=16527 res=1 errno=0 03:09:00 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x500]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:09:00 executing program 5: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x45d8, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x12345, {0x0, r4}}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'syztnl1\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x40, 0x80, 0xfffff8f5, 0x5, {{0x11, 0x4, 0x1, 0x6, 0x44, 0x64, 0x0, 0x81, 0x29, 0x0, @loopback, @loopback, {[@ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x2c, 0x3, [{0x6, 0x7, "d23839bf7d"}, {0x6, 0xa, "89ee0240905b7e85"}, {0x2, 0x3, "df"}, {0x1, 0xf, "6d80af85997feb7a47ee54582e"}, {0x2, 0x3, "94"}]}]}}}}}) 03:09:01 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x600]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) [ 1001.529771][ T28] audit: type=1804 audit(1600744141.091:1461): pid=12841 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1261/file1/bus" dev="loop0" ino=309 res=1 errno=0 03:09:01 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x700]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:09:01 executing program 1: r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f0000c00000/0x400000)=nil) shmat(0x0, &(0x7f0000ce9000/0x1000)=nil, 0x7000) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000280)=""/35) 03:09:01 executing program 5: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) fcntl$setstatus(r0, 0x4, 0x64000) io_submit(r1, 0x6, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2703000000000009, 0x8003f00, 0x3, 0x1, 0x0, r0, &(0x7f0000000000), 0x3000}]) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000480)={0xe5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x3f, "f82558549bc6cd"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000300)={{r2, 0x20, 0x80000001, 0x1, 0x8, 0xff, 0x0, 0x0, 0x5, 0x6, 0xffff3127, 0x5, 0x0, 0x45820f7d, 0x6}, 0x40, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r3 = syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x45d8, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r5, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x12345, {0x0, r7}}, 0x0) io_uring_enter(r3, 0x450e, 0x0, 0x0, 0x0, 0x0) connect$x25(0xffffffffffffffff, &(0x7f0000000000)={0x9, @remote={[], 0x3}}, 0x12) 03:09:01 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x900]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:09:01 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x4) ftruncate(r5, 0x800) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x2, 0x0) r7 = accept4$ax25(r5, &(0x7f0000000200)={{}, [@rose, @remote, @default, @default, @netrom, @netrom, @bcast, @default]}, &(0x7f0000000140)=0xffffffffffffff20, 0x80000) kcmp(0x0, 0x0, 0x4, r6, r7) lseek(r5, 0x1, 0x0) r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffa) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:09:01 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0xa00]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:09:02 executing program 1: r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f0000c00000/0x400000)=nil) shmat(r0, &(0x7f0000ce9000/0x1000)=nil, 0x0) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000280)=""/35) 03:09:02 executing program 5: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000400)='/dev/vcsu#\x00', 0x100, 0x315080) ioctl$SG_GET_VERSION_NUM(r0, 0x2282, &(0x7f00000005c0)) r1 = syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)=0x0) r4 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000040)=ANY=[], 0xfd30) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r4, 0xc0a85320, &(0x7f0000000300)={{0x7f, 0x40}, 'port0\x00', 0xce, 0x10008, 0xfff, 0x2, 0x1000, 0x1, 0x0, 0x0, 0x0, 0x3}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xfd30) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f0000000540)={0x1ff, 0x1, 0x3fccc838}) sendmsg$NLBL_UNLABEL_C_LIST(r4, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)={0xac, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:crond_initrc_exec_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:hald_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'geneve0\x00'}]}, 0xac}, 0x1, 0x0, 0x0, 0x815}, 0x8884) r6 = syz_io_uring_setup(0x45d8, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)) ioctl$F2FS_IOC_FLUSH_DEVICE(r6, 0x4008f50a, &(0x7f0000000600)={0x1, 0x20}) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r3, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x12345, {0x0, r8}}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) 03:09:02 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0xb00]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) [ 1003.340015][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 1003.340077][ T28] audit: type=1804 audit(1600744142.901:1464): pid=12884 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1262/bus" dev="sda1" ino=17073 res=1 errno=0 03:09:03 executing program 1: r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f0000c00000/0x400000)=nil) shmat(r0, &(0x7f0000ce9000/0x1000)=nil, 0x0) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000280)=""/35) [ 1003.551658][ T28] audit: type=1804 audit(1600744142.951:1465): pid=12884 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1262/bus" dev="sda1" ino=17073 res=1 errno=0 [ 1003.746345][ T28] audit: type=1804 audit(1600744143.031:1466): pid=12896 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1262/bus" dev="sda1" ino=17073 res=1 errno=0 [ 1003.907896][ T28] audit: type=1804 audit(1600744143.301:1467): pid=12899 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1262/bus" dev="sda1" ino=17073 res=1 errno=0 [ 1004.119590][ T28] audit: type=1804 audit(1600744143.301:1468): pid=12903 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1262/bus" dev="sda1" ino=17073 res=1 errno=0 [ 1004.305314][ T28] audit: type=1804 audit(1600744143.341:1469): pid=12904 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1262/bus" dev="sda1" ino=17073 res=1 errno=0 [ 1004.496222][ T28] audit: type=1804 audit(1600744143.401:1470): pid=12904 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1262/bus" dev="sda1" ino=17073 res=1 errno=0 03:09:04 executing program 5: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0xf8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)=0x0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) fcntl$setstatus(r3, 0x4, 0x64000) io_submit(r4, 0x6, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2703000000000009, 0x8003f00, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) chmod(&(0x7f0000000480)='./bus\x00', 0x1c0) ioctl$BLKPG(r3, 0x1269, &(0x7f0000000400)={0x401, 0x1ff, 0x5c, &(0x7f0000000340)="35e8299571e3722606511882045c093b28d71857bf7ad7b25177a8797e0ffefa724f9b277c8df3f0a6d1917943347c17a6b315701bec19bd9ec3a23bc66c61a336bb719b8e54ab587e2031686acf359436953091deccda5e39118c32"}) ioctl$KVM_GET_DEVICE_ATTR(r3, 0x4018aee2, &(0x7f0000000300)={0x0, 0xffff, 0xfff, &(0x7f0000000280)=0x8}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = syz_io_uring_setup(0x45d8, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x12345, {0x0, r7}}, 0x0) fcntl$getownex(r5, 0x10, &(0x7f0000000000)={0x0, 0x0}) prctl$PR_SET_PTRACER(0x59616d61, r8) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) 03:09:04 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0xc00]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) [ 1005.727965][T12904] syz-executor.0 (12904) used greatest stack depth: 8768 bytes left 03:09:05 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0xd00]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:09:06 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0xe00]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:09:06 executing program 1: r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f0000c00000/0x400000)=nil) shmat(r0, &(0x7f0000ce9000/0x1000)=nil, 0x0) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000280)=""/35) 03:09:06 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x1100]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:09:08 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x1200]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:09:08 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000140)='./bus\x00', 0x121281, 0x10f) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x1, 0x0) r6 = open(&(0x7f00000001c0)='./file1\x00', 0x10281, 0xc0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r3, r4, 0x0, 0x8400fffffffa) write$P9_RLOPEN(r4, &(0x7f0000000100)={0x18, 0xd, 0x2, {{0x20, 0x2, 0x8}, 0x1}}, 0x18) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:09:08 executing program 5: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0xff7ffffffffffffd) r0 = syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) fcntl$setstatus(r3, 0x4, 0x64000) io_submit(r4, 0x6, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2703000000000009, 0x8003f00, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) read(r3, &(0x7f0000000000)=""/80, 0x50) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x12345, {0x0, r5}}, 0x0) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000480)={0x7, "58e9f3fcdce29300ddc2cb3803ecde6b3a9b9bae2038203f3b79ce36fe90331f1af1ad07c1744a544c397d171c7cb2e594b5791659efcbf5f5669d506159e7c84b1f38afaad9d3ed3bdfbc5c2b51483ee223201429091befe7504b824806a275912def6560fcc98be712f543f342dd09757dc6ba97bd859c1354eb76df2e63ea0d7fe1680c8eb649f20dd8c9490df507b84dcbb0d6143e36f56e18f0686808c1b91bca6cf9be8ed51e20ca72503b9158ebf7116cdeb908f599f5619cfb8d4cfc4eea10f41aea1bfad0d9402b7024a4b1bc884bb3d5b268141a8f8c45dd532f0525e343833fe809fdd76b0fa84544d4edb169ee51a23dc2b273ebeeb1c99c9c30f21837db473a8923aa0bffc6b551a028009001ac888f0bf8db9047771d37c56f9a2e94a94fb2263d1316717e1ef72c09084658b257dec39c23dc0dec1c004aa6f455c36b355e3349e88f8f3daf0c4c0d04a84bac54b73005b3c69c0a06e067ef5883177307602f40014e1c3b0acb9389a84e8092eb5bd51bd42e3cb720e95192ce79530771641aa3d0dc8ab9af1d06b26c68fed8c0c369afd4ae878d56907cac453cf6b1dc6283fdd716b7c5f5fa7c5997868cc7d579cde4d30fd198bc52df1257be544655084f79d80b1b68ed13105058582638cc3242da74a88c91a2189d22c1ba82be0370dae5a20e7f32176ecd7239a2fbe936545824eaf129ae6be7809a"}) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) 03:09:08 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x2500]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:09:09 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x4) ftruncate(r5, 0x800) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x2, 0x0) r7 = accept4$ax25(r5, &(0x7f0000000200)={{}, [@rose, @remote, @default, @default, @netrom, @netrom, @bcast, @default]}, &(0x7f0000000140)=0xffffffffffffff20, 0x80000) kcmp(0x0, 0x0, 0x4, r6, r7) lseek(r5, 0x1, 0x0) r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffa) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:09:09 executing program 1: r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f0000c00000/0x400000)=nil) shmat(r0, &(0x7f0000ce9000/0x1000)=nil, 0x7000) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000280)=""/35) 03:09:09 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x3f00]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) [ 1010.053912][ T28] audit: type=1804 audit(1600744149.611:1471): pid=12972 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1572/file1/bus" dev="loop5" ino=310 res=1 errno=0 [ 1010.231186][ T28] audit: type=1804 audit(1600744149.641:1472): pid=12972 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1572/file1/bus" dev="loop5" ino=310 res=1 errno=0 [ 1010.799590][ T28] audit: type=1804 audit(1600744150.361:1473): pid=12972 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1572/file1/bus" dev="loop5" ino=310 res=1 errno=0 03:09:11 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x4000]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:09:12 executing program 1: r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f0000c00000/0x400000)=nil) shmat(r0, &(0x7f0000ce9000/0x1000)=nil, 0x7000) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000280)=""/35) 03:09:12 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x4) ftruncate(r5, 0x800) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x2, 0x0) r7 = accept4$ax25(r5, &(0x7f0000000200)={{}, [@rose, @remote, @default, @default, @netrom, @netrom, @bcast, @default]}, &(0x7f0000000140)=0xffffffffffffff20, 0x80000) kcmp(0x0, 0x0, 0x4, r6, r7) lseek(r5, 0x1, 0x0) r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffa) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:09:12 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x4200]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) [ 1013.522631][ T28] audit: type=1804 audit(1600744153.081:1474): pid=13003 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1573/file1/bus" dev="loop5" ino=311 res=1 errno=0 03:09:13 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x6000]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) [ 1013.759399][ T28] audit: type=1804 audit(1600744153.111:1475): pid=13003 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1573/file1/bus" dev="loop5" ino=311 res=1 errno=0 [ 1013.912954][ T28] audit: type=1804 audit(1600744153.111:1476): pid=13003 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1573/file1/bus" dev="loop5" ino=311 res=1 errno=0 03:09:14 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x4) ftruncate(r5, 0x800) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x2, 0x0) r7 = accept4$ax25(r5, &(0x7f0000000200)={{}, [@rose, @remote, @default, @default, @netrom, @netrom, @bcast, @default]}, &(0x7f0000000140)=0xffffffffffffff20, 0x80000) kcmp(0x0, 0x0, 0x4, r6, r7) lseek(r5, 0x1, 0x0) r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffa) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:09:14 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x6003]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:09:14 executing program 1: r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f0000c00000/0x400000)=nil) shmat(r0, &(0x7f0000ce9000/0x1000)=nil, 0x7000) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000280)=""/35) 03:09:14 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000001c0)={0x0, 0x1e, 0x14}, &(0x7f0000000200)=ANY=[@ANYBLOB="656e633d706b63733120686173683d736861332d32323400000000000000000000000000000000000000000200"/79], &(0x7f0000000280)="cabf62c979141374c3452abea047428cccc86da100ae69ab6d0637fcb993", &(0x7f00000002c0)="73f9157f45f6ade754e366b902494d6aa3ad77a6") syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x400, 0x0) ioctl$VIDIOC_ENUMINPUT(r6, 0xc050561a, &(0x7f0000000140)={0x8000, "0fe1c25f1bd683d0622be6a6154bfe42f900000000000000000000f8ff00", 0x1, 0x1, 0x1, 0x80, 0x1040110}) ftruncate(r5, 0x800) lseek(r5, 0x1, 0x0) r7 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r5, r7, 0x0, 0x8400fffffffa) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:09:14 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x25000]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:09:15 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x40000]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:09:15 executing program 1: r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f0000c00000/0x400000)=nil) shmat(r0, &(0x7f0000ce9000/0x1000)=nil, 0x7000) shmctl$IPC_STAT(r0, 0x2, 0x0) 03:09:15 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x80000]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) [ 1015.733863][ T28] audit: type=1804 audit(1600744155.291:1477): pid=13052 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1574/file1/bus" dev="loop5" ino=313 res=1 errno=0 [ 1015.785153][ T28] audit: type=1804 audit(1600744155.291:1478): pid=13045 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1264/file1/bus" dev="loop0" ino=312 res=1 errno=0 [ 1015.876931][ T28] audit: type=1804 audit(1600744155.291:1479): pid=13045 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1264/file1/bus" dev="loop0" ino=312 res=1 errno=0 03:09:15 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x400000]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) [ 1016.043918][ T28] audit: type=1804 audit(1600744155.321:1480): pid=13052 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1574/file1/bus" dev="loop5" ino=313 res=1 errno=0 [ 1016.211015][ T28] audit: type=1804 audit(1600744155.321:1481): pid=13052 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1574/file1/bus" dev="loop5" ino=313 res=1 errno=0 03:09:15 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x500200]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) [ 1016.451692][ T28] audit: type=1804 audit(1600744155.341:1482): pid=13045 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1264/file1/bus" dev="loop0" ino=312 res=1 errno=0 03:09:16 executing program 1: r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f0000c00000/0x400000)=nil) shmat(r0, &(0x7f0000ce9000/0x1000)=nil, 0x7000) shmctl$IPC_STAT(r0, 0x2, 0x0) [ 1016.712028][ T28] audit: type=1804 audit(1600744156.191:1483): pid=13071 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1264/file1/bus" dev="loop0" ino=312 res=1 errno=0 [ 1016.988747][ T28] audit: type=1804 audit(1600744156.201:1484): pid=13072 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1264/file1/bus" dev="loop0" ino=312 res=1 errno=0 [ 1017.180103][ T28] audit: type=1804 audit(1600744156.201:1485): pid=13060 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1264/file1/bus" dev="loop0" ino=312 res=1 errno=0 03:09:17 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x506d20]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) [ 1017.409207][ T28] audit: type=1804 audit(1600744156.211:1486): pid=13071 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1264/file1/bus" dev="loop0" ino=312 res=1 errno=0 03:09:17 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000140)='./bus\x00', 0x121281, 0x10f) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x1, 0x0) r6 = open(&(0x7f00000001c0)='./file1\x00', 0x10281, 0xc0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r3, r4, 0x0, 0x8400fffffffa) write$P9_RLOPEN(r4, &(0x7f0000000100)={0x18, 0xd, 0x2, {{0x20, 0x2, 0x8}, 0x1}}, 0x18) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:09:17 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) r4 = socket$caif_stream(0x25, 0x1, 0x0) ftruncate(r4, 0xe6b) lseek(r3, 0x0, 0x2) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r6, 0x800) lseek(r6, 0x1, 0x0) r7 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x8400fffffffa) sendfile(r3, r5, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:09:17 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000001c0)={0x0, 0x1e, 0x14}, &(0x7f0000000200)=ANY=[@ANYBLOB="656e633d706b63733120686173683d736861332d32323400000000000000000000000000000000000000000200"/79], &(0x7f0000000280)="cabf62c979141374c3452abea047428cccc86da100ae69ab6d0637fcb993", &(0x7f00000002c0)="73f9157f45f6ade754e366b902494d6aa3ad77a6") syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x400, 0x0) ioctl$VIDIOC_ENUMINPUT(r6, 0xc050561a, &(0x7f0000000140)={0x8000, "0fe1c25f1bd683d0622be6a6154bfe42f900000000000000000000f8ff00", 0x1, 0x1, 0x1, 0x80, 0x1040110}) ftruncate(r5, 0x800) lseek(r5, 0x1, 0x0) r7 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r5, r7, 0x0, 0x8400fffffffa) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:09:18 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x600000]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:09:20 executing program 1: r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f0000c00000/0x400000)=nil) shmat(r0, &(0x7f0000ce9000/0x1000)=nil, 0x7000) shmctl$IPC_STAT(r0, 0x2, 0x0) 03:09:20 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x80ffff]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:09:21 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000140)='./bus\x00', 0x121281, 0x10f) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x1, 0x0) r6 = open(&(0x7f00000001c0)='./file1\x00', 0x10281, 0xc0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r3, r4, 0x0, 0x8400fffffffa) write$P9_RLOPEN(r4, &(0x7f0000000100)={0x18, 0xd, 0x2, {{0x20, 0x2, 0x8}, 0x1}}, 0x18) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1021.749618][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 1021.749631][ T28] audit: type=1804 audit(1600744161.311:1490): pid=13111 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1265/file1/bus" dev="loop0" ino=314 res=1 errno=0 03:09:21 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0xc0ffff]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) [ 1021.927689][ T28] audit: type=1804 audit(1600744161.361:1491): pid=13111 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1265/file1/bus" dev="loop0" ino=314 res=1 errno=0 [ 1022.169623][ T28] audit: type=1804 audit(1600744161.361:1492): pid=13111 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1265/file1/bus" dev="loop0" ino=314 res=1 errno=0 03:09:22 executing program 1: r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f0000c00000/0x400000)=nil) shmat(r0, &(0x7f0000ce9000/0x1000)=nil, 0x0) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000280)=""/35) 03:09:22 executing program 5: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0xf8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)=0x0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) fcntl$setstatus(r3, 0x4, 0x64000) io_submit(r4, 0x6, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2703000000000009, 0x8003f00, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) chmod(&(0x7f0000000480)='./bus\x00', 0x1c0) ioctl$BLKPG(r3, 0x1269, &(0x7f0000000400)={0x401, 0x1ff, 0x5c, &(0x7f0000000340)="35e8299571e3722606511882045c093b28d71857bf7ad7b25177a8797e0ffefa724f9b277c8df3f0a6d1917943347c17a6b315701bec19bd9ec3a23bc66c61a336bb719b8e54ab587e2031686acf359436953091deccda5e39118c32"}) ioctl$KVM_GET_DEVICE_ATTR(r3, 0x4018aee2, &(0x7f0000000300)={0x0, 0xffff, 0xfff, &(0x7f0000000280)=0x8}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = syz_io_uring_setup(0x45d8, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x12345, {0x0, r7}}, 0x0) fcntl$getownex(r5, 0x10, &(0x7f0000000000)={0x0, 0x0}) prctl$PR_SET_PTRACER(0x59616d61, r8) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) 03:09:23 executing program 5: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0xf8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)=0x0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) fcntl$setstatus(r3, 0x4, 0x64000) io_submit(r4, 0x6, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2703000000000009, 0x8003f00, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) chmod(&(0x7f0000000480)='./bus\x00', 0x1c0) ioctl$BLKPG(r3, 0x1269, &(0x7f0000000400)={0x401, 0x1ff, 0x5c, &(0x7f0000000340)="35e8299571e3722606511882045c093b28d71857bf7ad7b25177a8797e0ffefa724f9b277c8df3f0a6d1917943347c17a6b315701bec19bd9ec3a23bc66c61a336bb719b8e54ab587e2031686acf359436953091deccda5e39118c32"}) ioctl$KVM_GET_DEVICE_ATTR(r3, 0x4018aee2, &(0x7f0000000300)={0x0, 0xffff, 0xfff, &(0x7f0000000280)=0x8}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = syz_io_uring_setup(0x45d8, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x12345, {0x0, r7}}, 0x0) fcntl$getownex(r5, 0x10, &(0x7f0000000000)={0x0, 0x0}) prctl$PR_SET_PTRACER(0x59616d61, r8) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) [ 1023.876243][ T28] audit: type=1804 audit(1600744163.431:1493): pid=13123 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1265/file1/bus" dev="loop0" ino=314 res=1 errno=0 03:09:23 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x1000000]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:09:23 executing program 1: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x1}) syz_io_uring_setup(0x45d8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)) clock_nanosleep(0x4, 0x0, &(0x7f0000000400)={0x0, 0x989680}, &(0x7f0000000480)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x12345, {0x0, r4}}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x10) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xfd30) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r5, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x408808}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x7, 0x1, 0x5, 0x0, 0x0, {0xc, 0x0, 0xa}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x10) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000280)={0x1, 0x7e}, 0x2) 03:09:24 executing program 5: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f0000c00000/0x400000)=nil) shmat(r0, &(0x7f0000ce9000/0x1000)=nil, 0x7000) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000280)=""/35) 03:09:24 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x2000000]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:09:25 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x1, 0x0) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r4, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x3, 0x8, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x80f3}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9300}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xfbfb}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x8}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x4000001) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:09:25 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x3000000]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:09:25 executing program 5: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f0000c00000/0x400000)=nil) shmat(r0, &(0x7f0000ce9000/0x1000)=nil, 0x7000) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000280)=""/35) 03:09:25 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x4000000]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:09:25 executing program 5: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f0000c00000/0x400000)=nil) shmat(r0, &(0x7f0000ce9000/0x1000)=nil, 0x7000) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000280)=""/35) 03:09:25 executing program 1: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x1}) syz_io_uring_setup(0x45d8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)) clock_nanosleep(0x4, 0x0, &(0x7f0000000400)={0x0, 0x989680}, &(0x7f0000000480)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x12345, {0x0, r4}}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x10) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xfd30) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r5, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x408808}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x7, 0x1, 0x5, 0x0, 0x0, {0xc, 0x0, 0xa}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x10) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000280)={0x1, 0x7e}, 0x2) 03:09:25 executing program 5: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f0000c00000/0x400000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000280)=""/35) [ 1026.329988][ T28] audit: type=1804 audit(1600744165.891:1494): pid=13176 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1266/file1/bus" dev="sda1" ino=16848 res=1 errno=0 03:09:25 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x5000000]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) [ 1026.472517][ T28] audit: type=1804 audit(1600744165.891:1495): pid=13176 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1266/file1/bus" dev="sda1" ino=16848 res=1 errno=0 03:09:26 executing program 5: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000280)=""/35) 03:09:26 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x6000000]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) [ 1026.609190][ T28] audit: type=1804 audit(1600744165.901:1496): pid=13176 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1266/file1/bus" dev="sda1" ino=16848 res=1 errno=0 03:09:26 executing program 5: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000280)=""/35) [ 1027.128601][ T28] audit: type=1804 audit(1600744166.681:1497): pid=13189 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1266/file1/bus" dev="sda1" ino=16848 res=1 errno=0 [ 1028.119210][ T28] audit: type=1804 audit(1600744167.681:1498): pid=13176 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1266/file1/bus" dev="sda1" ino=16848 res=1 errno=0 [ 1028.220911][ T28] audit: type=1804 audit(1600744167.681:1499): pid=13189 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1266/file1/bus" dev="sda1" ino=16848 res=1 errno=0 [ 1028.369550][ T28] audit: type=1804 audit(1600744167.681:1500): pid=13176 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1266/file1/bus" dev="sda1" ino=16848 res=1 errno=0 03:09:28 executing program 5: shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000280)=""/35) 03:09:28 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x7000000]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:09:28 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$USBDEVFS_CONNECTINFO(r4, 0x40085511, &(0x7f0000000100)) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x9, 0x3) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x100, 0x0) recvfrom$rxrpc(r6, &(0x7f0000000180)=""/84, 0x54, 0x40000002, &(0x7f0000000200)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e22, 0xf, @mcast1, 0x3}}, 0x24) r7 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r5, r7, 0x0, 0x8400fffffffa) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:09:28 executing program 1: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x1}) syz_io_uring_setup(0x45d8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)) clock_nanosleep(0x4, 0x0, &(0x7f0000000400)={0x0, 0x989680}, &(0x7f0000000480)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x12345, {0x0, r4}}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x10) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xfd30) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r5, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x408808}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x7, 0x1, 0x5, 0x0, 0x0, {0xc, 0x0, 0xa}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x10) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000280)={0x1, 0x7e}, 0x2) 03:09:29 executing program 1: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x1}) syz_io_uring_setup(0x45d8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)) clock_nanosleep(0x4, 0x0, &(0x7f0000000400)={0x0, 0x989680}, &(0x7f0000000480)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x12345, {0x0, r4}}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x10) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xfd30) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r5, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x408808}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x7, 0x1, 0x5, 0x0, 0x0, {0xc, 0x0, 0xa}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x10) 03:09:29 executing program 5: shmctl$IPC_STAT(0x0, 0x2, 0x0) 03:09:29 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x8000000]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:09:29 executing program 5: shmctl$IPC_STAT(0x0, 0x2, 0x0) 03:09:29 executing program 1: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x1}) syz_io_uring_setup(0x45d8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)) clock_nanosleep(0x4, 0x0, &(0x7f0000000400)={0x0, 0x989680}, &(0x7f0000000480)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x12345, {0x0, r4}}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x10) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xfd30) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r5, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x408808}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x7, 0x1, 0x5, 0x0, 0x0, {0xc, 0x0, 0xa}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x10) 03:09:29 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x9000000]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) [ 1029.886686][ T28] audit: type=1804 audit(1600744169.441:1501): pid=13269 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1267/file1/bus" dev="sda1" ino=16615 res=1 errno=0 03:09:29 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0xa000000]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) [ 1030.023740][ T28] audit: type=1804 audit(1600744169.481:1502): pid=13261 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1267/file1/bus" dev="sda1" ino=16615 res=1 errno=0 03:09:29 executing program 5: shmctl$IPC_STAT(0x0, 0x2, 0x0) 03:09:29 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0xb000000]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) [ 1030.169090][ T28] audit: type=1804 audit(1600744169.491:1503): pid=13261 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1267/file1/bus" dev="sda1" ino=16615 res=1 errno=0 03:09:30 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) r3 = syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x6900) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r6, 0x800) r7 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r7, &(0x7f0000000040)=ANY=[], 0xffffff7d) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r3, &(0x7f0000000100)) lseek(r6, 0x1, 0x0) r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r6, r8, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:09:30 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0xc000000]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) [ 1030.530269][ T28] audit: type=1804 audit(1600744170.091:1504): pid=13269 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1267/file1/bus" dev="sda1" ino=16615 res=1 errno=0 [ 1030.724488][ T28] audit: type=1804 audit(1600744170.091:1505): pid=13261 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1267/file1/bus" dev="sda1" ino=16615 res=1 errno=0 [ 1030.906809][ T28] audit: type=1804 audit(1600744170.091:1506): pid=13261 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1267/file1/bus" dev="sda1" ino=16615 res=1 errno=0 03:09:30 executing program 1: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x1}) syz_io_uring_setup(0x45d8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)) clock_nanosleep(0x4, 0x0, &(0x7f0000000400)={0x0, 0x989680}, &(0x7f0000000480)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x12345, {0x0, r4}}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x10) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xfd30) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r5, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x408808}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x7, 0x1, 0x5, 0x0, 0x0, {0xc, 0x0, 0xa}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x10) 03:09:30 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x2) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) socket$key(0xf, 0x3, 0x2) fcntl$setstatus(r3, 0x4, 0x44000) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x1, 0x0) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r3, r4, 0x0, 0x8400fffffffa) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x8, &(0x7f0000000100)={@private1}, &(0x7f0000000140)=0x14) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:09:30 executing program 1: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x1}) syz_io_uring_setup(0x45d8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)) clock_nanosleep(0x4, 0x0, &(0x7f0000000400)={0x0, 0x989680}, &(0x7f0000000480)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x12345, {0x0, r4}}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x10) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xfd30) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000280)={0x1, 0x7e}, 0x2) 03:09:31 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0xd000000]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:09:31 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0xe000000]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:09:31 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x10000000]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:09:32 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) r3 = syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x6900) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r6, 0x800) r7 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r7, &(0x7f0000000040)=ANY=[], 0xffffff7d) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r3, &(0x7f0000000100)) lseek(r6, 0x1, 0x0) r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r6, r8, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1033.217025][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 1033.217073][ T28] audit: type=1804 audit(1600744172.771:1512): pid=13342 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1591/file1/bus" dev="loop5" ino=318 res=1 errno=0 03:09:32 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x11000000]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) [ 1033.512190][ T28] audit: type=1804 audit(1600744172.811:1513): pid=13342 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1591/file1/bus" dev="loop5" ino=318 res=1 errno=0 [ 1033.830090][ T28] audit: type=1804 audit(1600744172.821:1514): pid=13335 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1268/file1/bus" dev="loop0" ino=317 res=1 errno=0 [ 1034.056440][ T28] audit: type=1804 audit(1600744172.821:1515): pid=13335 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1268/file1/bus" dev="loop0" ino=317 res=1 errno=0 03:09:33 executing program 1: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x1}) syz_io_uring_setup(0x45d8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)) clock_nanosleep(0x4, 0x0, &(0x7f0000000400)={0x0, 0x989680}, &(0x7f0000000480)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x12345, {0x0, r4}}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xfd30) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000280)={0x1, 0x7e}, 0x2) [ 1034.282059][ T28] audit: type=1804 audit(1600744172.821:1516): pid=13342 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1591/file1/bus" dev="loop5" ino=318 res=1 errno=0 [ 1034.460550][ T28] audit: type=1804 audit(1600744172.891:1517): pid=13335 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1268/file1/bus" dev="loop0" ino=317 res=1 errno=0 03:09:34 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x12000000]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) [ 1034.631723][ T28] audit: type=1804 audit(1600744173.071:1518): pid=13347 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1591/file1/bus" dev="loop5" ino=318 res=1 errno=0 03:09:34 executing program 1: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x1}) syz_io_uring_setup(0x45d8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)) clock_nanosleep(0x4, 0x0, &(0x7f0000000400)={0x0, 0x989680}, &(0x7f0000000480)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x12345, {0x0, r4}}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xfd30) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000280)={0x1, 0x7e}, 0x2) 03:09:34 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0xfffdfffffffffffd, 0x1) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r5, r5, 0x0, 0xff) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1034.815050][ T28] audit: type=1804 audit(1600744173.541:1519): pid=13362 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1268/file1/bus" dev="loop0" ino=317 res=1 errno=0 03:09:34 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x206d5000]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:09:34 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) r3 = syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x6900) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r6, 0x800) r7 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r7, &(0x7f0000000040)=ANY=[], 0xffffff7d) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r3, &(0x7f0000000100)) lseek(r6, 0x1, 0x0) r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r6, r8, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1034.981507][ T28] audit: type=1804 audit(1600744173.541:1520): pid=13356 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1268/file1/bus" dev="loop0" ino=317 res=1 errno=0 03:09:34 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x25000000]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:09:34 executing program 1: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x1}) syz_io_uring_setup(0x45d8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)) clock_nanosleep(0x4, 0x0, &(0x7f0000000400)={0x0, 0x989680}, &(0x7f0000000480)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x12345, {0x0, r4}}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xfd30) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000280)={0x1, 0x7e}, 0x2) [ 1035.109058][ T28] audit: type=1804 audit(1600744173.541:1521): pid=13362 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1268/file1/bus" dev="loop0" ino=317 res=1 errno=0 03:09:34 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x3f000000]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:09:35 executing program 1: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x1}) syz_io_uring_setup(0x45d8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)) clock_nanosleep(0x4, 0x0, &(0x7f0000000400)={0x0, 0x989680}, &(0x7f0000000480)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x12345, {0x0, r4}}, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x10) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xfd30) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000280)={0x1, 0x7e}, 0x2) 03:09:35 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x40000000]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:09:35 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x42000000]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:09:35 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r0) r2 = syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r5, 0x800) r6 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r6, &(0x7f0000000040)=ANY=[], 0xffffff7d) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r2, &(0x7f0000000100)) lseek(r5, 0x1, 0x0) r7 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r5, r7, 0x0, 0x8400fffffffa) sendfile(r3, r4, 0x0, 0x8400fffffffa) 03:09:35 executing program 1: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x1}) syz_io_uring_setup(0x45d8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000000000)) clock_nanosleep(0x4, 0x0, &(0x7f0000000400)={0x0, 0x989680}, &(0x7f0000000480)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x10) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xfd30) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000280)={0x1, 0x7e}, 0x2) 03:09:35 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x60030000]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:09:36 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0xfeffffff]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:09:36 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r0) r2 = syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r5, 0x800) r6 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r6, &(0x7f0000000040)=ANY=[], 0xffffff7d) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r2, &(0x7f0000000100)) lseek(r5, 0x1, 0x0) r7 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r5, r7, 0x0, 0x8400fffffffa) sendfile(r3, r4, 0x0, 0x8400fffffffa) 03:09:36 executing program 1: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x1}) syz_io_uring_setup(0x45d8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000000000)) clock_nanosleep(0x4, 0x0, &(0x7f0000000400)={0x0, 0x989680}, &(0x7f0000000480)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x10) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xfd30) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000280)={0x1, 0x7e}, 0x2) 03:09:36 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0xffff8000]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:09:36 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x1004000, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x84) lseek(r3, 0x0, 0x2) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x4) ftruncate(r4, 0x800) lseek(r4, 0x1, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x5000940a, &(0x7f0000002480)={{}, "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"}) syz_mount_image$gfs2meta(&(0x7f0000000100)='gfs2meta\x00', &(0x7f0000000140)='./bus\x00', 0x0, 0x3, &(0x7f0000000240)=[{&(0x7f0000000400)="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", 0x1000, 0x5}, {&(0x7f0000000180)="f8953d4ecc1a53e3684f85e5ead4bb558fad088ecbc8c1682296ed49139316edf34cd47636ac5cbd1aab30193ce424964eb745ad3293d7793a3c240374f25e72535b090a6aaa6ac857771b431f18bac25ac1613914947152aad49280a2ba48f07f45b7942c3145229a5ee9baa129c91216d91e710415e3977e5966ef154bc6005d9ab53f4ba3cf7fc13177640f63a93f5a9f602e3b7948cd8ac0183c9995d90b86f0cd64", 0xa4, 0x4}, {&(0x7f0000003540)="00b420c30c859f2f63fed03ef2a50514432b06b9c56645480e70f4521e1994b989705a6ad9834a766f161562df3450da4cc12069e77d8348f5197a9c0eb02b413f28edef7b9452c785315bbae6541e004c3e8a6e4ca8277136304e1510654cf80933f122779e945df166b235bad6f1cf399c12c98bf94e8ce5b69967d1e843c8934c171e7570373753e80d275f7b1b3267e5a889001fd63f83b49684cdc2d8536ddc1d35540b9249fab3b82de6f5dba080c64b802f7a8871804f3b20aec0b6f42b8e0cad35c6bf5bb4eca373600751b7ce3dcfb48f88b6ada980f369e66b8442fd2169d870083afcf838018a23a2e0232e89ed7464cf5e53b13784868822d0b8aad0524760110c48d3cd7f7825955d8456b738b6ed80b9b6ff0b7095431258c571a243e2d94fdb86de8c0482cac42c8a0a54a157e1352bb0ae24d0c5effc9941b94a210404a13c6edcc9f07cd9650e74e4abb432dc28e2a2da181250c95341afd0a6e07cf042a12f8b7840ada0493048d0aae8d7aebe4a50756a4f6baf3791d183b529853ea7de8e77b17d69a4b4c8a020061355affc9b852976685a4bdad71b9060816c90eda227e8b3960f696b7e1f6c2480c12dea49e01514069c96367ac08a5582a00fdd83163d4810a44245ae0007bfa4faa1829a36916149608d0c376bf4b261650347cd63df3d576ca3228f88b6ef7fdb2ccc124567a2a2cae29bbd23424644b0cf2630976746a9d7315cb5515b651843c7a5c9a0740413a213847e17267f814acdc69e2abb14ee07139d7847dabc68433f74041bd1825b8443fb3b919a6dfee0b280955aec286c9e4faf15d6db4f232c8bf56fa02b21ab331976130f28046fc1b87b5746a1aa5604f6cf6885dbd760a5e2358aafa080cb5ec63403bab82b15c15bf835ba668acd2ea0ff12de92a41f1003c2f0d4a8f14e8c19d0f507c90ef68eea01c321b684304eaf69db23591acfcd15b75ed95737c8a674b56488535d47f85fc1473a46c849c1738705b35d9c1e0d9a5e6968ccd7b0e28d850d414c1fde196ad8baee1e9e89a8dca93f9e509d3b6185da86501876c2242e7c76fd64d325d4e6be160cf820d088bfbd3b3ee98ec7732a5798b0e7a3665797e751e1df68134e0987007e8d187774a9653c4c54f53410d2847348abae7dd47398df76684495d94c7a70fc53d20d7f26241e6a1b87e262af10d4469171aef4c12068bfa72e97833e983d426eaa9ad1c977fb69c661ba5c4171325751114099164e94d9271eb939f5bebb693ca4029522f3bf0d0f5a82f6f787a9e4de3750bd2a3a41cb28b3a923b24030cc9d986e27f12844dab27d40d2b6cda49d39c8d5faa2f119acca3a97bf0fb6e6ea5197e469f0a5fe35323c35f5b6a912bda49634f9f90459896987225db579ece01a4a40549655262e475f758d15065de36487f8d483b3c4cfffd209cc4e27016e04ae852b90ad9be222e59452bf2f9e2c20ffbc66be3a7ec5946c2ed650ad6dd5f9f747a99c45e759a18462b4d1a3bd92dfd6790581e0d030ffb55b3857a0e85385031b21f702209565e81fc1a65ebfd79ff59df01ae44761b16037b189dfa83c8c3a48df517671c425bf715e290839b246824cad55478e21e948ab8822df9bed6c3f1953368f956f969061f9adf9d98cec982846915e85597b0d3a35768ce1950c4bd6a06d40111d1a4ce0341821e15ced48cc879e04376dde213ef84e0e1346488fcdccc90a76f4832adf7af59a66866b1cf6ab9ef360b76047fe90eeec63784871c4d4f80be2ec2e8897251fa54d94d168d659248c5cef3c3dee5f8fd927136894d6a83e5fd71eeacfa01f83ac0158a5cd55f9e1f535ef4069ddf414066ae5f46ac030eec4eedb62b279c935ba153aaca9dad42faa8633787f9dcd8c8b91dc31687e55aec07f21cd3b17e012ddf100c947274a9d6eff85688bbd067fbc6ab8f76f7e5dad562330f078d3620821908fdff391dfc6a258512c380e7ae52986c6cbbef7f6129194e3171e587e0c9627479cea148cec1605feb32c6aad741df62d5ff9174f6ab0c8a1e15d70ea464bd37207ba4097c0d5ffb84bb1cf1fcc56634f07871996ff996efdcf997e8069806664588829e41a5de49e123d64d438b104a32b6db2199e5e016f11e33ef51898d042b0982eef0e3ad70ba0d7ac49664f71ea2d3f8fc78169660f6d7d0fa52c337761dc3d8f7999570ba258818fb0d66a9753f08937459fdf2a682b755e949e26c40e7c2863ba34484e576384102f42229a3084edfe702a55d8cd93ed0db3d4ea6ff6632a3d0209738f7ff4d7076508134cf5af4f73b8f73950216afddd7c361ee88bb8b4d63d972c1bb79d1f4f240f76f78987279c2e25aefbf9d58eecdf1da2bc659c44c378d7e3c293997256b01ff4eaad4ab70b0b8f0dab6be6d2ee110c34f59523fce93233b1117901190ff9c9ee8760ad4f99910e31992578bc10f8270609aad254356fdd8ebb57457a21a060056ed2a471dc6073b0cd7b2f743711ce123ef03c53b4437724b77c7c4b18b481f92edc8d86389c2f2057f157810cc46b47ac5f32fac72eccb9d74531ac765eb33f79bff0a9095884104c8fcc38fb854a3df1026fe634d538ff968ab029064d80019f0c8040fd5cc517347de0faaa2fd48fb76c985a4623fd8745150b814d9d8dfbfdd78a3ad27b61e091794f95f68b120a6cf1c3044954ad2d29918b48f1f283a004ddf578e4c50286077e6a17e884df25b0a33261fccbd8abe17479735b796baf7fedce1b99723856058fcfb053698e10f5b4f47201a9798e9214f7a3d86ece76eced04a25a978857e202f2d57b181b5a7e67533f2f60336683c55d8636f522adccd469c94a48007271d2759ef92e37884c0bbcb8fec87679ae80a89a22ab2fc4409dea54a21ff340c599daed355f00546c3597cd1ef9712fd8a2a327a0d91ace96b3e74c90c7c83bb6a6deaf2ce0de19a4d1481a8d24b668ae5fcc310d34364ee01d702200d334396ea76eee1f1ee551444fa5af300c969c23d4548c44107e4679e4ac2822c88c6496b2931b2679d0045cda151ab36bd36c82eafbde45ccf5aa5d5d7bfa49e834d8965407eadc8f1947af80065832190d51de6b037a462aa67a55359031d22621b179746187272f63daa5e2180b1da3e5c8d6fa66d6155c7dda06a403682af9e3cab0fc11d41f0f8cb701a4a1dae0f1c3a40f802141f98a8e12e3068ff06d540e2f6059544a665498df1368182c41212cc2050b45cc4e1922213596c3c8c38dd522e5955396ab2ee02559639ad486d6d005bac6b2e9e6ff4e88b41984305f2c290b54505fb41fc8df237969071cbb6e558392fc2100508ce54dec4843247a01d484e4ded40442db46743f1c70256577f8ecb6ebf386a3a018132ed2d5de4b602cee8e7a556050af572ba6acdf7456ef8164aac85e0979dab94ac44d831f73377b20fc4f22f763900ae7accd44b0d082e8cb62477e0e375d91b8542fc103b4f83142cebe65ada91bba5de6ee901986ca82dc61d754d0ae66c785f6ae24b42b61b2301dea877e837741258f5d612866e9ccc9a84cbcd8270c5b3b4503c7a3af9194f61d869fe278cb227a9709c5d9b03fb616688bbb4600f0a3d9cdb0c3d10418cde284b29f7a783152d4bb9835dd2917d52a09c4723d1c6836dc382c0479a5cc125e06f46b0e2eb307ac9b2d010259ccef0858b3919293aed1b2d796aa4275abf8e2325165bce0c656089b1b2e87153259a90041edf07b83048c79f6b072a086122970134458b8bd8590d929e6a4f58449c5a0f3d7bd90049132a1f6396b7eeede8df9703b1e2a380a89788bea58f35d1c0c6811442aa02a7fc9802f2b99dfea041def448304bb5772d0369d2d1daed507f9dff20f4b945417234baabe286133429216b2a0e13545195aa01c28f5b9883bc74bd0565beb05613d03d42a57d2c34747c4f234f1b0bd6063252192e0ea5e129a4f509fad34563625f4dd346c53057447473ab2ddf879650460f4e027acaafae5eea15585424e2cb9abd1f5b2b730bbd89233be5508cd6548b1583b9130a671b339e6e62fb33d3428ed95b890143dd37ff8c6089fc1f40726fc3eea43228914100f7473917fe6d19bd5ea3451a94ac91c71c4cfc3136118572224259097faeaadfdf7ea155d7284377ac028342caa9ecdf6ff2002c9e555f0e6c1be188ff857e6aab5df90a2bd352c89c818d0a6e0a56031e21319ae840953cdc30b720e1e07754254bb7cf071436657d93e4531dca7ddd82b523b3923ce6d839c5a165407e022076da22245df0d77641af7e13f7dd6bfe7be07d17be75584346764343f7f908bf794741dbc1305df715d7f23983f8ed39e0348d1ef02149cd39ef8eeca39f3041f9b0b6043bffe5bb385a90b885edb17d07620d9fc8473bb160df95b9c83fa64254f0ce6616308aa4b79fcea22c59d8e3ad8c85ffbd6b7cb31b36e69cfcb533b0ab40c088f64ced5d6c00fef5bef6b98c3aeeeebc3d2bb8d340bc75e697f74d2e1e402eb2b493e5183279eca5daa58f0a2690618c9651f20657cc282011cb2f6818792b4b19b972c86900434c487da8a380f71c056f8c6d147b8502d02ff89a6a21fd38f9cb211824a7d36abf82047788987ad743975021c8f3e7e34ca7aa248d1afe8e240ca557063bd07d9053295d992428ccd5b4f6885034e72eb3e5c8a3ed12be8a8fcfbb0d5b35f01431f449c80cf7b982f742fe43b7d9e7a2df9a0396dc5ad4edd250625604792c75a210ccc0ab7bf7c40a55c1a9f78db7a6294c42526e826d10cde5ec177904165cc1fe3cbbe575a40bda4c2c72ecbde59e649345fecdfd985fcb531fcaca9651fc26f44129b76bd910481f5692fcab6e7bb9955d4593a18333139ef8b675e29bd7f8f255807069f390ab89092f0aabfb8cf71ce5d91d68998b956fd8d0db51e0dd7bfd49babbd892754a8b9c1946a71d326bdd898e9feaba1f1a728939bbb7b0afa78cc1bfb6a71e2e6f1b50a34a6700ecda6e3cd446f739c0be6bead7cdcb872aade68479847f1b2b2c795bb3b3122d597d15c193f8e71d22e8a907cf14e1b1e18cbe4bdbc20e444962d054e7e99bfd10f6226b9dfd48bf788a1b7953c15bbe3ab0aa17d119918e98701f473a9fca1a81b61022ed37759e2c21fb3d47eb96fbdbae06a830de4f0f84cf434e2f6dff575a54bb06ec352cb77fcd1a9a2388b4b02f226d708fef028ab75ffcacecf4ba254e9fb63493136811ed5c480501db473c27019746da5cf5bf130b6adaba27558845a03898a7d5613869b6ec13ade69a6a9db940f5c976a9fe8938f0dc8bfc02487dda2120fa65fc992b7b8768e97557a602e1529715b98ed9664c362b5c8a682da7379ed9efcdf6c5d0e302f078e5b453b6b77fed36fad768c657006de13f99e3a73c6915fc920d9a6634d5fc142cb3556991fabe7514f003229275162c3aa9e492118548a5fdbf474e1493e8799fccf6bca30a99f426681ff31fea3d3257a93f0ae25ade94fc181fb29525664d766037aad4ef7dcc11604263d128738d8cc2b5afb166ba95438cd98f448a40a9655e03995e9e8303e3eebfbeb2cb5e41fd70678fb925f45ceac3e06d07b252a156112fc76f6c86d01f1b3c1c432de20c9f92ed656343f9a56cba167d08e77253be3da24a43ece48e1d797d02a5e35f006bcc28df310f4fb3c71f09c9dc58bba7225e0e6f721b5ad8563f1ce14ac22a5584e3d36fa84ea83ab74cc1ed0544eca14f164026998d2f4a59c1976169ec220b24d1314ac39d590aaf84630e362fd1394cf54363f1931035f1742d4d4655fa9865793a5a97b5256baa9ebe37f0e221315885dab05f819726608407b024314529c74a497ecf887753dddcb2c127aa8620c1a23de57f88f9fa1aaf4ef1a6df1a3866697133bd5b28bce038e4d16eef6b7414719ba4d6707233ea8440a1e6f6ace175c7c1ebd695f6011cc9867a5a4205b843d58d4f82dbae2fcf5c158c6eaca61e07229bc57b1a21f36b75b86333dbc1a1750a2a2228f3a14f2955b6523afe2172440ecb95996cbfe90a4a1515a5571ced37dd6ca2f977a96236c25c2f94eaee7549acab661b87cf252211f3fe7080486d81b304bbeb33cad2640eeb801dee4131d336bd81c6fe92f3812babee99e014317c09d7b7113f32daecab7b3f1123c19d16fa90796efe39bfd77b9b10b0a0c54cfbbdcb4c3766f4da192f865b15efe039302caa0652a3bcb1ee250e9be2ddb77fb856266a0", 0x114a, 0x1}], 0x4000, &(0x7f00000002c0)=ANY=[@ANYBLOB='(,,@\\[-.,dont_hash,fowner>', @ANYRESDEC, @ANYBLOB="2c6673636f6e746578743d73797361646d5f752c736d616373666c6f6f723d6d73646f73002c7569643d000032d544c3e5fd2a366855f516073e5280c70d17147a8d99f07530fad5119533f323d52f858306fa7f47f39e", @ANYRESDEC, @ANYBLOB=',subj_type=*,fowner>', @ANYRESDEC=0xee01, @ANYBLOB="2c666f776e65723eb5625856", @ANYRESDEC=0xee00, @ANYBLOB=',\x00']) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, r2, 0x0, 0x210000008000002) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:09:36 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0xffffc000]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:09:37 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0xfffffffe]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:09:37 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r0) r2 = syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r5, 0x800) r6 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r6, &(0x7f0000000040)=ANY=[], 0xffffff7d) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r2, &(0x7f0000000100)) lseek(r5, 0x1, 0x0) r7 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r5, r7, 0x0, 0x8400fffffffa) sendfile(r3, r4, 0x0, 0x8400fffffffa) 03:09:37 executing program 1: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x1}) syz_io_uring_setup(0x45d8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000000000)) clock_nanosleep(0x4, 0x0, &(0x7f0000000400)={0x0, 0x989680}, &(0x7f0000000480)) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x10) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xfd30) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000280)={0x1, 0x7e}, 0x2) 03:09:37 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:09:37 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x2]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:09:37 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) r3 = syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x6900) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r6, 0x800) r7 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r7, &(0x7f0000000040)=ANY=[], 0xffffff7d) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r3, &(0x7f0000000100)) lseek(r6, 0x1, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:09:37 executing program 1: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x1}) syz_io_uring_setup(0x45d8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000000000)) clock_nanosleep(0x4, 0x0, &(0x7f0000000400)={0x0, 0x989680}, &(0x7f0000000480)) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x10) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xfd30) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000280)={0x1, 0x7e}, 0x2) 03:09:38 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x3]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) [ 1038.578136][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 1038.578150][ T28] audit: type=1804 audit(1600744178.131:1546): pid=13532 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1596/file1/bus" dev="loop5" ino=323 res=1 errno=0 03:09:38 executing program 1: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x1}) syz_io_uring_setup(0x45d8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000000000)) clock_nanosleep(0x4, 0x0, &(0x7f0000000400)={0x0, 0x989680}, &(0x7f0000000480)) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x10) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xfd30) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000280)={0x1, 0x7e}, 0x2) [ 1038.613663][ T28] audit: type=1804 audit(1600744178.131:1547): pid=13532 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1596/file1/bus" dev="loop5" ino=323 res=1 errno=0 [ 1038.637659][ T28] audit: type=1804 audit(1600744178.141:1548): pid=13532 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1596/file1/bus" dev="loop5" ino=323 res=1 errno=0 03:09:38 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x4]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) [ 1038.963474][ T28] audit: type=1804 audit(1600744178.521:1549): pid=13538 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1596/file1/bus" dev="loop5" ino=323 res=1 errno=0 [ 1039.489601][ T28] audit: type=1804 audit(1600744179.051:1550): pid=13496 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1270/file1/bus" dev="loop0" ino=324 res=1 errno=0 [ 1039.669085][ T28] audit: type=1804 audit(1600744179.071:1551): pid=13496 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1270/file1/bus" dev="loop0" ino=324 res=1 errno=0 [ 1039.789034][ T28] audit: type=1804 audit(1600744179.081:1552): pid=13496 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1270/file1/bus" dev="loop0" ino=324 res=1 errno=0 [ 1039.979015][ T28] audit: type=1804 audit(1600744179.331:1553): pid=13558 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1270/file1/bus" dev="loop0" ino=324 res=1 errno=0 [ 1040.099106][ T28] audit: type=1804 audit(1600744179.331:1554): pid=13558 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1270/file1/bus" dev="loop0" ino=324 res=1 errno=0 03:09:39 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x5]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:09:39 executing program 1: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x1}) syz_io_uring_setup(0x45d8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x10) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xfd30) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000280)={0x1, 0x7e}, 0x2) 03:09:39 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) r3 = syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x6900) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r6, 0x800) r7 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r7, &(0x7f0000000040)=ANY=[], 0xffffff7d) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r3, &(0x7f0000000100)) lseek(r6, 0x1, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1040.228781][ T28] audit: type=1804 audit(1600744179.331:1555): pid=13561 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1270/file1/bus" dev="loop0" ino=324 res=1 errno=0 03:09:40 executing program 1: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x1}) syz_io_uring_setup(0x45d8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x10) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xfd30) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000280)={0x1, 0x7e}, 0x2) 03:09:40 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x64000) io_submit(0x0, 0x6, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2703000000000009, 0x8003f00, 0x3, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x3000}]) ioctl$VIDIOC_ENUMAUDOUT(0xffffffffffffffff, 0xc0345642, &(0x7f0000000100)={0x8001, "755e83bdcbdac4f39b42ba780a5a4b30c59c8626b9465df2059aeb0374be100f", 0x3, 0x1}) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x1, 0x0) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:09:40 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x6]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:09:40 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) r3 = syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x6900) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r6, 0x800) r7 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r7, &(0x7f0000000040)=ANY=[], 0xffffff7d) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r3, &(0x7f0000000100)) lseek(r6, 0x1, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:09:40 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x7]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:09:40 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x8]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:09:40 executing program 1: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x1}) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x10) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xfd30) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000280)={0x1, 0x7e}, 0x2) 03:09:40 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x9]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:09:40 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0xa]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:09:40 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) r3 = syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x6900) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r6, 0x800) r7 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r7, &(0x7f0000000040)=ANY=[], 0xffffff7d) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r3, &(0x7f0000000100)) sendfile(r4, r5, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:09:41 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0xb]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:09:41 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0xc]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:09:41 executing program 1: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x10) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xfd30) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000280)={0x1, 0x7e}, 0x2) 03:09:43 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0xd]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:09:43 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r5, 0x800) r6 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r6, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:09:43 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, &(0x7f0000000100)={0x6, 0x7, 'syz1\x00'}, &(0x7f0000000140)=0x28) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x1, 0x0) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1043.830362][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 1043.830375][ T28] audit: type=1804 audit(1600744183.391:1573): pid=13675 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1600/file1/bus" dev="loop5" ino=329 res=1 errno=0 [ 1043.904623][ T28] audit: type=1804 audit(1600744183.391:1574): pid=13675 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1600/file1/bus" dev="loop5" ino=329 res=1 errno=0 [ 1043.934007][ T28] audit: type=1804 audit(1600744183.391:1575): pid=13675 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1600/file1/bus" dev="loop5" ino=329 res=1 errno=0 03:09:44 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0xe]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:09:44 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r5, 0x800) open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:09:44 executing program 1: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r1 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x10) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000040)=ANY=[], 0xfd30) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000280)={0x1, 0x7e}, 0x2) [ 1045.476413][ T28] audit: type=1804 audit(1600744185.031:1576): pid=13703 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1601/file1/bus" dev="loop5" ino=330 res=1 errno=0 [ 1045.504180][ T28] audit: type=1804 audit(1600744185.061:1577): pid=13703 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1601/file1/bus" dev="loop5" ino=330 res=1 errno=0 [ 1045.557617][ T28] audit: type=1804 audit(1600744185.091:1578): pid=13703 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1601/file1/bus" dev="loop5" ino=330 res=1 errno=0 03:09:45 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x10]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:09:45 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x11]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:09:45 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x12]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) [ 1046.341190][ T28] audit: type=1804 audit(1600744185.901:1579): pid=13726 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1272/file1/bus" dev="sda1" ino=16986 res=1 errno=0 03:09:45 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x25]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:09:46 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r5, 0x800) open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:09:46 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x42]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) [ 1046.521992][ T28] audit: type=1804 audit(1600744185.941:1580): pid=13726 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1272/file1/bus" dev="sda1" ino=16986 res=1 errno=0 03:09:46 executing program 1: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r1 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x10) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000040)=ANY=[], 0xfd30) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000280)={0x1, 0x7e}, 0x2) [ 1046.704717][ T28] audit: type=1804 audit(1600744185.961:1581): pid=13688 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1272/file1/bus" dev="sda1" ino=16986 res=1 errno=0 03:09:46 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x60]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) [ 1047.003683][ T28] audit: type=1804 audit(1600744186.161:1582): pid=13760 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1272/file1/bus" dev="sda1" ino=16986 res=1 errno=0 03:09:47 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r5, 0x800) open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:09:47 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x300]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:09:47 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x1, 0x0) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r7 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r7, &(0x7f0000000040)=ANY=[], 0xfd30) ioctl$VIDIOC_TRY_DECODER_CMD(r7, 0xc0485661, &(0x7f0000000100)={0x0, 0x1, @stop_pts=0x9}) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:09:47 executing program 1: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x10) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000040)=ANY=[], 0xfd30) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000280)={0x1, 0x7e}, 0x2) 03:09:47 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x360]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:09:47 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x500]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:09:48 executing program 1: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x10) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000040)=ANY=[], 0xfd30) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000280)={0x1, 0x7e}, 0x2) 03:09:48 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x600]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:09:48 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r5, 0x800) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:09:48 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x700]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:09:48 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x900]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) [ 1049.091659][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 1049.091672][ T28] audit: type=1804 audit(1600744188.651:1598): pid=13828 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1273/file1/bus" dev="loop0" ino=333 res=1 errno=0 03:09:49 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0xa00]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) [ 1049.383536][ T28] audit: type=1804 audit(1600744188.721:1599): pid=13828 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1273/file1/bus" dev="loop0" ino=333 res=1 errno=0 [ 1049.592182][ T28] audit: type=1804 audit(1600744188.721:1600): pid=13824 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1273/file1/bus" dev="loop0" ino=333 res=1 errno=0 03:09:49 executing program 1: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x10) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000040)=ANY=[], 0xfd30) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000280)={0x1, 0x7e}, 0x2) 03:09:49 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r5, 0x800) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1049.728552][ T28] audit: type=1804 audit(1600744188.721:1601): pid=13824 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1273/file1/bus" dev="loop0" ino=333 res=1 errno=0 03:09:49 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r5, 0x800) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:09:49 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0xb00]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) [ 1049.915621][ T28] audit: type=1804 audit(1600744188.721:1602): pid=13828 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1273/file1/bus" dev="loop0" ino=333 res=1 errno=0 03:09:49 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0xc00]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:09:49 executing program 1: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x10) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000040)=ANY=[], 0xfd30) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000280)={0x1, 0x7e}, 0x2) [ 1050.212592][ T28] audit: type=1804 audit(1600744189.441:1603): pid=13887 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1605/file1/bus" dev="loop5" ino=335 res=1 errno=0 03:09:50 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0xd00]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) [ 1050.552751][ T28] audit: type=1804 audit(1600744189.441:1604): pid=13887 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1605/file1/bus" dev="loop5" ino=335 res=1 errno=0 [ 1050.685785][ T28] audit: type=1804 audit(1600744190.171:1605): pid=13907 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1274/file1/bus" dev="loop0" ino=336 res=1 errno=0 [ 1050.877604][ T28] audit: type=1804 audit(1600744190.171:1606): pid=13907 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1274/file1/bus" dev="loop0" ino=336 res=1 errno=0 03:09:50 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r5, 0x800) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1051.211906][ T28] audit: type=1804 audit(1600744190.771:1607): pid=13926 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1606/file1/bus" dev="loop5" ino=337 res=1 errno=0 03:09:51 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0xe00]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:09:51 executing program 1: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x10) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000040)=ANY=[], 0xfd30) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000280)={0x1, 0x7e}, 0x2) 03:09:51 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:09:51 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x1100]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:09:51 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r5, 0x800) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:09:52 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x1200]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:09:52 executing program 1: exit_group(0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x10) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000040)=ANY=[], 0xfd30) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000280)={0x1, 0x7e}, 0x2) 03:09:52 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x2500]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:09:52 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x3f00]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:09:52 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:09:52 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x4000]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:09:52 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x4200]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:09:52 executing program 1: exit_group(0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x10) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000040)=ANY=[], 0xfd30) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000280)={0x1, 0x7e}, 0x2) 03:09:53 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, 0xffffffffffffffff, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:09:54 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x6000]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:09:54 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:09:55 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x6003]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) [ 1056.155584][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 1056.155596][ T28] audit: type=1804 audit(1600744195.711:1616): pid=14041 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1276/file1/bus" dev="sda1" ino=16814 res=1 errno=0 [ 1056.474477][ T28] audit: type=1804 audit(1600744195.771:1617): pid=14041 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1276/file1/bus" dev="sda1" ino=16814 res=1 errno=0 [ 1056.651286][ T28] audit: type=1804 audit(1600744195.791:1618): pid=14041 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1276/file1/bus" dev="sda1" ino=16814 res=1 errno=0 03:09:55 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x25000]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:09:56 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, 0xffffffffffffffff, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:09:56 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x40000]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:09:56 executing program 1: exit_group(0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x10) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000040)=ANY=[], 0xfd30) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000280)={0x1, 0x7e}, 0x2) 03:09:57 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, 0xffffffffffffffff, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:09:57 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, 0xffffffffffffffff, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:09:58 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x80000]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:09:59 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x400000]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:09:59 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:09:59 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, 0xffffffffffffffff, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1059.947601][ T28] audit: type=1804 audit(1600744199.501:1619): pid=14115 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1612/file1/bus" dev="loop5" ino=344 res=1 errno=0 03:09:59 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x500200]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) [ 1060.068993][ T28] audit: type=1804 audit(1600744199.511:1620): pid=14115 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1612/file1/bus" dev="loop5" ino=344 res=1 errno=0 03:09:59 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x506d20]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:10:00 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1060.863652][ T28] audit: type=1804 audit(1600744200.421:1621): pid=14139 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1613/bus" dev="sda1" ino=16920 res=1 errno=0 [ 1060.978356][ T28] audit: type=1804 audit(1600744200.461:1622): pid=14139 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1613/bus" dev="sda1" ino=16920 res=1 errno=0 03:10:00 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x10) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000040)=ANY=[], 0xfd30) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000280)={0x1, 0x7e}, 0x2) 03:10:01 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x600000]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:10:02 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:10:02 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, 0xffffffffffffffff, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1064.437120][ T28] audit: type=1804 audit(1600744203.991:1623): pid=14162 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1614/file1/bus" dev="loop5" ino=346 res=1 errno=0 03:10:04 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x80ffff]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) [ 1064.620651][ T28] audit: type=1804 audit(1600744203.991:1624): pid=14162 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1614/file1/bus" dev="loop5" ino=346 res=1 errno=0 03:10:04 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0xc0ffff]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:10:04 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x10) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000040)=ANY=[], 0xfd30) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000280)={0x1, 0x7e}, 0x2) 03:10:05 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1066.501393][ T28] audit: type=1804 audit(1600744206.061:1625): pid=14200 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1615/file1/bus" dev="loop5" ino=347 res=1 errno=0 03:10:06 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x1000000]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) [ 1066.702047][ T28] audit: type=1804 audit(1600744206.091:1626): pid=14200 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1615/file1/bus" dev="loop5" ino=347 res=1 errno=0 03:10:06 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x2000000]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:10:06 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x10) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000040)=ANY=[], 0xfd30) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000280)={0x1, 0x7e}, 0x2) 03:10:06 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x3000000]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:10:06 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:10:06 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x4000000]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:10:07 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x800) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1067.653028][ T28] audit: type=1804 audit(1600744207.211:1627): pid=14239 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1280/file1/bus" dev="loop0" ino=348 res=1 errno=0 03:10:07 executing program 1: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = open(0x0, 0x141042, 0x10) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000040)=ANY=[], 0xfd30) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000280)={0x1, 0x7e}, 0x2) 03:10:07 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x5000000]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) [ 1068.167030][ T28] audit: type=1804 audit(1600744207.721:1628): pid=14258 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1616/file1/bus" dev="loop5" ino=349 res=1 errno=0 [ 1068.333999][ T28] audit: type=1804 audit(1600744207.721:1629): pid=14258 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1616/file1/bus" dev="loop5" ino=349 res=1 errno=0 [ 1068.519300][ T28] audit: type=1804 audit(1600744208.051:1630): pid=14239 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1280/file1/bus" dev="loop0" ino=348 res=1 errno=0 03:10:08 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x800) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:10:08 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x800) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1069.256199][ T28] audit: type=1804 audit(1600744208.811:1631): pid=14268 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1617/bus" dev="sda1" ino=16559 res=1 errno=0 [ 1069.450444][ T28] audit: type=1804 audit(1600744208.841:1632): pid=14268 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1617/bus" dev="sda1" ino=16559 res=1 errno=0 03:10:09 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x6000000]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:10:10 executing program 1: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = open(0x0, 0x141042, 0x10) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000040)=ANY=[], 0xfd30) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000280)={0x1, 0x7e}, 0x2) 03:10:10 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x800) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:10:10 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x7000000]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) [ 1071.053052][ T28] audit: type=1804 audit(1600744210.611:1633): pid=14304 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1618/file1/bus" dev="loop5" ino=350 res=1 errno=0 [ 1071.141985][ T28] audit: type=1804 audit(1600744210.611:1634): pid=14304 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1618/file1/bus" dev="loop5" ino=350 res=1 errno=0 03:10:10 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x8000000]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) [ 1071.521613][ T28] audit: type=1804 audit(1600744211.081:1635): pid=14319 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1281/file1/bus" dev="loop0" ino=351 res=1 errno=0 03:10:11 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x9000000]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) [ 1071.718854][ T28] audit: type=1804 audit(1600744211.171:1636): pid=14323 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1281/file1/bus" dev="loop0" ino=351 res=1 errno=0 03:10:11 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x800) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:10:11 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6900) ftruncate(0xffffffffffffffff, 0x800) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r4 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(0xffffffffffffffff, r3, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:10:11 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0xa000000]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:10:11 executing program 1: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = open(0x0, 0x141042, 0x10) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000040)=ANY=[], 0xfd30) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000280)={0x1, 0x7e}, 0x2) 03:10:11 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0xb000000]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:10:12 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0xc000000]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:10:12 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0xd000000]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:10:12 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6900) ftruncate(0xffffffffffffffff, 0x800) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r4 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(0xffffffffffffffff, r3, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1074.092721][ T28] audit: type=1804 audit(1600744213.651:1637): pid=14386 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1282/file1/bus" dev="sda1" ino=16846 res=1 errno=0 [ 1074.231112][ T28] audit: type=1804 audit(1600744213.661:1638): pid=14386 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1282/file1/bus" dev="sda1" ino=16846 res=1 errno=0 03:10:15 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0xe000000]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:10:15 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6900) ftruncate(0xffffffffffffffff, 0x800) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r4 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(0xffffffffffffffff, r3, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:10:15 executing program 1: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x10) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000040)=ANY=[], 0xfd30) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000280)={0x1, 0x7e}, 0x2) 03:10:15 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x800) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:10:15 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x10000000]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:10:16 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x11000000]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:10:16 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:10:16 executing program 1: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x10) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000040)=ANY=[], 0xfd30) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000280)={0x1, 0x7e}, 0x2) [ 1076.975628][ T28] audit: type=1804 audit(1600744216.531:1639): pid=14427 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1622/bus" dev="sda1" ino=16881 res=1 errno=0 03:10:16 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x12000000]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) [ 1077.271630][ T28] audit: type=1804 audit(1600744216.561:1640): pid=14427 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1622/bus" dev="sda1" ino=16881 res=1 errno=0 [ 1077.440392][ T28] audit: type=1804 audit(1600744216.741:1641): pid=14430 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1283/file1/bus" dev="sda1" ino=16668 res=1 errno=0 [ 1077.706119][ T28] audit: type=1804 audit(1600744216.781:1642): pid=14430 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1283/file1/bus" dev="sda1" ino=16668 res=1 errno=0 03:10:17 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:10:17 executing program 1: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x10) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000040)=ANY=[], 0xfd30) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000280)={0x1, 0x7e}, 0x2) [ 1078.077267][ T28] audit: type=1804 audit(1600744217.631:1643): pid=14445 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1623/bus" dev="sda1" ino=16881 res=1 errno=0 [ 1078.258059][ T28] audit: type=1804 audit(1600744217.631:1644): pid=14445 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1623/bus" dev="sda1" ino=16881 res=1 errno=0 03:10:18 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x206d5000]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:10:18 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:10:19 executing program 1: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000040)=ANY=[], 0xfd30) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000280)={0x1, 0x7e}, 0x2) [ 1079.480840][ T28] audit: type=1804 audit(1600744219.031:1645): pid=14465 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1624/bus" dev="sda1" ino=16729 res=1 errno=0 03:10:19 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x25000000]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) [ 1079.669454][ T28] audit: type=1804 audit(1600744219.071:1646): pid=14465 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1624/bus" dev="sda1" ino=16729 res=1 errno=0 03:10:20 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x800) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:10:20 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:10:20 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x3f000000]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:10:20 executing program 1: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xfd30) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000280)={0x1, 0x7e}, 0x2) [ 1080.847852][ T28] audit: type=1804 audit(1600744220.401:1647): pid=14505 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1625/bus" dev="sda1" ino=17078 res=1 errno=0 03:10:20 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x40000000]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) [ 1080.982788][ T28] audit: type=1804 audit(1600744220.401:1648): pid=14505 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1625/bus" dev="sda1" ino=17078 res=1 errno=0 03:10:21 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x42000000]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:10:21 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:10:21 executing program 1: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xfd30) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000280)={0x1, 0x7e}, 0x2) 03:10:21 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1082.268015][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 1082.268028][ T28] audit: type=1804 audit(1600744221.821:1651): pid=14533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1626/bus" dev="sda1" ino=16977 res=1 errno=0 03:10:21 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x60030000]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) [ 1082.477350][ T28] audit: type=1804 audit(1600744221.831:1652): pid=14533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1626/bus" dev="sda1" ino=16977 res=1 errno=0 03:10:22 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0xfeffffff]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:10:22 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:10:23 executing program 1: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xfd30) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000280)={0x1, 0x7e}, 0x2) [ 1083.510760][ T28] audit: type=1804 audit(1600744223.071:1653): pid=14558 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1627/bus" dev="sda1" ino=16834 res=1 errno=0 03:10:23 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0xffff8000]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) [ 1083.654877][ T28] audit: type=1804 audit(1600744223.101:1654): pid=14558 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1627/bus" dev="sda1" ino=16834 res=1 errno=0 03:10:23 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0xffffc000]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:10:24 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:10:24 executing program 1: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r0, 0x0, 0xfd30) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000280)={0x1, 0x7e}, 0x2) 03:10:24 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0xfffffffe]}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:10:24 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:10:24 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) setxattr$security_evm(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='security.evm\x00', &(0x7f0000000140)=@ng={0x4, 0xa, "906ca62ec6deb36ef9637858"}, 0xe, 0x1) syz_io_uring_setup(0x4d4c, &(0x7f0000000040)={0x0, 0x0, 0x29}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000240)) [ 1084.877249][ T28] audit: type=1804 audit(1600744224.431:1655): pid=14609 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1628/bus" dev="sda1" ino=17068 res=1 errno=0 [ 1084.986766][ T28] audit: type=1804 audit(1600744224.461:1656): pid=14607 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1628/bus" dev="sda1" ino=17068 res=1 errno=0 03:10:24 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) fcntl$setstatus(r0, 0x4, 0x64000) io_submit(r1, 0x6, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2703000000000009, 0x8003f00, 0x3, 0x1, 0x0, r0, &(0x7f0000000000), 0x3000}]) ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f0000000000)) exit_group(0x0) syz_io_uring_setup(0x192a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x255}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:10:25 executing program 1: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r0, 0x0, 0xfd30) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000280)={0x1, 0x7e}, 0x2) 03:10:25 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 1085.797958][ T28] audit: type=1804 audit(1600744225.351:1657): pid=14617 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1286/bus" dev="sda1" ino=16977 res=1 errno=0 [ 1085.924544][ T28] audit: type=1804 audit(1600744225.431:1658): pid=14626 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1286/bus" dev="sda1" ino=16977 res=1 errno=0 03:10:25 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) modify_ldt$read_default(0x2, &(0x7f0000000080), 0x0) getsockopt$IP_SET_OP_GET_BYNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000000)={0x6, 0x7, 'syz2\x00'}, &(0x7f0000000040)=0x28) syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:10:25 executing program 1: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r0, 0x0, 0xfd30) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000280)={0x1, 0x7e}, 0x2) [ 1086.143907][ T28] audit: type=1804 audit(1600744225.551:1659): pid=14630 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1629/file1/bus" dev="loop5" ino=355 res=1 errno=0 [ 1086.296257][ T28] audit: type=1804 audit(1600744225.551:1660): pid=14630 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1629/file1/bus" dev="loop5" ino=355 res=1 errno=0 03:10:26 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) getpeername$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @rose}, [@bcast, @default, @netrom, @null, @default, @rose, @null]}, &(0x7f0000000080)=0x48) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xfd30) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:10:26 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 1087.446279][ T28] audit: type=1804 audit(1600744227.001:1661): pid=14652 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1630/bus" dev="sda1" ino=16850 res=1 errno=0 [ 1087.587203][ T28] audit: type=1804 audit(1600744227.081:1662): pid=14656 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1630/bus" dev="sda1" ino=16850 res=1 errno=0 03:10:27 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:10:27 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0xc40, 0x0, 0x3, 0x8002}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000240)) ioctl$VIDIOC_G_SLICED_VBI_CAP(0xffffffffffffffff, 0xc0745645, &(0x7f0000000040)={0x8, [0x8, 0x9, 0x1b02, 0x1, 0x7ff, 0xa0, 0x0, 0x9, 0x8000, 0x4, 0x3, 0x7ff, 0xfff9, 0xca, 0x8bdb, 0x6a, 0x1ff, 0x9, 0x0, 0x81, 0xe4c1, 0x4c72, 0x200, 0x0, 0x9, 0x9, 0xf800, 0x2, 0x20, 0x3f, 0x100, 0xff81, 0xffff, 0x81, 0x5, 0x9, 0x7, 0x7, 0x5706, 0x7d87, 0x2, 0x20, 0x64b, 0x40, 0x6, 0x9, 0x8], 0x8}) r0 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x103000, 0x85) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) 03:10:27 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000280)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000000)=""/172, 0xac, 0x3ff, 0x4, 0x401, 0x403, 0x4}}, 0x120) syz_io_uring_setup(0x1a9c, &(0x7f00000000c0)={0x0, 0x7df0, 0x0, 0x0, 0x113}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:10:27 executing program 1: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000040)=ANY=[], 0xfd30) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, 0x0, 0x0) [ 1088.252557][ T28] audit: type=1804 audit(1600744227.811:1663): pid=14676 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1287/bus" dev="sda1" ino=16922 res=1 errno=0 03:10:28 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(0xffffffffffffffff, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6900) ftruncate(r2, 0x800) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r4 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r2, r3, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1088.389463][ T28] audit: type=1804 audit(1600744227.841:1664): pid=14675 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1287/bus" dev="sda1" ino=16922 res=1 errno=0 03:10:28 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000040)) exit_group(0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x2000, 0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x10, 0x3, 0x0, 0x0, r0}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:10:29 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = dup(0xffffffffffffffff) exit_group(0x0) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x3, 0x9}) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000040)=0x6) syz_io_uring_setup(0x4bf9, &(0x7f00000001c0)={0x0, 0xe554, 0xa, 0x0, 0x118, 0x0, r0}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:10:29 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 1090.094328][ T28] audit: type=1804 audit(1600744229.651:1665): pid=14694 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1631/file1/bus" dev="loop5" ino=356 res=1 errno=0 [ 1090.277041][ T28] audit: type=1804 audit(1600744229.681:1666): pid=14694 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1631/file1/bus" dev="loop5" ino=356 res=1 errno=0 03:10:30 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(0xffffffffffffffff, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6900) ftruncate(r2, 0x800) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r4 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r2, r3, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 03:10:30 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(0xffffffffffffffff, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6900) ftruncate(r2, 0x800) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r4 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r2, r3, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1091.193230][ T28] audit: type=1804 audit(1600744230.751:1667): pid=14711 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1632/file1/bus" dev="loop5" ino=357 res=1 errno=0 [ 1092.468727][ T28] audit: type=1804 audit(1600744232.021:1668): pid=14721 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1288/file1/bus" dev="loop0" ino=358 res=1 errno=0 [ 1092.493285][ T28] audit: type=1804 audit(1600744232.021:1669): pid=14726 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1288/file1/bus" dev="loop0" ino=358 res=1 errno=0 [ 1092.849943][ T28] audit: type=1804 audit(1600744232.411:1670): pid=14731 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1632/file1/bus" dev="loop5" ino=357 res=1 errno=0 03:10:32 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(0xffffffffffffffff, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6900) ftruncate(r2, 0x800) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r4 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r2, r3, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 03:10:34 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) r0 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) getxattr(&(0x7f0000000140)='./bus\x00', &(0x7f0000000180)=@known='trusted.overlay.upper\x00', &(0x7f0000000280)=""/107, 0x6b) pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$SNDCTL_DSP_GETIPTR(r1, 0x800c5011, &(0x7f00000000c0)) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000040)=ANY=[], 0xfd30) ioctl$VFIO_IOMMU_MAP_DMA(0xffffffffffffffff, 0x3b71, &(0x7f0000000100)={0x20, 0x1, 0x5, 0x40, 0x4}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) 03:10:34 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 1096.114512][ T28] audit: type=1804 audit(1600744235.671:1671): pid=14741 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1633/file1/bus" dev="loop5" ino=359 res=1 errno=0 [ 1096.322349][ T28] audit: type=1804 audit(1600744235.711:1672): pid=14741 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1633/file1/bus" dev="loop5" ino=359 res=1 errno=0 03:10:35 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(0xffffffffffffffff, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6900) ftruncate(r2, 0x800) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r4 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r2, r3, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 03:10:36 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, 0xffffffffffffffff) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6900) ftruncate(r2, 0x800) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r4 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r2, r3, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 03:10:37 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) lsetxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.upper\x00', &(0x7f0000000080)={0x0, 0xfb, 0x25, 0x3, 0x40, "10c3ad49a3d7017ea1128dbca87dd78b", "e6fc90d2af9ebea7f72e669255a1b19b"}, 0x25, 0x1) [ 1097.749554][ T28] audit: type=1804 audit(1600744237.311:1673): pid=14756 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1289/file1/bus" dev="loop0" ino=360 res=1 errno=0 [ 1097.948283][ T28] audit: type=1804 audit(1600744237.341:1674): pid=14756 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1289/file1/bus" dev="loop0" ino=360 res=1 errno=0 [ 1098.318058][ T28] audit: type=1804 audit(1600744237.871:1675): pid=14771 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir832804734/syzkaller.LBgua3/1297/bus" dev="sda1" ino=16873 res=1 errno=0 [ 1098.378719][ T28] audit: type=1804 audit(1600744237.901:1676): pid=14771 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir832804734/syzkaller.LBgua3/1297/bus" dev="sda1" ino=16873 res=1 errno=0 [ 1098.756572][ T28] audit: type=1804 audit(1600744238.311:1677): pid=14769 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1634/file1/bus" dev="loop5" ino=361 res=1 errno=0 [ 1099.012336][ T28] audit: type=1804 audit(1600744238.351:1678): pid=14769 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1634/file1/bus" dev="loop5" ino=361 res=1 errno=0 03:10:39 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(0xffffffffffffffff, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6900) ftruncate(r2, 0x800) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r4 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r2, r3, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 03:10:39 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, 0xffffffffffffffff) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6900) ftruncate(r2, 0x800) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r4 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r2, r3, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 03:10:39 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, r1, 0x0, 0x8400fffffffa) 03:10:39 executing program 4: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000280)={0x0, 0x0}) ptrace$setregs(0xf, r0, 0x2, &(0x7f0000000300)="1c77288fb8aff5a8b0b706103d088f6224965da3518d783b8e7b03ab6c4ff266a096fe69e8228b3e74ad7cd689787575068da954d3efcf42cc0edf1436642155c07120294cb971ff2df566c3ddfdf210af2b6463d5") clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xf8, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {0x8, 0x9, 0x2}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x5}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x5}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x40}, 0x50) ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, &(0x7f0000000480)={"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"}) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) [ 1100.167311][ T28] audit: type=1804 audit(1600744239.721:1679): pid=14795 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1635/file1/bus" dev="loop5" ino=362 res=1 errno=0 [ 1100.337418][ T28] audit: type=1804 audit(1600744239.751:1680): pid=14795 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1635/file1/bus" dev="loop5" ino=362 res=1 errno=0 [ 1100.959603][ T28] audit: type=1804 audit(1600744240.521:1681): pid=14806 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir832804734/syzkaller.LBgua3/1298/file1/bus" dev="sda1" ino=16964 res=1 errno=0 [ 1100.998736][ T28] audit: type=1804 audit(1600744240.541:1682): pid=14806 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir832804734/syzkaller.LBgua3/1298/file1/bus" dev="sda1" ino=16964 res=1 errno=0 03:10:41 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, 0xffffffffffffffff) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6900) ftruncate(r2, 0x800) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r4 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r2, r3, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 03:10:41 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(0xffffffffffffffff, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6900) ftruncate(r1, 0x800) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r3 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r1, r2, 0x0, 0x8400fffffffa) 03:10:43 executing program 4: sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x2, 0x7, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x4}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x100000001}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_BYTES={0xc}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x24000014) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000140)=""/77) syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:10:43 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(0xffffffffffffffff, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6900) ftruncate(r2, 0x800) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r4 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r2, r3, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 03:10:43 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 1104.576718][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 1104.576731][ T28] audit: type=1804 audit(1600744244.131:1687): pid=14841 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1637/file1/bus" dev="loop5" ino=364 res=1 errno=0 [ 1104.876996][ T28] audit: type=1804 audit(1600744244.131:1688): pid=14843 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1291/file1/bus" dev="sda1" ino=16989 res=1 errno=0 [ 1105.138954][ T28] audit: type=1804 audit(1600744244.131:1689): pid=14843 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1291/file1/bus" dev="sda1" ino=16989 res=1 errno=0 [ 1105.299210][ T28] audit: type=1804 audit(1600744244.171:1690): pid=14841 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1637/file1/bus" dev="loop5" ino=364 res=1 errno=0 03:10:45 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(0xffffffffffffffff, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6900) ftruncate(r2, 0x800) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r4 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r2, r3, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 03:10:45 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, r1, 0x0, 0x8400fffffffa) 03:10:46 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0x80]}, 0x8) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvme-fabrics\x00', 0x800, 0x0) syz_io_uring_setup(0xd8a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00006d5000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) [ 1107.621749][ T28] audit: type=1804 audit(1600744247.181:1691): pid=14882 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1638/file1/bus" dev="loop5" ino=365 res=1 errno=0 [ 1107.898992][ T28] audit: type=1804 audit(1600744247.211:1692): pid=14882 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1638/file1/bus" dev="loop5" ino=365 res=1 errno=0 03:10:48 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(0xffffffffffffffff, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6900) ftruncate(r1, 0x800) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r3 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r1, r2, 0x0, 0x8400fffffffa) [ 1108.954808][ T28] audit: type=1804 audit(1600744248.511:1693): pid=14890 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1292/file1/bus" dev="loop0" ino=366 res=1 errno=0 03:10:48 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(0xffffffffffffffff, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6900) ftruncate(r2, 0x800) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r4 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r2, r3, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1109.196864][ T28] audit: type=1804 audit(1600744248.511:1694): pid=14890 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1292/file1/bus" dev="loop0" ino=366 res=1 errno=0 [ 1109.438009][ T28] audit: type=1804 audit(1600744248.821:1695): pid=14895 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1639/file1/bus" dev="loop5" ino=367 res=1 errno=0 [ 1109.496717][ T28] audit: type=1804 audit(1600744248.821:1696): pid=14895 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1639/file1/bus" dev="loop5" ino=367 res=1 errno=0 03:10:49 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, r0, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @dev={[], 0x1f}}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_MAC={0xa, 0x6, @random="fd29ead2adb1"}, @NL80211_ATTR_MAC={0xa, 0x6, @multicast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @local}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x74}}, 0x20000010) syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:10:49 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000040)=ANY=[], 0xffffff7d) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:10:50 executing program 4: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0xfffffffffffffffb, 0x2004c0) utime(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0xf70f, 0x2}) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000000)='},\x00', 0x0, 0xffffffffffffffff) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:10:50 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, 0xffffffffffffffff) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6900) ftruncate(r2, 0x800) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r4 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r2, r3, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 03:10:51 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$vcsu(&(0x7f0000000040)='/dev/vcsu#\x00', 0x7ff, 0x200000) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r0, 0x80184153, &(0x7f00000003c0)={0x0, &(0x7f0000000380)=[&(0x7f0000000080)="c2c205d785db0ed5ec33639e8be193b1e35968707e5111610c7cd30519e128f35e852dae8501873d8fe439e6a7135aaa071236045bf3cb7ca1d3fb883fa52c945f63371acd20ae04650bac2316615159eb49ccca31d539142ee3ca35dbd4943abb8a7e885d41c6eb6cfeeb50a0bfa1b24d39866d7ede62465924594823f2f82bee82606ceff7ee6dd4bf955d1d3050119682e5a6ea37c77ed9e8c45bd6cede26af42add7179181f7", &(0x7f0000000480)="63c22844386f270b3294044a4622cdf1613f9af4f94cdfb1a7d6f5e4ba2711bf728e0643dd5f89f29a196b62041be8a3c18e2a67644920b6d07810930447df17c28ef02306ac2531dba255ec493e3bd1a88e175e8efeccc44a72a0d3ccca114a1291ff0645d3e8e2dacf707206fe80b259d786d9814a1199210aef555552fb1205ea06b2377fd9e57ee8e666e043c162e2b8fc827fa41dc8f8deedc3ce6da4ab573b5588a21741209765d9fa91be9845118de2556e48e2be41617339a2fb7afdd4707536d18878", &(0x7f0000000140)="b3bfb18ac66ac1f9732d8883a9671b56da1928ad8cb3de81879f1bb6cae1e254587aadba399425", &(0x7f0000000180)="c563bc7307eb8ca08d"]}) r1 = syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000000)='trusted.overlay.upper\x00', &(0x7f0000000280)={0x0, 0xfb, 0xe0, 0x4, 0x40, "b216e27582e1bc5f4a0cdae2ba323a65", "f41ceef7757596426468e64b1a093a9a623d4ebc391d9f567eea9f596bd6a8d36ee6d05b2e94e95b3ac667338e853963ac228adc5f82e86983bf4d64d5908313d8755226f02144a168c67bdd40bd7dba54561b10c701341b4e4f94d4767f90646bc10beca53c472b5559c2a8b9fd2c028232c84be1ab7abd4c8aa786339eaa66e17d69dc9fbee7d8a26b3e1531ca87c2ff6bea7dd04277b51186fbc345eae63b453d3985e2a51b5df9572ed5a7c4d7ffce68b33452c4fc15649fd4724e7de6e9446eeaefae4e591df8bbcd"}, 0xe0, 0x2) [ 1112.982121][ T28] audit: type=1804 audit(1600744252.541:1697): pid=14913 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir832804734/syzkaller.LBgua3/1300/bus" dev="sda1" ino=16833 res=1 errno=0 [ 1113.147795][ T28] audit: type=1804 audit(1600744252.541:1698): pid=14914 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir832804734/syzkaller.LBgua3/1300/bus" dev="sda1" ino=16833 res=1 errno=0 [ 1114.408924][ T28] audit: type=1804 audit(1600744253.961:1699): pid=14946 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1640/bus" dev="sda1" ino=16615 res=1 errno=0 [ 1115.081409][ T28] audit: type=1804 audit(1600744254.641:1700): pid=14950 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1640/bus" dev="sda1" ino=16615 res=1 errno=0 03:10:55 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000000)=0x10, 0x4) getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000100)=""/190, &(0x7f00000000c0)=0xbe) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x580f, 0x0, 0x0, 0x1000}, &(0x7f00006d2000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000440), &(0x7f0000000040)) 03:10:55 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(0xffffffffffffffff, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6900) ftruncate(r1, 0x800) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r3 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r1, r2, 0x0, 0x8400fffffffa) 03:10:55 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, 0xffffffffffffffff) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6900) ftruncate(r2, 0x800) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r4 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r2, r3, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 03:10:55 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000040)=ANY=[], 0xffffff7d) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 1117.229358][ T28] audit: type=1804 audit(1600744256.791:1701): pid=14969 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir832804734/syzkaller.LBgua3/1301/bus" dev="sda1" ino=16955 res=1 errno=0 [ 1117.382021][ T28] audit: type=1804 audit(1600744256.791:1702): pid=14970 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir832804734/syzkaller.LBgua3/1301/bus" dev="sda1" ino=16955 res=1 errno=0 03:10:58 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x841, 0x0) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000480)={0x2f0, 0x12, 0x400, 0x70bd25, 0x25dfdbfb, {0x8, 0x65, 0x4, 0x80, {0x4e21, 0x4e23, [0x800, 0xe1, 0x6, 0x1], [0x10000, 0x200, 0x3, 0x95], 0x0, [0x401]}, 0x100, 0x5}, [@INET_DIAG_REQ_BYTECODE={0xcf, 0x1, "debfc04868f0d21d4ccf7799880694d9e13ecbc84b27dc05b3c86213aae1876e0baa2203b0530f01152df70b628e6e067e442ce214e84970e7b6088df03c2776d916fd9f088ac925958cc76de729ec03a4884b649cdb404672116a752330748732a5f3d9f57e2b432c8560afeecf3c58a3ff215db19c96f2851677ec28217d3ca53af11f28d1fb29fcb4e24088ce1b2a5813516c99942798b74204627f9c91614e8cdfb9976464a769d111939e88e193d13346f7e716e57aad67777b0e57cca2de4a61d35e2ce8c8274130"}, @INET_DIAG_REQ_BYTECODE={0xed, 0x1, "6e3c340e30048f3510f8a6640e58d3c35362b28bafd1f0c45fa70150480c5032409e854b88fe941c78fe78e98edca1d4d7ce72e71916c69b4a6e985c7a8d3f5456845c6f1cb083a8133a3892fb341c5d8aa6e61f254004b33f7b40953280a224d58c045809cdbdbc4fc21dec9498346a3ab833cda089d66a9edf8a6681605cb89921acab3a699ab1dd740e600ebef147005594dd5b35e44f3d985903654d9c49c9664ffb89c099a5dac9becde3b6fe9fdf28d2dfa3ab6335b630e635784b518c6d2bea6757f3152906d8e4e952037c6a8a1b286399e46b10ca2699e20d8358a481aa68001f69d848a5"}, @INET_DIAG_REQ_BYTECODE={0x5b, 0x1, "c394cb772bd57f134ed8016d91e7b3e6dd2dfb233a82e1bd93a63a0ecb8dc955f07a657b6f5da90bc2ef017eda385f18ed32782743664e92b6456c30dc9f4657b4505844f7bf38e5593eafcf6b0a221569852a0b055aee"}, @INET_DIAG_REQ_BYTECODE={0x52, 0x1, "f5e422960a7dcdfa1f0dfe196cc04c0ee61a69b7173769f4417cfc015d556ec4434d7f2013bb3b085b66ad7623ab6ea41e1f8d439bc15d10f14158472e8ae4e1d34d3e1c79e1899c7d57b66a2876"}, @INET_DIAG_REQ_BYTECODE={0x34, 0x1, "12c8a1bbb961e8adb151423b8ad458466bcd16a30b8ad6c79ce62c4d3bea3542cbc13cba281492193e4420225def2467"}]}, 0x2f0}, 0x1, 0x0, 0x0, 0x40800}, 0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) [ 1119.282563][ T28] audit: type=1804 audit(1600744258.841:1703): pid=14972 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1294/file1/bus" dev="loop0" ino=369 res=1 errno=0 [ 1119.432691][ T28] audit: type=1804 audit(1600744258.841:1704): pid=14972 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1294/file1/bus" dev="loop0" ino=369 res=1 errno=0 [ 1119.718871][ T28] audit: type=1804 audit(1600744259.131:1705): pid=14984 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1641/file1/bus" dev="loop5" ino=370 res=1 errno=0 [ 1120.001545][ T28] audit: type=1804 audit(1600744259.131:1706): pid=14984 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1641/file1/bus" dev="loop5" ino=370 res=1 errno=0 03:11:02 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(0xffffffffffffffff, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6900) ftruncate(r2, 0x800) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r3 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000040)=ANY=[], 0xffffff7d) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 03:11:03 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, 0xffffffffffffffff) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6900) ftruncate(r2, 0x800) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r4 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r2, r3, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 03:11:03 executing program 4: ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x6, 'vlan0\x00', {0x4}, 0x9}) clone(0x1000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000040)=ANY=[], 0xfd30) sendmsg$tipc(r0, &(0x7f0000000180)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x2, {0x40, 0x4, 0x4}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)="52f9acf0ed6aa2b27ff2ec551316373f4bb1eec8c2563e0851565b", 0x1b}, {&(0x7f00000000c0)="21a1e4c28f5e9fcc02ea271d60442e18301e970866567e348d1c70bc4f29a0847c87f33881a6e8978eea477292ee9ee536e083b18e132717254bf9591ef78e61aa0aa964993dd1f3640fc751978c12b95a9503", 0x53}], 0x2, 0x0, 0x0, 0x4044040}, 0x20060800) syz_io_uring_setup(0x7b8e, &(0x7f0000000280)={0x0, 0x2, 0x2}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) 03:11:03 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000040)=ANY=[], 0xffffff7d) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 1124.184564][ T28] audit: type=1804 audit(1600744263.741:1707): pid=15009 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1295/file1/bus" dev="loop0" ino=371 res=1 errno=0 03:11:03 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x80000) r1 = syz_open_dev$vcsn(&(0x7f00000001c0)='/dev/vcs#\x00', 0x100000001, 0x44401) ioctl$SG_SET_TIMEOUT(r1, 0x2201, &(0x7f0000000200)=0x6e2) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000040)) syz_io_uring_setup(0xd8a, &(0x7f0000000140)={0x0, 0x0, 0x2, 0x3, 0x171}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f0000000100)={0x3a2, 0x2, 0x580c, 0x9, &(0x7f0000000080)=[{0x81, 0x6, 0x4, 0x3}, {0x0, 0x398, 0x5, 0x2}, {0x43b, 0x81, 0x1941, 0x6}, {0xfffa, 0x3, 0xffff, 0x8}, {0x401, 0x4, 0x1}, {0x8, 0x40, 0x200, 0x6}, {0xffff, 0x4, 0x0, 0x5}, {0x1, 0x9, 0xd, 0x74f5}, {0x6, 0xff81, 0xfff, 0x3}]}) r2 = syz_open_dev$vcsn(&(0x7f0000000280)='/dev/vcs#\x00', 0x80, 0x20000) fgetxattr(r2, &(0x7f00000002c0)=@known='user.syz\x00', &(0x7f0000000300)=""/5, 0x5) prctl$PR_SET_TSC(0x1a, 0x4) [ 1124.330806][ T28] audit: type=1804 audit(1600744263.741:1708): pid=15005 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1295/file1/bus" dev="loop0" ino=371 res=1 errno=0 [ 1124.798655][ T28] audit: type=1804 audit(1600744264.351:1709): pid=15010 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir832804734/syzkaller.LBgua3/1302/file1/bus" dev="loop1" ino=372 res=1 errno=0 [ 1124.978831][ T28] audit: type=1804 audit(1600744264.371:1710): pid=15010 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir832804734/syzkaller.LBgua3/1302/file1/bus" dev="loop1" ino=372 res=1 errno=0 [ 1125.881176][ T28] audit: type=1804 audit(1600744265.441:1711): pid=15011 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1642/file1/bus" dev="loop5" ino=373 res=1 errno=0 [ 1126.078568][ T28] audit: type=1804 audit(1600744265.501:1712): pid=15011 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1642/file1/bus" dev="loop5" ino=373 res=1 errno=0 03:11:07 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x1}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x88000, 0x0) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000040)=0x1) ioctl$VIDIOC_SUBDEV_G_CROP(r0, 0xc038563b, &(0x7f0000000080)={0x0, 0x0, {0x5, 0x80000000, 0x47f, 0x3}}) 03:11:07 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(0xffffffffffffffff, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6900) ftruncate(r2, 0x800) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r3 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000040)=ANY=[], 0xffffff7d) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 03:11:07 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:11:07 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:11:07 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xf75}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x20000040) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) [ 1128.464880][ T28] audit: type=1804 audit(1600744268.021:1713): pid=15047 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1643/file1/bus" dev="sda1" ino=16844 res=1 errno=0 [ 1128.712161][ T28] audit: type=1804 audit(1600744268.051:1714): pid=15047 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1643/file1/bus" dev="sda1" ino=16844 res=1 errno=0 [ 1129.018118][ T28] audit: type=1804 audit(1600744268.571:1715): pid=15062 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1296/file1/bus" dev="sda1" ino=16814 res=1 errno=0 03:11:08 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = dup(0xffffffffffffffff) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000480)={0x6, [[0x2, 0xa03, 0x4, 0x2ec3, 0x9, 0x106, 0xf82f, 0x200], [0xc1b, 0x1, 0x6, 0x9, 0xe0, 0x40, 0x4, 0x1], [0x80, 0xad66, 0x1ff, 0x1, 0x948, 0x2, 0x6, 0x10000]], [], [{0x80000001, 0x3, 0x1, 0x0, 0x0, 0x1}, {0xe53, 0x7ff, 0x0, 0x0, 0x1}, {0x20, 0x5, 0x0, 0x1, 0x0, 0x1}, {0x0, 0xff, 0x0, 0x0, 0x0, 0x1}, {0x8, 0x7fffffff, 0x1, 0x0, 0x1}, {0x9, 0x3, 0x0, 0x1, 0x0, 0x1}, {0xff, 0x80000001, 0x1, 0x0, 0x1, 0x1}, {0x0, 0x9, 0x0, 0x0, 0x1, 0x1}, {0x3, 0x8ff2, 0x1, 0x0, 0x1, 0x1}, {0x8, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x5, 0x2, 0x0, 0x0, 0x1}, {0x5, 0x4, 0x1, 0x0, 0x0, 0x1}], [], 0xe83e}) r1 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) socket$packet(0x11, 0x2, 0x300) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x40) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000180)=ANY=[@ANYRES32=r2], 0xfd30) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ubi_ctrl\x00', 0x40001, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r3, 0x800442d2, &(0x7f0000000280)) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1ffd}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000000)) 03:11:09 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1129.824410][ T28] audit: type=1804 audit(1600744269.381:1716): pid=15067 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir832804734/syzkaller.LBgua3/1303/file1/bus" dev="loop1" ino=374 res=1 errno=0 [ 1129.993839][ T28] audit: type=1804 audit(1600744269.381:1717): pid=15067 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir832804734/syzkaller.LBgua3/1303/file1/bus" dev="loop1" ino=374 res=1 errno=0 [ 1130.542997][ T28] audit: type=1804 audit(1600744270.101:1718): pid=15070 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1644/file1/bus" dev="sda1" ino=16937 res=1 errno=0 [ 1130.570202][ T28] audit: type=1804 audit(1600744270.121:1719): pid=15070 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1644/file1/bus" dev="sda1" ino=16937 res=1 errno=0 03:11:12 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:11:12 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1133.662607][ T28] audit: type=1804 audit(1600744273.221:1720): pid=15094 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1645/file1/bus" dev="sda1" ino=16869 res=1 errno=0 [ 1133.810513][ T28] audit: type=1804 audit(1600744273.251:1721): pid=15094 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1645/file1/bus" dev="sda1" ino=16869 res=1 errno=0 03:11:15 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', 0x0, 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:11:15 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(0xffffffffffffffff, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6900) ftruncate(r2, 0x800) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xffffff7d) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 03:11:15 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000040)=ANY=[], 0xfd30) fstatfs(r0, &(0x7f0000000000)=""/164) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) r1 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000040)=ANY=[], 0xfd30) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f00000000c0)={0x0, r0}) [ 1136.450769][ T28] audit: type=1804 audit(1600744276.011:1722): pid=15107 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1646/bus" dev="sda1" ino=16831 res=1 errno=0 [ 1136.568923][ T28] audit: type=1804 audit(1600744276.041:1723): pid=15107 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1646/bus" dev="sda1" ino=16831 res=1 errno=0 [ 1138.029566][ T28] audit: type=1804 audit(1600744277.591:1724): pid=15114 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1297/file1/bus" dev="sda1" ino=16723 res=1 errno=0 [ 1138.240605][ T28] audit: type=1804 audit(1600744277.801:1725): pid=15119 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir832804734/syzkaller.LBgua3/1304/file1/bus" dev="sda1" ino=16781 res=1 errno=0 03:11:19 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:11:19 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', 0x0, 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1143.045789][ T28] audit: type=1804 audit(1600744282.601:1726): pid=15124 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1647/bus" dev="sda1" ino=16615 res=1 errno=0 [ 1143.190502][ T28] audit: type=1804 audit(1600744282.641:1727): pid=15124 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1647/bus" dev="sda1" ino=16615 res=1 errno=0 03:11:24 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', 0x0, 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:11:24 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(0xffffffffffffffff, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6900) ftruncate(r2, 0x800) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xffffff7d) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 03:11:24 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10) syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) [ 1145.570968][ T28] audit: type=1804 audit(1600744285.131:1728): pid=15142 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1648/bus" dev="sda1" ino=16917 res=1 errno=0 [ 1145.778840][ T28] audit: type=1804 audit(1600744285.151:1729): pid=15142 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1648/bus" dev="sda1" ino=16917 res=1 errno=0 03:11:25 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(0xffffffffffffffff, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6900) ftruncate(r2, 0x800) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xffffff7d) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 03:11:25 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0xffffffff}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000240)) [ 1147.111048][T15142] syz-executor.5 (15142) used greatest stack depth: 8224 bytes left 03:11:26 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:11:26 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1147.588205][T15164] FAT-fs (loop5): bogus number of reserved sectors [ 1147.628472][T15164] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1147.723049][ T28] audit: type=1804 audit(1600744287.281:1730): pid=15170 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1649/file1/bus" dev="sda1" ino=16824 res=1 errno=0 [ 1147.879942][ T28] audit: type=1804 audit(1600744287.311:1731): pid=15170 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1649/file1/bus" dev="sda1" ino=16824 res=1 errno=0 03:11:27 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:11:28 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:11:28 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000640)=[{&(0x7f0000000080)="c691e25ca03029dc4289f5235029a6d211e9f980d3788d894e2b1b5485252ceda792ddbf28dabfde3b1764134491785cf07ac346a9d7ba754e16a06d9e2aabf0684857ab8ceb9a85429028d84f95ce5cfa88868cef47d66316bd34beac73edc4ad88b8fe2d971eb3162ce1f5c25efa7e96a2", 0x72}, {&(0x7f0000000100)="4f6fbe", 0x3}, {&(0x7f0000000140)="b91d39807617e5c8244d7b7456ed3766bfecd3679bedeac5b7bc7d9ab646a864f183f941af3c04072c240c1989454c9f72fae0b39ae4702f0479a76f6066f990cb5a8086e2e9c5df33dd982c52e276546053bf2864c566a07af088af15ab00d912272e3550af51406359fd86bd56b7eb6cf10c4a1dc6033d889be73a050c4e823e7d5de6f622493f7e761d29bb10675959c379a05ece784bdba33be6791a31a285f1568ae4540e1308dbbc579e3c578efbcbcb922db35d3c3a6f1fc2410a0a860807a7dd", 0xc4}, {&(0x7f0000000280)="e22ffa25a9dc7c9267df1f442531f5d2ef59f839428e809eac3d2b5f0b4caf9c653df47e6a1683627bb6a106f4568c669ad2c6f880909fe09a5bc65710ef70f7cb58438d65a8e3ec50bc91cf1bb6273062d9c9c117127a0c9eec6f9574b83dc6f8a44b5a6bb64bac6e078635839449ca47da3a35166eae15859ddffff8074a4aa87cde65110b8327b8f35fa3100a273150649fc4eae33188fd2c98cc1070f1a9830949dfa3bdf48f1dacb001996a9a56dce250fc9b79f9265e3e3eaafd8760755b1318e9cd5fa8abda168506ca8df98c73dfaea4b00356ebcb2f89160e8be699b30fac2784e01fcec126b3447045", 0xee}, {&(0x7f0000000480)="90cb445050a23629a38d858b88d9af25de409db4cc0675682ac7db4712e1ad1ea83b32ab8680982cef9617b7ecc2d82e8f8a2215841776c1fc67d1321c36a81d38b58208b8429fb600dbcef39ce86925c3ac86d7bba703f3dfec3eb30069343d752ffd03b3bf835aefe73dc084fe7fdbeec564475aa3a3e5ee823df16f40c352e8ec21be8173806b1b7b73f9311c01c9747159e92c9a900b48fcd97d8fa94d95accb4e239d7a48e0d52ce01a27f0ef559ddf131bd81b9747ea000067fe5bb6604086e396ea", 0xc5}, {&(0x7f0000000380)="a1a5f1b0d56ea18300ee6986e1c69898591ff245e1f88f7ad4ba884a3458397635960be9b352d8bf5177dbf6937aaa4b1eeeb17ad3f28613a4985b3d30e1f8e0e955e99420961b031e8e5102a7078da31ab0d7a2518c1738c0c57aa2c11a89b3e587aed16a5b212b94c564eebcedd9f1f068367686640eb4d2cb709b30b6b9fbb2", 0x81}, {&(0x7f0000000580)="862b49b0f8f50d21450fd09a82cc6dfca7fa24a494e26fc7e1c52e0cfb86c9135cef4c64389ad9da7f45276379340c6fb656eed8d42707f2c8f84fe1104d8d8aa10ba6014667563742e4ef360d2170c98697b6d48f6df2e9880d35ebd19f0cc8ed8674a6d83a30f70789cb0572a54896425852c91e5ff72695e4b984b78074b8a4c4535bab9bf199e197d56007d62885fa9fb67bbd3604d734f64c35775818f98f2ca10b593acb93ce5c102cd6d8a61510e5a33c5e16", 0xb6}], 0x7, 0x0) r0 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) read$FUSE(r0, &(0x7f0000000740)={0x2020, 0x0, 0x0}, 0x2020) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r3) write$FUSE_ATTR(r0, &(0x7f0000000000)={0x78, 0x0, r1, {0x101, 0x7, 0x0, {0x0, 0x7fffffff, 0xfff, 0x5, 0x400, 0x1f, 0x7ff, 0x72, 0x400, 0x0, 0x400, r3, 0xffffffffffffffff, 0x7, 0xffff8000}}}, 0x78) syz_io_uring_setup(0xd8a, &(0x7f00000006c0)={0x0, 0xba7a, 0x0, 0x0, 0xffffffff, 0x0, r0}, &(0x7f00006cf000/0x3000)=nil, &(0x7f00006d1000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000240)) [ 1148.784635][ T28] audit: type=1804 audit(1600744288.341:1732): pid=15196 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1650/bus" dev="sda1" ino=16915 res=1 errno=0 [ 1148.989043][ T28] audit: type=1804 audit(1600744288.371:1733): pid=15196 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1650/bus" dev="sda1" ino=16915 res=1 errno=0 [ 1149.728020][ T28] audit: type=1804 audit(1600744289.281:1734): pid=15206 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir832804734/syzkaller.LBgua3/1306/bus" dev="sda1" ino=16662 res=1 errno=0 03:11:31 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(0xffffffffffffffff, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6900) ftruncate(r2, 0x800) r3 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000040)=ANY=[], 0xffffff7d) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 03:11:31 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:11:31 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:11:31 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0xaf00, 0x0, 0x2}, &(0x7f00006d2000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000240)) [ 1152.417482][T15220] FAT-fs (loop5): bogus number of reserved sectors [ 1152.452081][T15220] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1152.662847][ T28] audit: type=1804 audit(1600744292.221:1735): pid=15220 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1651/file1/bus" dev="sda1" ino=16963 res=1 errno=0 [ 1152.835267][ T28] audit: type=1804 audit(1600744292.261:1736): pid=15220 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1651/file1/bus" dev="sda1" ino=16963 res=1 errno=0 03:11:32 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0x20d8a, &(0x7f00000001c0)={0x0, 0x0, 0x1, 0x0, 0x1}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:11:33 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000000)={{0x4, 0x7f}, 'port1\x00', 0x90, 0x0, 0x2, 0x0, 0x2, 0x200, 0x1, 0x0, 0x6, 0x7f}) syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) socket$l2tp(0x2, 0x2, 0x73) 03:11:33 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:11:33 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 1155.146091][ T28] audit: type=1804 audit(1600744294.701:1737): pid=15261 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1652/file1/bus" dev="sda1" ino=16848 res=1 errno=0 [ 1155.338444][ T28] audit: type=1804 audit(1600744294.701:1738): pid=15261 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1652/file1/bus" dev="sda1" ino=16848 res=1 errno=0 03:11:36 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:11:36 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(0xffffffffffffffff, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6900) ftruncate(r2, 0x800) r3 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000040)=ANY=[], 0xffffff7d) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 03:11:36 executing program 4: clone(0x20002844d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) ioctl$TIOCL_SELLOADLUT(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x5, 0x80, 0x6, 0xa4, 0x6}) [ 1156.950607][ T28] audit: type=1804 audit(1600744296.511:1739): pid=15276 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1653/file1/bus" dev="sda1" ino=16978 res=1 errno=0 [ 1157.193205][ T28] audit: type=1804 audit(1600744296.751:1740): pid=15284 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1653/file1/bus" dev="sda1" ino=16978 res=1 errno=0 03:11:37 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:11:37 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 1158.332303][ T28] audit: type=1804 audit(1600744297.891:1741): pid=15292 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1654/file1/bus" dev="sda1" ino=16824 res=1 errno=0 [ 1158.508170][ T28] audit: type=1804 audit(1600744297.891:1742): pid=15292 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1654/file1/bus" dev="sda1" ino=16824 res=1 errno=0 03:11:38 executing program 4: ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000000)={0xa, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) fcntl$setstatus(r0, 0x4, 0x64000) io_submit(r1, 0x6, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2703000000000009, 0x8003f00, 0x3, 0x1, 0x0, r0, &(0x7f0000000000), 0x3000}]) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r2}, 0x14}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x88, r2, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'ip6tnl0\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'ipvlan0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'ip6tnl0\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x44) exit_group(0x0) r3 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000040)=ANY=[], 0xfd30) syz_io_uring_setup(0xd8a, &(0x7f0000000080)={0x0, 0xfffffffe, 0x10, 0x2, 0x0, 0x0, r3}, &(0x7f00006d2000/0x2000)=nil, &(0x7f00006d3000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 03:11:39 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1160.649062][T15313] FAT-fs (loop5): bogus number of reserved sectors [ 1160.729775][T15313] FAT-fs (loop5): Can't find a valid FAT filesystem 03:11:39 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$sock_qrtr_TIOCINQ(r0, 0x541b, &(0x7f0000000080)) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, r1}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:11:40 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(0xffffffffffffffff, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6900) r3 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000040)=ANY=[], 0xffffff7d) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 03:11:41 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1161.609361][ T28] audit: type=1804 audit(1600744301.171:1743): pid=15325 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1302/file1/bus" dev="loop0" ino=378 res=1 errno=0 [ 1161.756236][ T28] audit: type=1804 audit(1600744301.221:1744): pid=15325 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1302/file1/bus" dev="loop0" ino=378 res=1 errno=0 03:11:42 executing program 4: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000005c0)={0x6, 0x118, 0xfa00, {{0x8, 0x3, "ad77763db6d9e8be33eef152bf2626c4807c238f55a98b12742c35e06515cf73608208fcac354bd5e1d4ca9170b2bb1d4cbfff1b77c7218f2a8d703e423a58d633bc59c98c8a30bb6b3e54c85deb9ccea87667198f5598398d8875827a8daed433495405895a2282f02c21371856a60894a66cfc7150b82d4e2ab90989b9cd106f3eb4440abd6383347803344d832f8ebf90ba41af3fd0fbd525d4ba4c565210041a262f1b88058ba409aa02a3b8a800e1f91ddae257fa6ea9f304662af96d07cf054893bf04353b83fdfb90693f3df2ef2a003bb4086e3e69016f16a45737586252ed4aa0eb139788eb8a9747ea51bb30a564689f7d9b892f2a3dfb43db76fb", 0x1f, 0x9, 0x4f, 0x26, 0x4, 0xc9, 0xe0, 0x1}, r0}}, 0x120) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x0, 0xc7b068dda7656499}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000480)={0x15, 0x110, 0xfa00, {r2, 0x8, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @local}, @in6={0xa, 0x4e21, 0x48c, @mcast1, 0x1}}}, 0x118) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r2, 0x2, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @multicast2}, @in6={0xa, 0x4e21, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5}}}, 0x118) [ 1162.553350][T15333] FAT-fs (loop5): bogus number of reserved sectors [ 1162.570674][T15333] FAT-fs (loop5): Can't find a valid FAT filesystem 03:11:42 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 1162.705093][ T28] audit: type=1804 audit(1600744302.261:1745): pid=15333 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1656/file1/bus" dev="sda1" ino=16951 res=1 errno=0 [ 1162.858376][ T28] audit: type=1804 audit(1600744302.291:1746): pid=15333 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1656/file1/bus" dev="sda1" ino=16951 res=1 errno=0 03:11:43 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:11:43 executing program 4: ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000080)) r0 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000040)=ANY=[], 0xfd30) write$tun(r0, &(0x7f0000000040)={@void, @void, @eth={@random="cff48a55ddbe", @remote, @void, {@generic={0x8884, "6f1c174ce393a8b0f4d0003704ca4c67ad29fba3b64804a515244382fc"}}}}, 0x2b) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) finit_module(r1, &(0x7f0000000000)='\x00', 0x2) [ 1164.560683][T15354] FAT-fs (loop5): bogus number of reserved sectors [ 1164.567194][T15354] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1164.669285][ T28] audit: type=1804 audit(1600744304.231:1747): pid=15357 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1657/file1/bus" dev="sda1" ino=17010 res=1 errno=0 [ 1164.833104][ T28] audit: type=1804 audit(1600744304.251:1748): pid=15357 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1657/file1/bus" dev="sda1" ino=17010 res=1 errno=0 03:11:45 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{0x0}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1165.817059][T15364] FAT-fs (loop5): bogus number of reserved sectors [ 1165.859997][T15364] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1165.922260][ T28] audit: type=1804 audit(1600744305.481:1749): pid=15369 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1658/file1/bus" dev="sda1" ino=16931 res=1 errno=0 [ 1166.109133][ T28] audit: type=1804 audit(1600744305.501:1750): pid=15369 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1658/file1/bus" dev="sda1" ino=16931 res=1 errno=0 [ 1168.594857][ T28] audit: type=1804 audit(1600744308.151:1751): pid=15392 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1303/file1/bus" dev="loop0" ino=379 res=1 errno=0 [ 1168.703919][ T28] audit: type=1804 audit(1600744308.181:1752): pid=15392 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1303/file1/bus" dev="loop0" ino=379 res=1 errno=0 03:11:48 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(0xffffffffffffffff, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6900) r3 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000040)=ANY=[], 0xffffff7d) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 03:11:48 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{0x0}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:11:48 executing program 4: r0 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000040)=ANY=[], 0xfd30) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f0000000480)={0x0, 0x0, @ioapic}) clone(0x20002004dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x2000, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/seq\x00', 0x200000) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x40) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r3, 0x0, 0x0) fcntl$lock(r2, 0x7, &(0x7f0000000100)={0x2, 0x4, 0x3f, 0x3, r3}) syz_io_uring_setup(0x198, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, r1}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d5000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) [ 1169.090779][T15398] FAT-fs (loop5): bogus number of reserved sectors [ 1169.097322][T15398] FAT-fs (loop5): Can't find a valid FAT filesystem 03:11:48 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 1169.478906][ T28] audit: type=1804 audit(1600744309.041:1753): pid=15398 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1659/file1/bus" dev="sda1" ino=16733 res=1 errno=0 [ 1169.647683][ T28] audit: type=1804 audit(1600744309.041:1754): pid=15398 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1659/file1/bus" dev="sda1" ino=16733 res=1 errno=0 03:11:50 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{0x0}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1171.603799][T15416] FAT-fs (loop5): bogus number of reserved sectors [ 1171.613789][T15416] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1171.632766][ T28] audit: type=1804 audit(1600744311.191:1755): pid=15416 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1660/file1/bus" dev="sda1" ino=16972 res=1 errno=0 [ 1171.921121][ T28] audit: type=1804 audit(1600744311.191:1756): pid=15416 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1660/file1/bus" dev="sda1" ino=16972 res=1 errno=0 03:11:52 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(0xffffffffffffffff, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6900) r3 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000040)=ANY=[], 0xffffff7d) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 03:11:52 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x100}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x9, 0x6, {0x0}, {0xffffffffffffffff}, 0x4, 0x9}) sched_getscheduler(r0) 03:11:53 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1174.324073][T15445] FAT-fs (loop5): bogus number of reserved sectors [ 1174.370916][T15445] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1174.448125][ T28] audit: type=1804 audit(1600744314.001:1757): pid=15447 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1661/file1/bus" dev="sda1" ino=17002 res=1 errno=0 [ 1174.476755][ T28] audit: type=1804 audit(1600744314.001:1758): pid=15447 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1661/file1/bus" dev="sda1" ino=17002 res=1 errno=0 03:11:54 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000)='NLBL_CIPSOv4\x00') exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0xfffffffc}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d3000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000240)) [ 1176.328018][ T28] audit: type=1804 audit(1600744315.881:1759): pid=15462 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1304/file1/bus" dev="loop0" ino=381 res=1 errno=0 [ 1176.508794][ T28] audit: type=1804 audit(1600744315.881:1760): pid=15462 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1304/file1/bus" dev="loop0" ino=381 res=1 errno=0 03:11:56 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:11:56 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(0xffffffffffffffff, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x800) r3 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000040)=ANY=[], 0xffffff7d) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 03:11:56 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000000)={0x2, 0x10000}) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) [ 1177.199483][T15471] FAT-fs (loop5): bogus number of reserved sectors [ 1177.206035][T15471] FAT-fs (loop5): Can't find a valid FAT filesystem 03:11:56 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 1177.297092][ T28] audit: type=1804 audit(1600744316.851:1761): pid=15483 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1662/file1/bus" dev="sda1" ino=16678 res=1 errno=0 [ 1177.479321][ T28] audit: type=1804 audit(1600744316.931:1762): pid=15471 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1662/file1/bus" dev="sda1" ino=16678 res=1 errno=0 03:11:57 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) ioctl$VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045613, &(0x7f0000000040)=0x9) keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x3}) 03:11:57 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1179.254554][T15492] FAT-fs (loop5): bogus number of reserved sectors [ 1179.270668][T15492] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1180.386507][ T28] audit: type=1804 audit(1600744319.941:1763): pid=15492 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1663/file1/bus" dev="sda1" ino=16735 res=1 errno=0 [ 1180.557268][ T28] audit: type=1804 audit(1600744319.971:1764): pid=15492 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1663/file1/bus" dev="sda1" ino=16735 res=1 errno=0 03:12:00 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(0xffffffffffffffff, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') ftruncate(0xffffffffffffffff, 0x800) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xffffff7d) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 03:12:01 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f0000000000)=0x8800, 0x8) 03:12:01 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400", 0xc}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:12:02 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:12:02 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f0000000000)=0x20) syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) clone(0x800000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000280)="a42b43fa384bb99201d9729d8f64543e19793e8889f3eb3ea4505579ea7f578ead8509e1712dbd69f1165a4800f6e257b93d903ca02ec8314ca9cf8b06f2d6806e0689a9a635021a58d2c535ac7c4adcc8e94a52ae1fe616062051a15599b7e85d341334df79d00cf386e3f0cad925cebebb57768f2017fe0ebe322494319cb3b4fe617f0d0d72c7a10c31a0c693cc723ec1d105a0050fe48e75a79f8075cb724e0e6842a9b62c91a751e98465a73c8d4b40802047c76391e79274824cd5a674dc4e4dbbb4bb77af3f99dea720049ca70e7881156825cec4bbc2c57e90e0acbf56") [ 1182.870707][ T28] audit: type=1804 audit(1600744322.431:1765): pid=15522 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1664/file1/bus" dev="sda1" ino=16989 res=1 errno=0 [ 1183.084065][ T28] audit: type=1804 audit(1600744322.461:1766): pid=15522 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1664/file1/bus" dev="sda1" ino=16989 res=1 errno=0 [ 1183.413035][T15520] FAT-fs (loop5): bogus number of reserved sectors [ 1183.440753][T15520] FAT-fs (loop5): Can't find a valid FAT filesystem 03:12:03 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400", 0xc}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1184.350511][T15538] FAT-fs (loop5): bogus number of reserved sectors [ 1184.357119][T15538] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1184.431454][ T28] audit: type=1804 audit(1600744323.991:1767): pid=15540 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1665/file1/bus" dev="sda1" ino=16989 res=1 errno=0 [ 1184.624075][ T28] audit: type=1804 audit(1600744324.021:1768): pid=15540 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1665/file1/bus" dev="sda1" ino=16989 res=1 errno=0 03:12:05 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400", 0xc}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:12:06 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(0xffffffffffffffff, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) ftruncate(0xffffffffffffffff, 0x800) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xffffff7d) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 03:12:06 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x80200, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/shm\x00', 0x0, 0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x8, 0x0, 0xa7, 0x0, r0}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006cc000/0x3000)=nil, &(0x7f0000000440), &(0x7f0000000240)) [ 1187.439528][T15557] FAT-fs (loop5): bogus number of reserved sectors [ 1187.474111][T15557] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1188.728675][ T28] audit: type=1804 audit(1600744328.281:1769): pid=15557 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1666/file1/bus" dev="sda1" ino=16632 res=1 errno=0 [ 1188.836546][ T28] audit: type=1804 audit(1600744328.291:1770): pid=15557 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1666/file1/bus" dev="sda1" ino=16632 res=1 errno=0 03:12:08 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:12:09 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200", 0x12}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:12:09 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0x7c0, &(0x7f0000000640)={0x0, 0x0, 0x8}, &(0x7f00006d4000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) io_setup(0x83, &(0x7f00000003c0)=0x0) io_getevents(r0, 0x1, 0x5, &(0x7f0000000580)=[{}, {}, {}, {}, {}], &(0x7f0000000100)={0x0, 0x989680}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x64000) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x54, 0x0, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0xffffff1f}, {0xc}}]}, 0x54}}, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000800)=ANY=[@ANYBLOB="1f00003df5ad307e5d9bd42b2e11363a24ec1764c51fa78b6709056ae8e2a507014cd37bd6bc7c99a5e2fe5a4e8018ee315f9fa7e9dda80715d1cc568b7ad5b6aad62cd72139f40ea79a259b0e59639432846c0e3b9417343112156fdb5b", @ANYRES16=0x0, @ANYBLOB="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"], 0x14c}, 0x1, 0x0, 0x0, 0x40}, 0x24000815) io_submit(r0, 0x6, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2703000000000009, 0x8003f00, 0x3, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x3000}]) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) fcntl$setstatus(r1, 0x4, 0x64000) io_submit(r2, 0x6, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2703000000000009, 0x8003f00, 0x3, 0x1, 0x0, r1, &(0x7f0000000000), 0x3000}]) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000480)={'ip6_vti0\x00', 0x0, 0x5710cc85861bf6ff, 0xe, 0x1, 0x4, 0x12, @local, @dev={0xfe, 0x80, [], 0x1d}, 0x40, 0x8, 0x7, 0x59}}) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r5) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, [], 0x19}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4e23, 0x0, 0x4e20, 0x3, 0x2, 0xa0, 0x90, 0x3b, r3, r5}, {0x2, 0xb2c, 0x8, 0x3, 0xa0, 0x5, 0xdaa7, 0x81}, {0x0, 0x6, 0x0, 0x91}, 0x76f, 0x6e6bbc, 0x2, 0x1, 0x2}, {{@in6=@private2={0xfc, 0x2, [], 0x1}, 0x4d5, 0xff}, 0x2, @in=@multicast1, 0x3500, 0x2, 0x1, 0x6, 0x4, 0x6, 0x8000}}, 0xe8) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000000)={0xf2b, {{0xa, 0x4e20, 0x1f, @mcast2, 0x844}}}, 0x88) [ 1190.303053][T15578] FAT-fs (loop5): invalid media value (0x00) [ 1190.332442][T15578] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1190.402487][ T28] audit: type=1804 audit(1600744329.961:1771): pid=15580 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1667/file1/bus" dev="sda1" ino=16915 res=1 errno=0 [ 1190.565063][ T28] audit: type=1804 audit(1600744329.981:1772): pid=15580 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1667/file1/bus" dev="sda1" ino=16915 res=1 errno=0 03:12:11 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200", 0x12}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:12:11 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioprio_set$pid(0x2, 0xffffffffffffffff, 0x6000) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) fcntl$setstatus(r0, 0x4, 0x64000) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2703000000000009, 0x8003f00, 0x3, 0x1, 0x0, r0, &(0x7f0000000280)="1c21c274c67aeacc1e724baca1e0e328a2bf5dad910a82ebed50a9f35c950436e2a3119f75e43087342fd472bde87da7f557e17821768ea175f50c6e08a1bb8ca2614df68f4f9cb2d68cbfe67a4f13f05fbf2af979650d4f812f32ada2399716bd6cfa8665f2f7c801e9bfa23c6f141893c2b1af1be3d6f4349a9ea4cfb96798406f2723162e3642063e504bf867ad7dea8bb654d97d14ef0ecd6526942ad49cbe530a20694961ecfde04471a4d6695a97cb88d4f17128474cc431f7023f", 0xbe}]) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x4) 03:12:11 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(0xffffffffffffffff, r0) ftruncate(0xffffffffffffffff, 0x800) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xffffff7d) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1193.070625][T15601] FAT-fs (loop5): invalid media value (0x00) [ 1193.076783][T15601] FAT-fs (loop5): Can't find a valid FAT filesystem 03:12:15 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6900) ftruncate(0xffffffffffffffff, 0x800) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(0xffffffffffffffff, r0, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:12:15 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, &(0x7f0000000080)=0x1) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000000)=0xffff563f, &(0x7f0000000040)=0x4) 03:12:16 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200", 0x12}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1197.347235][T15626] FAT-fs (loop5): invalid media value (0x00) [ 1197.358803][T15626] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1197.412701][ T28] audit: type=1804 audit(1600744336.971:1773): pid=15626 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1669/file1/bus" dev="sda1" ino=16805 res=1 errno=0 [ 1197.493399][ T28] audit: type=1804 audit(1600744337.001:1774): pid=15626 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1669/file1/bus" dev="sda1" ino=16805 res=1 errno=0 03:12:17 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'macvlan1\x00', &(0x7f0000000000)=@ethtool_dump={0x40, 0x243, 0x800, 0x8b, "a8b021f5762a0ae5e8eeebe7e0e1886e15b8591fc9461ebb028b40ec9a171bd2364bc643e1be13cdea2bd6139c0a57b81481c85d76cf571e9b4ebb937d22fb271b17f491ba3db326105fcd11b4512bd9eda333a2892ff7e8b37c6e47cb3a3c86f7cf59ca50a8c70ffcfb531a649531f1cb60e7f6b2fe63e9b2db839be99df298bc3b5d922de4746efef4d5"}}) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x1c, r0, 0x800, 0x70bd2a, 0x4, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8014}, 0x44000) 03:12:18 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400", 0x15}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:12:18 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(0xffffffffffffffff, r0) ftruncate(0xffffffffffffffff, 0x800) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xffffff7d) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 03:12:20 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6900) ftruncate(0xffffffffffffffff, 0x800) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(0xffffffffffffffff, r0, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 1201.281449][T15650] FAT-fs (loop5): invalid media value (0x00) [ 1201.335600][T15650] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1201.382718][ T28] audit: type=1804 audit(1600744340.941:1775): pid=15652 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1670/file1/bus" dev="sda1" ino=16831 res=1 errno=0 [ 1201.509334][ T28] audit: type=1804 audit(1600744340.981:1776): pid=15652 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1670/file1/bus" dev="sda1" ino=16831 res=1 errno=0 03:12:21 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0x4d85, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x25a}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d2000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:12:23 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400", 0x15}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:12:24 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8c, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x3}, &(0x7f00006d2000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) [ 1206.830452][T15669] FAT-fs (loop5): invalid media value (0x00) [ 1206.836606][T15669] FAT-fs (loop5): Can't find a valid FAT filesystem 03:12:26 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(0xffffffffffffffff, r0) ftruncate(0xffffffffffffffff, 0x800) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xffffff7d) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1207.509307][ T28] audit: type=1804 audit(1600744347.071:1777): pid=15669 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1671/file1/bus" dev="sda1" ino=16910 res=1 errno=0 [ 1207.639666][ T28] audit: type=1804 audit(1600744347.071:1778): pid=15669 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1671/file1/bus" dev="sda1" ino=16910 res=1 errno=0 03:12:28 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6900) ftruncate(0xffffffffffffffff, 0x800) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(0xffffffffffffffff, r0, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:12:28 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400", 0x15}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:12:28 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x200, 0x0, 0x0, 0xf7}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000001900), &(0x7f0000000240)) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(0xffffffffffffffff, 0x8008ae9d, &(0x7f0000000000)=""/179) syz_mount_image$squashfs(&(0x7f00000000c0)='squashfs\x00', &(0x7f0000000140)='./file0\x00', 0xff, 0x9, &(0x7f0000001800)=[{&(0x7f0000000280)="0cad2da7d21f218eedc6dba0bc28ba6781c521e4f26995e12e69da96fc402d5b0ef9142d0505bd30905665b8fbc8c2ba839d9ec640bcf4065fa7c04d13ed5eb05a219b8c83af0d53cdc396cb00a0baf8a388cee210e996bcfb0ffb005d7432de211c8d2ac590682846b91240623ea6f9eb9caefa8a6d4dec8dba057168c85d27c690c274bac7469b7fb0d5759f81c7d3a8bf9aa98213c23604ef7af37fe4e4eba6cfcca291240f0200000000000000f7cf566151a60f86958ad66e6e6099a2aee065325093621a106e306a8b5b3b034a0dd5ccca27514eb56e15f0c07abf3475be2fdec3b65302c27a1a", 0xea, 0x40}, {&(0x7f0000000180)="9fb274952eaf4390d5a39285129c680df7b44ca1", 0x14, 0x20000000005}, {&(0x7f0000000380)="c26131d7e8692dcaef7a593e6ea3b0b8230e81e55b53d5beca7cd8e1683e7fae1cb1f7f89746c5c1401ac2bd3bd927f9bd970c0ee8ad5a4161ca303554b6becec75e3ac85ca4f0a5a24dca7b88f6857e61dede186520e42f66507bae3448fa1ee4876395bafaa785f89b77d0bf", 0x6d, 0x1}, {&(0x7f0000000480)="04a7d2d8d019789273b91729916555c9c3b3cfc7964beb1d4735d0da951a1a86990ee3d55ee0d95bd7be092ad27c05423e2c06f29c25f0ec58e80e797ed4d3c74937e19f9101698190b9d12fcc7d173162733ead6ca74250a66ed5334a387427b222a6", 0x63, 0x100000000}, {&(0x7f0000000500)="9cbbbc629bf73555608ee9bfd6f2bf7247a98b5b7c19cff6b26f980778b855e915308c50fe424c30f9a20996ecb17ef971e8c3d53926dc9665d173987447f2f4e5f3d458316f2dbce10ddcef0bf543de5704a29c83f0c5ffdfca6de53bbdff6c857153d8ea47ab4f02319ad4710efcb1b8d40c676f2fc411349014a61c441e3fe5e2a300fc588a791194", 0x8a, 0x8}, {&(0x7f00000005c0)="f381b8c3c00065b588f2dc89bad9eb84a27dff294564c6de30c138df86a775d9ec87f1554663dd1b640f82e947d68bd338a2e869a9f7799159efd55c35333b08f499926d03bc6e1be2207b5aa6d59b3483453c90a65fa83054752349d6553c7c3392b7b22946e66c0750c46369a5d923c52bf40c960e4d5b6292", 0x7a, 0x5}, {&(0x7f0000000640)="b27deba6ee05acc2e08fce5d884a48b518ebf41ec7af5be5bf2c6a93c9c31a7fbbe88b028c5906c56c30e83a66ed0e62a83e956d9c9ac5439429ec770a6c0e2560a4883697896c61c60b5f531d96f99469b63b36655b2e8e0efebade4f857e22da61d09f934d77658a9970947bbf12eaacf4d09dfab48c8ece8349cdfd424e66c7fe53d11654f5e9752294c4dfa4d872eb19ff8881407f78462eb6b0b4968390b166ac8486c6900f6615ef9e546ed314b4e49546ec052ae5df97786ec63769b15008094dd95dca0d08241d565418c36b8a548d1588b50a92b3df8c8370f47a95e649e4627e30c1a8e7e8dc60ffe6a1d1fc556b", 0xf3, 0x5}, {&(0x7f0000000740)="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", 0x1000, 0xffffffff}, {&(0x7f0000001740)="f8713d93aff5374f1d9797c1863c98079f887957e6a9409564bf0973ba602f2f7e741c14aa9664a544a90dd3d2973eac4751117385d9edde4519972cf0185ff28be354fb782edab81cba0a4eb06ef4659d290cc23c7ae103bffc4af348b4fd7329c684f9a9319207cd76cc62c97bdce948d033beb89e921fa28ae153c7aaf3135c7f54b02fe10fc7e8aa64c83aa5b2f2e4bd3b7ffb1a6ea320f2e440cbc2b3fdb4f44c101be61b9f3456d29ac0640a1a", 0xb0, 0xffff}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="292c232bd12c2c5d2c6f74636f6e746578743d73746166665f752c7365636c6162656c2c00"]) r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) fcntl$setstatus(r0, 0x4, 0x64000) io_submit(r1, 0x6, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2703000000000009, 0x8003f00, 0x3, 0x1, 0x0, r0, &(0x7f0000000000), 0x3000}]) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000100)={0x0, 0x3ff}) shmget$private(0x0, 0x4000, 0x8, &(0x7f00006d6000/0x4000)=nil) [ 1209.730942][T15691] FAT-fs (loop5): invalid media value (0x00) [ 1209.736939][T15691] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1210.709777][ T28] audit: type=1804 audit(1600744350.271:1779): pid=15691 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1672/file1/bus" dev="sda1" ino=16653 res=1 errno=0 [ 1210.856784][ T28] audit: type=1804 audit(1600744350.301:1780): pid=15691 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1672/file1/bus" dev="sda1" ino=16653 res=1 errno=0 03:12:30 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) fcntl$setstatus(r0, 0x4, 0x64000) io_submit(r1, 0x6, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2703000000000009, 0x8003f00, 0x3, 0x1, 0x0, r0, &(0x7f0000000000), 0x3000}]) read$FUSE(0xffffffffffffffff, &(0x7f0000000480)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r0, &(0x7f0000000000)={0x18, 0x0, r2, {0x4}}, 0x18) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000040)={0x8, 0x2, 0x1fe, {0xc0, 0x101}, 0xaefb, 0x7e86}) 03:12:30 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f8", 0x16}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1211.712379][T15705] FAT-fs (loop5): bogus number of FAT sectors [ 1211.718498][T15705] FAT-fs (loop5): Can't find a valid FAT filesystem 03:12:31 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) ftruncate(0xffffffffffffffff, 0x800) r0 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000040)=ANY=[], 0xffffff7d) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 1211.825415][ T28] audit: type=1804 audit(1600744351.381:1781): pid=15708 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1673/file1/bus" dev="sda1" ino=17081 res=1 errno=0 [ 1212.012433][ T28] audit: type=1804 audit(1600744351.411:1782): pid=15708 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1673/file1/bus" dev="sda1" ino=17081 res=1 errno=0 03:12:32 executing program 4: clone(0x200820c4dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) fcntl$setstatus(r0, 0x4, 0x64000) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xfd30) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x20a000, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f00000001c0), &(0x7f0000000200)=0x4) splice(r0, &(0x7f0000000040)=0x199, r2, &(0x7f0000000080)=0x40, 0xa33, 0x9) io_submit(r1, 0x6, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2703000000000009, 0x8003f00, 0x3, 0x1, 0x0, r0, &(0x7f0000000000), 0x3000}]) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000000)) sysfs$1(0x1, &(0x7f0000000100)='(\x00') exit_group(0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x40) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) r4 = gettid() ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f0000000580)=ANY=[@ANYRESDEC, @ANYRES64, @ANYRES32, @ANYBLOB="c6403e18be24549dfe37c9f3869b36b365c3095a90638bec816ee645741a7d979756009fa8cc7aa0974b539589727f69ce0f5509259b5597dd205725f583bbfc2fb339", @ANYRESHEX=r3, @ANYBLOB="ff1f5953433d767572f2d9034694349f5e477848cecb90a43058919a64e10c2501ef18aaa9b2a00b84b7e96977fbf5740861289043767eb1968e3f9b16a0ff196d58b98a65648d066d36dcd4482c4b1e6d7b8eb7cf50c1cd5b914bdba5e4fb53549d2d9bec8f9229aabe42329c4289ad39f40de495423c08a6893758b209d6ee7d2944042402446682c447b16db41ef0a84fe7b3a76abf72b74856c0a2abcccd35ff762007eba7eb6b1086aa77435f48ed0e79606c4e0031615335d57e40027ed3afdf6e20f0c25a458cc090d943d9", @ANYRESOCT=r4]) 03:12:32 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f8", 0x16}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1214.084533][T15728] FAT-fs (loop5): bogus number of FAT sectors [ 1214.125996][T15728] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1214.223211][ T28] audit: type=1804 audit(1600744353.781:1783): pid=15730 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1674/file1/bus" dev="sda1" ino=16899 res=1 errno=0 [ 1214.355654][ T28] audit: type=1804 audit(1600744353.811:1784): pid=15730 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1674/file1/bus" dev="sda1" ino=16899 res=1 errno=0 03:12:34 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:12:34 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f8", 0x16}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:12:35 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x402000, 0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) [ 1216.130110][T15754] FAT-fs (loop5): bogus number of FAT sectors [ 1216.136340][T15754] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1216.203318][ T28] audit: type=1804 audit(1600744355.761:1785): pid=15756 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1675/file1/bus" dev="sda1" ino=16848 res=1 errno=0 [ 1216.290738][ T28] audit: type=1804 audit(1600744355.781:1786): pid=15756 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1675/file1/bus" dev="sda1" ino=16848 res=1 errno=0 03:12:35 executing program 1: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) ftruncate(0xffffffffffffffff, 0x800) r0 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000040)=ANY=[], 0xffffff7d) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:12:37 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000180)=0xe, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r0, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x80) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:12:37 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, 0x0) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1221.580103][ T28] audit: type=1804 audit(1600744361.141:1787): pid=15766 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1676/bus" dev="sda1" ino=17061 res=1 errno=0 [ 1221.693943][ T28] audit: type=1804 audit(1600744361.161:1788): pid=15766 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1676/bus" dev="sda1" ino=17061 res=1 errno=0 03:12:46 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, 0x0) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:12:46 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:12:46 executing program 1: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) ftruncate(0xffffffffffffffff, 0x800) r0 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000040)=ANY=[], 0xffffff7d) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:12:46 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) fcntl$setstatus(r0, 0x4, 0x64000) io_submit(r1, 0x6, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2703000000000009, 0x8003f00, 0x3, 0x1, 0x0, r0, &(0x7f0000000000), 0x3000}]) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280), &(0x7f0000000380)=0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000340)) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x31, &(0x7f00000000c0)={'trans=unix,', {[{@mmap='mmap'}, {@uname={'uname'}}, {@dfltuid={'dfltuid', 0x3d, 0xffffffffffffffff}}, {@cache_loose='cache=loose'}, {@mmap='mmap'}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@audit='audit'}, {@appraise='appraise'}, {@pcr={'pcr', 0x3d, 0x3f}}, {@dont_measure='dont_measure'}]}}) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xfd30) sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fcdbdf2501000000000000000c410000000c001473797a3000000000dd5829a94f5337a99145843ccca0f28b69d9bbb1ac1a9a54326e0ec7c6bcf91e86bf0f98e66b8f0fdf5890238169017fa31721ce3dbff662b2387a"], 0x28}, 0x1, 0x0, 0x0, 0x20008890}, 0x8804) syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) [ 1228.182737][ T28] audit: type=1804 audit(1600744367.741:1789): pid=15796 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1677/file1/bus" dev="sda1" ino=16837 res=1 errno=0 [ 1228.424011][ T28] audit: type=1804 audit(1600744367.771:1790): pid=15796 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1677/file1/bus" dev="sda1" ino=16837 res=1 errno=0 [ 1230.802052][ T28] audit: type=1804 audit(1600744370.361:1791): pid=15809 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1312/bus" dev="sda1" ino=16621 res=1 errno=0 [ 1230.924490][ T28] audit: type=1804 audit(1600744370.391:1792): pid=15809 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1312/bus" dev="sda1" ino=16621 res=1 errno=0 03:12:53 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ptrace$getenv(0x4201, 0x0, 0xffffffff9a2ae1e2, &(0x7f0000000100)) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x7, 0x1, 0x601, 0x0, 0x0, {0x5, 0x0, 0x9}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x400c000) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7) syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:12:53 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:12:54 executing program 1: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) ftruncate(0xffffffffffffffff, 0x800) r0 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000040)=ANY=[], 0xffffff7d) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:12:54 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, 0x0) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1235.377986][ T28] audit: type=1804 audit(1600744374.931:1793): pid=15832 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1678/file1/bus" dev="sda1" ino=16931 res=1 errno=0 [ 1235.586352][ T28] audit: type=1804 audit(1600744374.931:1794): pid=15832 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1678/file1/bus" dev="sda1" ino=16931 res=1 errno=0 [ 1236.029679][ T28] audit: type=1804 audit(1600744375.591:1795): pid=15837 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1313/bus" dev="sda1" ino=16605 res=1 errno=0 [ 1236.125392][ T28] audit: type=1804 audit(1600744375.591:1796): pid=15838 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1313/bus" dev="sda1" ino=16605 res=1 errno=0 03:12:58 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:12:58 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:12:59 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x20}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x33}}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x20}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x3f}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) [ 1240.007267][ T28] audit: type=1804 audit(1600744379.561:1797): pid=15862 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1679/bus" dev="sda1" ino=16833 res=1 errno=0 [ 1240.178680][ T28] audit: type=1804 audit(1600744379.601:1798): pid=15862 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1679/bus" dev="sda1" ino=16833 res=1 errno=0 03:13:00 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) ftruncate(0xffffffffffffffff, 0x800) r0 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000040)=ANY=[], 0xffffff7d) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:13:00 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1241.448393][ T28] audit: type=1804 audit(1600744381.001:1799): pid=15865 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1314/bus" dev="sda1" ino=16614 res=1 errno=0 [ 1241.540865][ T28] audit: type=1804 audit(1600744381.041:1800): pid=15865 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1314/bus" dev="sda1" ino=16614 res=1 errno=0 03:13:02 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 1243.254671][ T28] audit: type=1804 audit(1600744382.811:1801): pid=15881 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1680/bus" dev="sda1" ino=16873 res=1 errno=0 [ 1243.392804][ T28] audit: type=1804 audit(1600744382.841:1802): pid=15881 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1680/bus" dev="sda1" ino=16873 res=1 errno=0 03:13:03 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, 0x0, 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) ftruncate(0xffffffffffffffff, 0x800) r0 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000040)=ANY=[], 0xffffff7d) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:13:04 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:13:04 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpeername$netrom(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @rose}, [@null, @netrom, @rose, @default, @default, @default, @rose, @default]}, &(0x7f00000000c0)=0x48) exit_group(0x0) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082abd7000fcdbdf25020000000800040000000100080003000000"], 0x2c}}, 0x0) syz_mount_image$jfs(&(0x7f00000003c0)='jfs\x00', &(0x7f0000000400)='./file0\x00', 0x2c8, 0x4, &(0x7f0000000680)=[{&(0x7f0000000480)="30aab8807e322eb1051361021d81281506e1a608aa2da302ef6c1f5e7de0565e3f09198dc22fdea2ebe5dbf01c50217d217ae71ac6ec511ab50bc8ff5ce58f6855993578b9c6e2ffebeef7d02d3196f27e0b0411209bac5e48ac2c42c5874748413f0cfb37fa03dcc5ea62a595f1", 0x6e, 0x200}, {&(0x7f0000000500)="4e06e31631e324c5b27111791a655b5d7cfaacddadd38a3ecbba0eb7216e8ff10e731f44b7361e94a5037acd0307211652b266c440bc076e8131f75491c10c4e0985ec43d3f2a48f6194ddc309ba862e787c717ea4380abe10b33138201afeddd626b26cbc083aed75d6b5a273e872a84b37f820752e097bb2f88c5996498a8c3e55acfd04801d4b87958ed67ef06a963a92726a331f3da836d6a0d8bfaa16ecc032", 0xa2, 0x1}, {&(0x7f00000005c0)="ed96cea3f26379e56a60e143afe882ba2ae4419bc04ca1177fb91e85d4f72ef9003552a87e7fc4b4cb1ad361469a66c7c716909e672486ff5eb1bb40e587e9e794797387dd00", 0x46, 0x1}, {&(0x7f0000000640)="4d40d42b75", 0x5}], 0x800000, &(0x7f0000000700)={[{@discard='discard'}, {@nointegrity='nointegrity'}, {@discard_size={'discard', 0x3d, 0x1}}, {@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}, {@quota='quota'}], [{@uid_lt={'uid<'}}, {@subj_user={'subj_user', 0x3d, '])'}}]}) r0 = accept$netrom(0xffffffffffffffff, &(0x7f0000000100)={{0x3, @bcast}, [@rose, @netrom, @bcast, @null, @null, @null, @default, @rose]}, &(0x7f0000000180)=0x48) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'virt_wifi0\x00'}) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000000)={0x10}, 0x10) syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) [ 1245.079265][ T28] audit: type=1804 audit(1600744384.641:1803): pid=15894 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1315/bus" dev="sda1" ino=16614 res=1 errno=0 [ 1245.410596][T15897] JFS: discard option not supported on device [ 1245.441674][T15897] JFS: discard option not supported on device [ 1245.519172][T15897] jfs: Unrecognized mount option "uid<00000000000000000000" or missing value [ 1245.709624][ T28] audit: type=1804 audit(1600744385.271:1804): pid=15903 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1315/bus" dev="sda1" ino=16614 res=1 errno=0 [ 1246.113477][ T28] audit: type=1804 audit(1600744385.671:1805): pid=15905 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1681/bus" dev="sda1" ino=16951 res=1 errno=0 [ 1246.323524][ T28] audit: type=1804 audit(1600744385.701:1806): pid=15905 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1681/bus" dev="sda1" ino=16951 res=1 errno=0 03:13:06 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(0x0, 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:13:10 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, 0x0, 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) ftruncate(0xffffffffffffffff, 0x800) r0 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000040)=ANY=[], 0xffffff7d) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:13:10 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:13:11 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(0x0, 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1252.701387][ T28] audit: type=1804 audit(1600744392.261:1807): pid=15928 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1316/bus" dev="sda1" ino=16850 res=1 errno=0 [ 1252.839240][ T28] audit: type=1804 audit(1600744392.301:1808): pid=15928 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1316/bus" dev="sda1" ino=16850 res=1 errno=0 03:13:16 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) ftruncate(0xffffffffffffffff, 0x800) r0 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000040)=ANY=[], 0xffffff7d) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:13:16 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(0x0, 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:13:16 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 1257.671405][ T28] audit: type=1804 audit(1600744397.231:1809): pid=15964 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1317/file1/bus" dev="loop0" ino=388 res=1 errno=0 [ 1257.825597][ T28] audit: type=1804 audit(1600744397.261:1810): pid=15957 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1317/file1/bus" dev="loop0" ino=388 res=1 errno=0 03:13:19 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:13:19 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6900) ftruncate(r3, 0x800) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:13:19 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[]) ftruncate(0xffffffffffffffff, 0x800) r0 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000040)=ANY=[], 0xffffff7d) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 1260.892424][ T28] audit: type=1804 audit(1600744400.451:1811): pid=15983 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1685/file1/bus" dev="loop5" ino=390 res=1 errno=0 [ 1261.122832][ T28] audit: type=1804 audit(1600744400.481:1812): pid=15983 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1685/file1/bus" dev="loop5" ino=390 res=1 errno=0 [ 1262.647489][ T28] audit: type=1804 audit(1600744402.201:1813): pid=15993 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1318/file1/bus" dev="loop0" ino=391 res=1 errno=0 [ 1262.779170][ T28] audit: type=1804 audit(1600744402.231:1814): pid=15993 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1318/file1/bus" dev="loop0" ino=391 res=1 errno=0 03:13:21 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6900) ftruncate(r3, 0x800) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1264.341624][ T28] audit: type=1804 audit(1600744403.901:1815): pid=16005 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1686/file1/bus" dev="loop5" ino=392 res=1 errno=0 [ 1264.564069][ T28] audit: type=1804 audit(1600744404.011:1816): pid=15999 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1686/file1/bus" dev="loop5" ino=392 res=1 errno=0 03:13:25 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[]) ftruncate(0xffffffffffffffff, 0x800) r0 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000040)=ANY=[], 0xffffff7d) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:13:25 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 1266.222961][ T28] audit: type=1804 audit(1600744405.781:1817): pid=16017 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1319/file1/bus" dev="sda1" ino=16922 res=1 errno=0 03:13:26 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6900) ftruncate(r3, 0x800) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1266.731079][ T28] audit: type=1804 audit(1600744406.291:1818): pid=16018 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1319/file1/bus" dev="sda1" ino=16922 res=1 errno=0 [ 1267.920628][ T28] audit: type=1804 audit(1600744407.461:1819): pid=16025 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1687/bus" dev="sda1" ino=16686 res=1 errno=0 [ 1267.983757][ T28] audit: type=1804 audit(1600744407.461:1820): pid=16026 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1687/bus" dev="sda1" ino=16686 res=1 errno=0 03:13:27 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:13:27 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x800) r0 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000040)=ANY=[], 0xffffff7d) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:13:27 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x0) ftruncate(r3, 0x800) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1268.831986][ T28] audit: type=1804 audit(1600744408.381:1821): pid=16037 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1688/file1/bus" dev="loop5" ino=393 res=1 errno=0 [ 1269.070587][ T28] audit: type=1804 audit(1600744408.421:1822): pid=16037 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1688/file1/bus" dev="loop5" ino=393 res=1 errno=0 03:13:30 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x0) ftruncate(0xffffffffffffffff, 0x800) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:13:30 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x800) r0 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000040)=ANY=[], 0xffffff7d) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 1271.655547][ T28] audit: type=1804 audit(1600744411.211:1823): pid=16053 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1689/file1/bus" dev="loop5" ino=394 res=1 errno=0 [ 1271.843412][ T28] audit: type=1804 audit(1600744411.211:1824): pid=16053 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1689/file1/bus" dev="loop5" ino=394 res=1 errno=0 [ 1272.051957][ T28] audit: type=1804 audit(1600744411.331:1825): pid=16049 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1320/bus" dev="sda1" ino=16956 res=1 errno=0 [ 1272.207981][ T28] audit: type=1804 audit(1600744411.331:1826): pid=16049 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1320/bus" dev="sda1" ino=16956 res=1 errno=0 03:13:32 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x0) ftruncate(0xffffffffffffffff, 0x800) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1272.975688][ T28] audit: type=1804 audit(1600744412.531:1827): pid=16068 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1690/bus" dev="sda1" ino=16910 res=1 errno=0 [ 1273.113477][ T28] audit: type=1804 audit(1600744412.561:1828): pid=16068 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1690/bus" dev="sda1" ino=16910 res=1 errno=0 03:13:33 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x0) ftruncate(0xffffffffffffffff, 0x800) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:13:33 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000040)=ANY=[], 0xffffff7d) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:13:33 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 1274.335229][ T28] audit: type=1804 audit(1600744413.891:1829): pid=16075 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1691/file1/bus" dev="loop5" ino=395 res=1 errno=0 [ 1274.667290][ T28] audit: type=1804 audit(1600744413.921:1830): pid=16075 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1691/file1/bus" dev="loop5" ino=395 res=1 errno=0 [ 1275.491038][ T28] audit: type=1804 audit(1600744415.051:1831): pid=16079 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1321/bus" dev="sda1" ino=16661 res=1 errno=0 [ 1275.602902][ T28] audit: type=1804 audit(1600744415.051:1832): pid=16086 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1321/bus" dev="sda1" ino=16661 res=1 errno=0 03:13:37 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:13:37 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000040)=ANY=[], 0xffffff7d) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:13:37 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x0) ftruncate(r3, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1278.107163][ T28] audit: type=1804 audit(1600744417.661:1833): pid=16099 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1692/file1/bus" dev="loop5" ino=396 res=1 errno=0 [ 1278.328497][ T28] audit: type=1804 audit(1600744417.711:1834): pid=16099 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1692/file1/bus" dev="loop5" ino=396 res=1 errno=0 [ 1278.851197][ T28] audit: type=1804 audit(1600744418.411:1835): pid=16102 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1322/bus" dev="sda1" ino=16963 res=1 errno=0 [ 1278.902693][ T28] audit: type=1804 audit(1600744418.441:1836): pid=16102 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1322/bus" dev="sda1" ino=16963 res=1 errno=0 03:13:40 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:13:40 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x0) ftruncate(r3, 0x0) r4 = open(0x0, 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:13:40 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) r0 = open(0x0, 0x141042, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000040)=ANY=[], 0xffffff7d) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 1282.427116][ T28] audit: type=1804 audit(1600744421.981:1837): pid=16124 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1323/file1/bus" dev="sda1" ino=16806 res=1 errno=0 [ 1282.609465][ T28] audit: type=1804 audit(1600744421.981:1838): pid=16124 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1323/file1/bus" dev="sda1" ino=16806 res=1 errno=0 03:13:42 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x0) ftruncate(r3, 0x0) r4 = open(0x0, 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:13:43 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) r0 = open(0x0, 0x141042, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000040)=ANY=[], 0xffffff7d) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:13:43 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x0) ftruncate(r3, 0x0) r4 = open(0x0, 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:13:44 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, 0x0, 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:13:45 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x0) ftruncate(r3, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(0x0, 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1286.163172][ T28] audit: type=1804 audit(1600744425.721:1839): pid=16157 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1696/file1/bus" dev="loop5" ino=399 res=1 errno=0 03:13:45 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x0) ftruncate(r3, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(0x0, 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1286.889296][ T28] audit: type=1804 audit(1600744426.451:1840): pid=16162 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1324/bus" dev="sda1" ino=16663 res=1 errno=0 [ 1286.950587][ T28] audit: type=1804 audit(1600744426.451:1841): pid=16162 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1324/bus" dev="sda1" ino=16663 res=1 errno=0 [ 1287.029203][ T28] audit: type=1804 audit(1600744426.551:1842): pid=16165 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1697/file1/bus" dev="loop5" ino=400 res=1 errno=0 03:13:46 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x0) ftruncate(r3, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(0x0, 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1287.226326][ T28] audit: type=1804 audit(1600744426.781:1843): pid=16171 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1698/bus" dev="sda1" ino=16995 res=1 errno=0 03:13:47 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) r0 = open(0x0, 0x141042, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000040)=ANY=[], 0xffffff7d) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:13:47 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x0) ftruncate(r3, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1287.913189][ T28] audit: type=1804 audit(1600744427.471:1844): pid=16178 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1699/file1/bus" dev="loop5" ino=401 res=1 errno=0 03:13:47 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, 0x0, 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:13:47 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000040)=ANY=[], 0xffffff7d) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:13:47 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x0) ftruncate(r3, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1288.068631][ T28] audit: type=1804 audit(1600744427.471:1845): pid=16178 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1699/file1/bus" dev="loop5" ino=401 res=1 errno=0 [ 1288.251304][ T28] audit: type=1804 audit(1600744427.811:1846): pid=16185 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1325/bus" dev="sda1" ino=16996 res=1 errno=0 [ 1288.467908][ T28] audit: type=1804 audit(1600744427.811:1847): pid=16185 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1325/bus" dev="sda1" ino=16996 res=1 errno=0 03:13:48 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x0) ftruncate(r3, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1288.620616][ T28] audit: type=1804 audit(1600744427.951:1848): pid=16191 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1700/file1/bus" dev="loop5" ino=402 res=1 errno=0 03:13:48 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000040)=ANY=[], 0xffffff7d) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:13:48 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x0) ftruncate(r3, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:13:49 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x0) ftruncate(r3, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:13:49 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, 0x0, 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:13:49 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000040)=ANY=[], 0xffffff7d) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:13:49 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x0) ftruncate(r3, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:13:51 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x0) ftruncate(r3, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, 0x0, 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:13:51 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xffffff7d) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:13:51 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 1292.893370][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 1292.893387][ T28] audit: type=1804 audit(1600744432.451:1860): pid=16251 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1705/file1/bus" dev="loop5" ino=405 res=1 errno=0 [ 1293.098577][ T28] audit: type=1804 audit(1600744432.491:1861): pid=16256 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1705/file1/bus" dev="loop5" ino=405 res=1 errno=0 03:13:52 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x0) ftruncate(r3, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, 0x0, 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:13:52 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xffffff7d) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 1293.473353][ T28] audit: type=1804 audit(1600744433.031:1862): pid=16262 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1706/file1/bus" dev="loop5" ino=406 res=1 errno=0 [ 1293.499840][ T28] audit: type=1804 audit(1600744433.031:1863): pid=16262 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1706/file1/bus" dev="loop5" ino=406 res=1 errno=0 03:13:53 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x0) ftruncate(r3, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, 0x0, 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1293.856563][ T28] audit: type=1804 audit(1600744433.411:1864): pid=16270 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1707/file1/bus" dev="loop5" ino=407 res=1 errno=0 [ 1294.031473][ T28] audit: type=1804 audit(1600744433.471:1865): pid=16270 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1707/file1/bus" dev="loop5" ino=407 res=1 errno=0 03:13:53 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xffffff7d) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:13:53 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x0) ftruncate(r3, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(0xffffffffffffffff, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1294.553543][ T28] audit: type=1804 audit(1600744434.111:1866): pid=16279 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1327/file1/bus" dev="sda1" ino=17098 res=1 errno=0 [ 1294.746426][ T28] audit: type=1804 audit(1600744434.161:1867): pid=16281 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1708/file1/bus" dev="loop5" ino=408 res=1 errno=0 [ 1295.093328][ T28] audit: type=1804 audit(1600744434.161:1868): pid=16281 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1708/file1/bus" dev="loop5" ino=408 res=1 errno=0 [ 1295.208831][ T28] audit: type=1804 audit(1600744434.231:1869): pid=16284 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1327/file1/bus" dev="sda1" ino=17098 res=1 errno=0 03:13:55 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x0) ftruncate(r3, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(0xffffffffffffffff, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:13:55 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r0, 0x0, 0xffffff7d) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:13:56 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:13:56 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x0) ftruncate(r3, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(0xffffffffffffffff, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:13:56 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r0, 0x0, 0xffffff7d) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:13:57 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r0, 0x0, 0xffffff7d) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:13:58 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x0) ftruncate(r3, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r4 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, 0xffffffffffffffff, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1298.826788][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 1298.826801][ T28] audit: type=1804 audit(1600744438.381:1876): pid=16334 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1711/file1/bus" dev="loop5" ino=411 res=1 errno=0 03:13:58 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000040)=ANY=[], 0xffffff7d) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) [ 1299.122210][ T28] audit: type=1804 audit(1600744438.421:1877): pid=16334 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1711/file1/bus" dev="loop5" ino=411 res=1 errno=0 03:13:59 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x0) ftruncate(r3, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r4 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, 0xffffffffffffffff, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:13:59 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 1299.808966][ T28] audit: type=1804 audit(1600744439.371:1878): pid=16345 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1712/file1/bus" dev="loop5" ino=412 res=1 errno=0 [ 1300.068574][ T28] audit: type=1804 audit(1600744439.401:1879): pid=16345 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1712/file1/bus" dev="loop5" ino=412 res=1 errno=0 [ 1300.919968][ T28] audit: type=1804 audit(1600744440.481:1880): pid=16356 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1329/bus" dev="sda1" ino=16779 res=1 errno=0 [ 1301.053709][ T28] audit: type=1804 audit(1600744440.481:1881): pid=16357 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1329/bus" dev="sda1" ino=16779 res=1 errno=0 03:14:00 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x0) ftruncate(r3, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r4 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, 0xffffffffffffffff, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:14:01 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000040)=ANY=[], 0xffffff7d) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) 03:14:01 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 1302.033488][ T28] audit: type=1804 audit(1600744441.591:1882): pid=16367 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1713/file1/bus" dev="loop5" ino=413 res=1 errno=0 [ 1302.266805][ T28] audit: type=1804 audit(1600744441.681:1883): pid=16367 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1713/file1/bus" dev="loop5" ino=413 res=1 errno=0 03:14:02 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x0) ftruncate(r3, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1303.210188][ T28] audit: type=1804 audit(1600744442.771:1884): pid=16383 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1714/file1/bus" dev="loop5" ino=414 res=1 errno=0 [ 1303.378428][ T28] audit: type=1804 audit(1600744442.791:1885): pid=16383 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1714/file1/bus" dev="loop5" ino=414 res=1 errno=0 03:14:03 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:14:03 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x0) ftruncate(r3, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1304.508150][ T28] audit: type=1804 audit(1600744444.061:1886): pid=16395 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1715/file1/bus" dev="loop5" ino=415 res=1 errno=0 [ 1304.742849][ T28] audit: type=1804 audit(1600744444.061:1887): pid=16395 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1715/file1/bus" dev="loop5" ino=415 res=1 errno=0 [ 1304.894968][ T28] audit: type=1804 audit(1600744444.121:1888): pid=16396 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1331/file1/bus" dev="sda1" ino=17015 res=1 errno=0 [ 1305.002668][ T28] audit: type=1804 audit(1600744444.131:1889): pid=16396 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1331/file1/bus" dev="sda1" ino=17015 res=1 errno=0 03:14:04 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x0) ftruncate(r3, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1305.588697][ T28] audit: type=1804 audit(1600744445.141:1890): pid=16406 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1716/file1/bus" dev="loop5" ino=416 res=1 errno=0 [ 1305.785481][ T28] audit: type=1804 audit(1600744445.171:1891): pid=16406 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1716/file1/bus" dev="loop5" ino=416 res=1 errno=0 03:14:05 executing program 1: 03:14:05 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 1306.414835][ T28] audit: type=1804 audit(1600744445.971:1892): pid=16413 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1332/file1/bus" dev="sda1" ino=16678 res=1 errno=0 [ 1306.681151][ T28] audit: type=1804 audit(1600744446.241:1893): pid=16414 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1332/file1/bus" dev="sda1" ino=16678 res=1 errno=0 03:14:06 executing program 1: 03:14:06 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x0) ftruncate(r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r4 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r2, r3, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:14:06 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 1307.110284][ T28] audit: type=1804 audit(1600744446.671:1894): pid=16422 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1717/file1/bus" dev="loop5" ino=417 res=1 errno=0 [ 1307.304963][ T28] audit: type=1804 audit(1600744446.701:1895): pid=16422 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1717/file1/bus" dev="loop5" ino=417 res=1 errno=0 03:14:07 executing program 1: 03:14:07 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x0) ftruncate(r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r4 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r2, r3, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:14:08 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:14:08 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x0) ftruncate(r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r4 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r2, r3, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:14:09 executing program 1: 03:14:10 executing program 1: 03:14:10 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:14:10 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x0) ftruncate(r3, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) [ 1311.052973][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 1311.052987][ T28] audit: type=1804 audit(1600744450.611:1904): pid=16468 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1720/file1/bus" dev="loop5" ino=420 res=1 errno=0 [ 1311.162065][ T28] audit: type=1804 audit(1600744450.611:1905): pid=16468 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1720/file1/bus" dev="loop5" ino=420 res=1 errno=0 [ 1311.841535][ T28] audit: type=1804 audit(1600744451.401:1906): pid=16475 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1335/file1/bus" dev="sda1" ino=16660 res=1 errno=0 03:14:10 executing program 1: 03:14:11 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x0) ftruncate(r3, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) [ 1312.048812][ T28] audit: type=1804 audit(1600744451.421:1907): pid=16475 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1335/file1/bus" dev="sda1" ino=16660 res=1 errno=0 [ 1312.485524][ T28] audit: type=1804 audit(1600744452.041:1908): pid=16483 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1721/file1/bus" dev="loop5" ino=421 res=1 errno=0 [ 1312.615911][ T28] audit: type=1804 audit(1600744452.041:1909): pid=16483 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1721/file1/bus" dev="loop5" ino=421 res=1 errno=0 03:14:13 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x0) ftruncate(r3, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) 03:14:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x0) ftruncate(r3, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) 03:14:13 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, &(0x7f0000000080), 0x0, 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 1314.040881][ T28] audit: type=1804 audit(1600744453.601:1910): pid=16499 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1722/file1/bus" dev="loop5" ino=422 res=1 errno=0 [ 1314.141316][ T28] audit: type=1804 audit(1600744453.601:1911): pid=16499 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1722/file1/bus" dev="loop5" ino=422 res=1 errno=0 [ 1314.351098][ T28] audit: type=1804 audit(1600744453.691:1912): pid=16504 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1336/file1/bus" dev="sda1" ino=17039 res=1 errno=0 [ 1314.507912][ T28] audit: type=1804 audit(1600744453.731:1913): pid=16500 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir832804734/syzkaller.LBgua3/1352/file1/bus" dev="loop1" ino=423 res=1 errno=0 03:14:15 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, &(0x7f0000000080), 0x0, 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:14:15 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x0) ftruncate(r3, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) 03:14:16 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, &(0x7f0000000080), 0x0, 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 1317.001493][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 1317.001504][ T28] audit: type=1804 audit(1600744456.561:1916): pid=16523 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1723/file1/bus" dev="sda1" ino=16830 res=1 errno=0 [ 1317.176997][ T28] audit: type=1804 audit(1600744456.611:1917): pid=16523 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1723/file1/bus" dev="sda1" ino=16830 res=1 errno=0 [ 1317.394927][ T28] audit: type=1804 audit(1600744456.951:1918): pid=16529 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir832804734/syzkaller.LBgua3/1353/file1/bus" dev="loop1" ino=424 res=1 errno=0 [ 1317.544604][ T28] audit: type=1804 audit(1600744456.961:1919): pid=16529 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir832804734/syzkaller.LBgua3/1353/file1/bus" dev="loop1" ino=424 res=1 errno=0 [ 1318.300785][ T28] audit: type=1804 audit(1600744457.861:1920): pid=16539 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1337/file1/bus" dev="sda1" ino=16830 res=1 errno=0 03:14:17 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 1318.475691][ T28] audit: type=1804 audit(1600744457.911:1921): pid=16541 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1337/file1/bus" dev="sda1" ino=16830 res=1 errno=0 [ 1318.713937][ T28] audit: type=1804 audit(1600744458.081:1922): pid=16544 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1724/file1/bus" dev="sda1" ino=16947 res=1 errno=0 03:14:18 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x0) ftruncate(r3, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) [ 1318.881021][ T28] audit: type=1804 audit(1600744458.091:1923): pid=16544 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1724/file1/bus" dev="sda1" ino=16947 res=1 errno=0 [ 1319.842783][ T28] audit: type=1804 audit(1600744459.401:1924): pid=16554 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir832804734/syzkaller.LBgua3/1354/bus" dev="sda1" ino=16898 res=1 errno=0 03:14:19 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 1319.996513][ T28] audit: type=1804 audit(1600744459.431:1925): pid=16554 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir832804734/syzkaller.LBgua3/1354/bus" dev="sda1" ino=16898 res=1 errno=0 03:14:20 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) fcntl$setstatus(r0, 0x4, 0x64000) io_submit(r1, 0x6, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2703000000000009, 0x8003f00, 0x3, 0x1, 0x0, r0, &(0x7f0000000000), 0x3000}]) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x6}, 0x8) exit_group(0x0) r2 = syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) r3 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000040)=ANY=[], 0xfd30) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r3, 0x5000943f, &(0x7f0000000480)={{r2}, 0x0, 0x8, @unused=[0x26, 0x100000000, 0x0, 0x4], @devid}) 03:14:20 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, &(0x7f0000000080), 0x0, 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:14:20 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x0) ftruncate(r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r4 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r2, r3, 0x0, 0x8400fffffffa) 03:14:20 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, &(0x7f0000000080), 0x0, 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:14:21 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x3, 0x2, 0x4, {0x7ff, 0xb85, 0x2, 0x401}}) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) fcntl$setstatus(r1, 0x4, 0x64000) io_submit(r2, 0x6, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2703000000000009, 0x8003f00, 0x3, 0x1, 0x0, r1, &(0x7f0000000000), 0x3000}]) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r1, 0xc0305615, &(0x7f00000000c0)={0x0, {0xfffffffe, 0x7ff}}) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8e, &(0x7f00000001c0)={0x0, 0x0, 0x4}, &(0x7f00006d5000/0x3000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000240)) [ 1322.677027][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 1322.677118][ T28] audit: type=1804 audit(1600744462.231:1928): pid=16580 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1726/file1/bus" dev="sda1" ino=16723 res=1 errno=0 [ 1322.894388][ T28] audit: type=1804 audit(1600744462.291:1929): pid=16584 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1726/file1/bus" dev="sda1" ino=16723 res=1 errno=0 03:14:22 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, &(0x7f0000000080), 0x0, 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 1323.382612][ T28] audit: type=1804 audit(1600744462.941:1930): pid=16593 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1338/file1/bus" dev="sda1" ino=16725 res=1 errno=0 [ 1323.487775][ T28] audit: type=1804 audit(1600744462.971:1931): pid=16593 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1338/file1/bus" dev="sda1" ino=16725 res=1 errno=0 03:14:23 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8c, &(0x7f00000001c0)={0x0, 0xffffffff}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) [ 1324.094304][ T28] audit: type=1804 audit(1600744463.651:1932): pid=16600 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1727/file1/bus" dev="sda1" ino=16942 res=1 errno=0 [ 1324.301791][ T28] audit: type=1804 audit(1600744463.711:1933): pid=16600 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1727/file1/bus" dev="sda1" ino=16942 res=1 errno=0 03:14:24 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) 03:14:25 executing program 5: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8c, &(0x7f00000001c0)={0x0, 0xffffffff}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:14:25 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[]) chdir(0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:14:25 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, &(0x7f0000000080), 0x0, 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 1326.033524][ T28] audit: type=1804 audit(1600744465.591:1934): pid=16630 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1729/file1/bus" dev="sda1" ino=16915 res=1 errno=0 [ 1326.239706][ T28] audit: type=1804 audit(1600744465.631:1935): pid=16630 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1729/file1/bus" dev="sda1" ino=16915 res=1 errno=0 03:14:26 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x0) ftruncate(r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r4 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r2, r3, 0x0, 0x8400fffffffa) [ 1326.437052][ T28] audit: type=1804 audit(1600744465.741:1936): pid=16625 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir832804734/syzkaller.LBgua3/1355/bus" dev="sda1" ino=16931 res=1 errno=0 [ 1326.625856][ T28] audit: type=1804 audit(1600744465.751:1937): pid=16626 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir832804734/syzkaller.LBgua3/1355/bus" dev="sda1" ino=16931 res=1 errno=0 03:14:26 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x0) ftruncate(r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r4 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r2, r3, 0x0, 0x8400fffffffa) [ 1328.100692][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 1328.100706][ T28] audit: type=1804 audit(1600744467.661:1942): pid=16655 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1730/file1/bus" dev="loop5" ino=425 res=1 errno=0 [ 1328.305749][ T28] audit: type=1804 audit(1600744467.711:1943): pid=16655 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1730/file1/bus" dev="loop5" ino=425 res=1 errno=0 03:14:29 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[]) chdir(0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:14:29 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000040)={&(0x7f0000000480)={0x1028, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x396}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x1004, 0xac, "f0f1a253daa5b5708797e68d7a1107320af302a76c03c69e0ce36fb95cd2648cae86deab966aa8fdffcb0a0152d57fc58eb883b67c8baf8347c3001b0b69781273153aeb2171bf5bd30ff4f025e1605dbd4680d0be0a7977518c944a7e7b4d4981bbd3d8bd32c85e7befa975ad420d422e35270f6744f659e7fffc843be1674069f5fefe2851abc6d7fa5b5c1c5db8fb40acfe61c849253938420fa2cde37dc0df37ca1c9220ece4f7e98ae65695e4b2996f6cf8e60ac795b329bf48f2bb5088645f988a4ba55868cf2c80663d4d4dbf9bfdae9c29a043e9127788874d1f2fcbc6696cc977b1c0b9d3b811b72dbefafdca3b9afdb6374664491872ebe276b1c03e12a1441c564f1996ddd4081c26d5800f2e711268373676fe64e306eac83ef16060c060c732315d360c58347046a2f5734052d84dc34eb52b256d0e56cbf2319ecc130f7b508def6df65cc7ff73810f4d356da94d18ab4cc311f58dbf3f6263bbb87acd875e776c08729bb70d355c7511bbfc90f0fdc8fcf982eb268136deb786f55678d1c0c1f89988b45a9e7519ceef1ae25781620cb93a4ea850e012d743c54c68d05c2fbeda36b21f5e11e9e38e8d370cb61941454d4653ac0674e577b27c410a3bfef61d987634901b6eeb81dd0b57ad9c0b44e2d63254c527c89c27f79ea88a09f4a225c0b9990513a23dfa2003b8bf7a4d54576533d75f2c6f4d38e3a6ef7f014f6f059b3b605d1582664f500f14725d2a0dc88142303d81a07d687cf3359d8db37dbca32740db18c7283eecfb9315eaba4e3b23437a06a2048b7152f07c8fd26f964626e572b65a53cef7e2fc7bff84d422329264b00285ec57257101ef89474f038833e3a99e6f9fc7716c57be60e6d04efc8350782bf78a72c10afbef6692fa98fbc8c704833dfc01fb6d6f0aacd304814308bb9aa3c0c317878de3290603c840bde0c92f3ecd31416f958a451d27dad5a71066cbfc9eda5e33654a6010c9e8e29fc03cf0c95a498128a5e7a3517180f450059773b9cbfdd62cebd20955d6eeb60abad18eb0e184819767a49c0a525219db5e03c93cd3f620feda58ced5519b3a394e4ebebdb5c153ffd15213e7650b1604b8c4faa84fd0d3efb3afa79ebd02837697adc2967aceee3d037aa2d1c72ef767ce1aafc82838f7f40455675c8c9c7a080edc55313460ff893b8d8b7a4509b5fb8f3f575d99d1048e35f59dc01bda233cc87039b81eabc1d7359f7201f17e857a8797c7b08838ddb8d1cc171e271902ab3390a8ad9c3e2c67354b4dc7b456494d27ed3512d909ef329a39831a27239171b1ff1762a3334427d4c251d3531c748c81f1bebcfe0c93a42a4e0413a4855242b08202820ad436d3442147f000c7b1de994327174b902739af9b3e1c233242ecea8d4bcd584017a51b06b461d738fb70450879de91f35cc45cb40d6c668211f4121022284dbddaaf8b116484ee92e0877fa2fbc4319b39067c135d4ee65c29af7bed5516173b52b0fa0b5c44aa02e55aa8ec72ea5f17f5e5dbac04acc56953b7206820c36a663217f7bd15e1aae1f3df3be53b81a08299e22f2b0c8dcab50f5036ef9c6de0ff21549d4a67faeb29a3a57ef9adba589c143ecb6a3d00b56f3b29a1c772e077b176cab465e102d8765425efad964bb127af7e58b2da20374a9c703299a48f66a800d12e163908ef4a5624d561029c4efb59b628c44b982256a5a7702a902e5bc67e00fce9aeebe3f381d59229aefa0d7c9641cf3388daeb98c279a59ec664134c8c95a9b9471120a5754aa784310b916fc8a489450cb82918f6db3974474710d263f24ea2d134473c2a215bdd0dc102acf040faeb212e6dd132a1c3706c550db3c3deee2064cecfdaac2f46eea62113ed683e8304613332600c9f2b379c546ee0af5d8a78b657ffdf45b2baeaa4f4ba8a640c70c692667ce41a412efaa3f143f4826b3542137298e0b9c7153198ec3eb3efd50445e925fd6e9f3a524190288946d917b96e3c052eacd60a44518f9b186ea57a201bc26e9e537e630144decbacb0b1eb0ce32c2029ec462baf8af73e616a3636c6ccd655e212871f940f1a214810d28f559bc53d17a8d12c3e37db1966387e50cc1408d604e59eb4653bd64a3839e4cb8c1dfb3c3034e5e967dab0a06e027e27cf2cd36f35b116274abee6d53fd6969c66da1860d49da577cdf8314654a4778d4053b575b99a7edaa45d601796387f346141dc21f61fafcce4eb88b7e635ed727a2c3c880011c696bd92bcfe612a9383453765396c2ed052a8a4152d48cba40c1197e51cda10d357c2dd12f1b1943aef1ed54b81f85d6c9ae429bed58c7cfafe7f9291f9cec29034b56a47af289164e9e1608a9327e2c84827c52bef3f7e2cb5c3bd1a016e8264f7726414fa024b869d3735fd6c4f9233ba493dc67f4d4693e0161970f6d5383d7c1b4bf7d83e83bfd4802ec6c17e85b8061842c972bd5c4e9ef9939b7bac52d172f4b11852cadd0332b5ae16e14c590b8e62fc868872e7b83c7e673d3387cda418830c6a17486ed4ad3d0834c3ba8bd6eb894c5a34d0988cbf60b1723bb7794415a25d268c0cd2a47376ee3e99683b6f110452576d932c7a4f68e91bc7bab898556aaa509c0473cb962cc23d5d2d765c6e1aef9e4d6e2ace1cc952f08f5162090ac6f0ec2600abbdf3aee2cb2d5904312e35cf9f159ea2d534db3f04b8522bfe300b517fcc89505be81ee46161d47bf2d7235b8c5b9d90cfe7ee4294bdf43482f47fc3199ad0eedbb62d7a1519e0b4341fe21659ce846757f764ca9b7a5169d461b4ed2e0973cfb2c823298b09d78f0052adb338358b2d59c3196953c4301ec00a47a96a52b99774080c3698ca27835c15c4834d30c17058234e781cb534cbbc0dd241c8333823d2c520ab87661fcdf853a37a4acc817ea49b79135d17d641aa6afaa36da344a327e25a26ee89e388a6834d7d778dc58a2371877ec5437f07f0d54cda9c90a778f8066c64254bfca0a200301b4abe9e839a9ac30031730f439da62c01c4dd2304c635f6e1b2c52df7dad702f73640ca7739fe46645785c7d7dfd58c95e7354e1ed63675b761fad802f7e21b9309650276c2d5145a6c61729a12af69df5aee853014151f537c00ebc5862b9895f1616674faec4e1297ef2ab40bf7fdf5080a63bf5676ccaf4c94d7bd03b88a73c2bb856ece315bb5235acc67c4b5bdf56360c7ef173a24a4fc7ba6f967e7cf7398aad1e64d37c62737074d8c7bcf7ad97d507b480e90584be46b476786054a99c01579cc03e9de90a25d9f5d49149f9b52884f405224c940d5dc9d8e48c3acc4162bff93422175f6a19bdcb5fb9a3565d0416bc8bdd9209e5f129c8a9552d2d3630e785fb4766da997ac18a1b9250c9b32932d7330d7a2f7c3ecfee52f27f387359576b0c327e6691d6a3f720d7c35298442136feab0ed85fdc0c037e9e328e4037a62c86d3f20907f1cb27158618d6b2f0dd8cd0dee9752b89ad8ce092d9e082dc818544ddd670fe3ce62f5cf4d1b85bbf10d2368a9ce1a40f0f45be340c69d0aa6ad39f332b6d0689fbfd6ee0e090a404c0be056ec15bc16f7d6be3ee711495001f197d7057db861f1af29ede7abe80e6898ad9d7ab2db4118bb82ab5ee6d3a802b7d340725af3c636d51bc83bf379a234e52b9527136a9a79eda0aff7c8d8d1deb5a9046c8e1d0406fb5d988f6c1717d0c3739b4f580ec0c81f39cbc01e829692b2c3eb0b513c5394de589868939a069b324b24d421f510b77911f55ca05667b311d10eaaeb000f992da94f2aca612a7a389e921e4dd5f201f3e5f55afaacb749cd37e0712fb2c87cc8b00c35bec474aaf35aced9a346dc7cbc5471887dd82ace907267d0efc9c5c7dd7675362e63e551cdde8943bf1ad410c53dccd14551c586694622af0d26a007c8d43170d6add258c5837068ea17cb40a1b7b909a2126f42c2cdb66b47821d8892e86da8c76c38d63205acf659f9b84cb63654867c9d4a74dd939aeb8d49cb6bcdc779a953eede0cc10d490c21a7879ef4d9d453afb53428a2b45cf0dc36c566e1b1566dec2c3898cecce328108b98abff6245670305c1e9b610ab61768f160e559b0845999cd211dbc153435736a89bfb645ee30154b07f6835340365c353af14c32694f7f3dfb7f464f6d8ebc0ddac27756cfceee08c2a0e7bc00814ee71cfb6ef802bc0caee22128b1000108fc464075d03df0921d3ec0aa8d03c823bf3f51d757a7e23af6b5741c14a0ac7b2b5c4ac0c9d68be64f85b01910570acdc841482d2ba01fbc994d9f553f60f340be7603eb1b85954da28352032c390f96a337db1f9194675d120480fcfbc4dbeff1cf5579b150cb0f535502a7fe213063cc71b418584700b388f5798463d6906cd39bfc7b10840465d958b45b54000dd89464774e2e7de5def024008f9a172acf22e9b24209968b73d2d292fa5d160e0717c48d5ed49f150116d5a96538b5d3db8a8d29001f9ee19429f89e51b34ae371e6c7eb7c49f515ca48996abfd5d476eff3d4050c4bbee6cc9d19460f9d184f6efc6d90abf05d91306b0509daaca1816d5b7910882af9ead565da0e5fe97623d6423a2bc9fc696790fbd05372f7cf23292f26c0712d21ad48b637d29506c350bd74be26dfc3667c9e9de31f994af52469fdd78f9782db4aeb2136110d6c525c1fc87af114be7761ec9851c8fef0b67d6d6e6f0d22282961ea0a0b0bb769fab1683c7fa6cccd2436f9646022eb4c3a22dda4d8c590e57c9c1d1bef89ebaf54b8fa6d50194f821dfee19b65a0fb51d2a17a8cae8fe2eec8af1cd31c40ebf64e8f5ca7bc08392c961d4ef13602fdb9c2b5a99be327f2973c68f9b864bed303f19a60823759909aa4cddf74f61972f285555bfbc60578c174e0791cc2c4a08ed397e33661ef2a632a81ba561a0614421e10f8e9bc63c502709ded4ef6760480b41a72de40c2c11c8493b806838623942ee98e6ff1f071b82c7eb2a8f253b6c33e2b5854206302ea7ca0db44358e21f2957f6e8837358daf825485613edacba9dc441b86f946779a3ee7f9cd426ed21d7d5b485608f0d142af098f1b68fc45f2b8ea2cacc04654da0a6458af7e2720581675ecb487306093590a768f2489434256f7eb2eed05f1310529356abb34c95c92956770713b34c5176b9164ed78dd24617944b267be21874615b11164094ca0c23e812c0d25c989f795609403edf11eea26721b400b7039a7ffe1ef31e912b9a46e7dfc8ea26a24af1aa73839416d82f06df9b0631423f6a753e09d2d525eb7b9a2badce8b3f8b0ee9e548cf904533a402538bd770b38642771b4c2e86bbeca649f950ff740e2500e18bda0a4e5396e7790d0564b7e3a76cdf6b75c03a2398b4a1e2f2c592cbeb1d1493df48a351b3a41f47bdc28e325eb30c2cf9a6b09777d2b49af849781616185144dc3dba2584831439d8281d2ed3aba40055f7edbf41515d209537d41638677531a8072032de3b8c3ea9aeb56f3d71fe798699ebdc43876b0f5c2ae8488cc8be05a7b7bb8a11ba8b25dd26185f9ac26f3f3e33ddc6983a1dee7b3bf99d64ae9301fcc2d1b7347623a7b00c2c9f2edc0f0f9c0c6ef3a2b31c7db4ae0e0f0fcc5b50bc1791d986762aecbce15ce34881380a60ce934a340247afa983055f2ec95c436fcee0948ad47064a76d511e08ede3d9f9a9fe6ce25efe9b12be569a274cd113a1971cb7fa054c511dc5997eb872ddd9da3ca27d7bec3c39c966bb44fbf6747138a10b4310d233d4"}]}, 0x1028}, 0x1, 0x0, 0x0, 0x24000890}, 0x20040000) 03:14:29 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x0) ftruncate(r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r4 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r2, r3, 0x0, 0x8400fffffffa) 03:14:29 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x0) ftruncate(r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r4 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r2, r3, 0x0, 0x8400fffffffa) [ 1330.562372][ T28] audit: type=1804 audit(1600744470.121:1944): pid=16683 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1731/file1/bus" dev="loop5" ino=426 res=1 errno=0 [ 1330.789405][ T28] audit: type=1804 audit(1600744470.151:1945): pid=16683 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1731/file1/bus" dev="loop5" ino=426 res=1 errno=0 [ 1330.981754][ T28] audit: type=1804 audit(1600744470.171:1946): pid=16676 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1340/bus" dev="sda1" ino=17090 res=1 errno=0 [ 1331.101574][ T28] audit: type=1804 audit(1600744470.211:1947): pid=16685 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1340/bus" dev="sda1" ino=17090 res=1 errno=0 03:14:30 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[]) chdir(0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 1331.290327][ T28] audit: type=1804 audit(1600744470.841:1948): pid=16688 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir832804734/syzkaller.LBgua3/1357/file1/bus" dev="loop1" ino=427 res=1 errno=0 03:14:30 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) exit_group(0x0) syz_io_uring_setup(0x5c4f, &(0x7f00000001c0)={0x0, 0x0, 0x1, 0x2, 0x37}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000080)) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000040), 0x8) [ 1331.450833][ T28] audit: type=1804 audit(1600744470.841:1949): pid=16688 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir832804734/syzkaller.LBgua3/1357/file1/bus" dev="loop1" ino=427 res=1 errno=0 03:14:31 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x0) ftruncate(r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r4 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r2, r3, 0x0, 0x8400fffffffa) 03:14:31 executing program 4: setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x3f}, 0x8) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0x39f5, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x17b}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:14:31 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/slabinfo\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000140)={0x10, 0x30, 0xfa00, {&(0x7f0000000080), 0x0, {0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, [], 0x12}}, r1}}, 0x38) exit_group(0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000000)={0x30, 0x5, 0x0, {0x0, 0x4, 0x7, 0x1}}, 0x30) syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:14:31 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x0) ftruncate(r3, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) [ 1333.804066][ T28] audit: type=1804 audit(1600744473.361:1950): pid=16724 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir832804734/syzkaller.LBgua3/1358/file1/bus" dev="sda1" ino=16907 res=1 errno=0 [ 1334.087660][ T28] audit: type=1804 audit(1600744473.641:1951): pid=16724 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir832804734/syzkaller.LBgua3/1358/file1/bus" dev="sda1" ino=16907 res=1 errno=0 [ 1334.412838][ T28] audit: type=1804 audit(1600744473.971:1952): pid=16711 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1341/bus" dev="sda1" ino=17040 res=1 errno=0 [ 1334.518567][ T28] audit: type=1804 audit(1600744473.971:1953): pid=16714 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1341/bus" dev="sda1" ino=17040 res=1 errno=0 [ 1335.720549][ T28] audit: type=1804 audit(1600744475.281:1954): pid=16729 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1732/file1/bus" dev="loop5" ino=428 res=1 errno=0 [ 1335.958946][ T28] audit: type=1804 audit(1600744475.301:1955): pid=16729 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1732/file1/bus" dev="loop5" ino=428 res=1 errno=0 03:14:38 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x0) ftruncate(r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r4 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r2, r3, 0x0, 0x8400fffffffa) 03:14:38 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:14:38 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x0) ftruncate(r3, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) 03:14:38 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x490000, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)=ANY=[], &(0x7f00000000c0)=0x8) sendto$inet6(r1, &(0x7f00000002c0)="b5", 0x1, 0x0, &(0x7f0000000300)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x23, &(0x7f0000000180)={r3}, 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000040)={r3, @in6={{0xa, 0x4e22, 0xfff, @private1, 0x3}}, [0x6, 0x80000001, 0x8, 0x81, 0x4, 0x8, 0x3ff, 0x100000001, 0x0, 0x3, 0x1, 0x5, 0x83, 0xffffffff]}, &(0x7f0000000140)=0x100) syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) [ 1339.733893][ T28] audit: type=1804 audit(1600744479.291:1956): pid=16751 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1733/file1/bus" dev="sda1" ino=17075 res=1 errno=0 [ 1339.930827][ T28] audit: type=1804 audit(1600744479.321:1957): pid=16751 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1733/file1/bus" dev="sda1" ino=17075 res=1 errno=0 [ 1341.678831][ T28] audit: type=1804 audit(1600744481.231:1958): pid=16749 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir832804734/syzkaller.LBgua3/1359/file1/bus" dev="loop1" ino=429 res=1 errno=0 [ 1341.816126][ T28] audit: type=1804 audit(1600744481.231:1959): pid=16749 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir832804734/syzkaller.LBgua3/1359/file1/bus" dev="loop1" ino=429 res=1 errno=0 03:14:41 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x0) ftruncate(r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r4 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r2, r3, 0x0, 0x8400fffffffa) 03:14:41 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x0) ftruncate(r3, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) [ 1342.850296][ T28] audit: type=1804 audit(1600744482.411:1960): pid=16773 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1734/file1/bus" dev="loop5" ino=430 res=1 errno=0 [ 1342.955903][ T28] audit: type=1804 audit(1600744482.431:1961): pid=16773 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1734/file1/bus" dev="loop5" ino=430 res=1 errno=0 03:14:42 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x1a4) io_setup(0x83, &(0x7f00000003c0)=0x0) fcntl$setstatus(r0, 0x4, 0x64000) io_submit(r1, 0x6, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2703000000000009, 0x8003f00, 0x3, 0x1, 0x0, r0, &(0x7f0000000000), 0x3000}]) r2 = open(&(0x7f0000000240)='./bus\x00', 0x309642, 0xbadd56c3430ace96) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xfd30) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) fcntl$setstatus(r3, 0x4, 0x64000) io_submit(r4, 0x6, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2703000000000009, 0x8003f00, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) r5 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x7e, &(0x7f0000000100)=0x0) fcntl$setstatus(r5, 0x4, 0x64000) io_submit(r6, 0x6, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2703000000000009, 0x8003f00, 0x3, 0x1, 0x0, r5, &(0x7f0000000000), 0x3000}]) r7 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(r7, 0x40044104, &(0x7f0000000000)=0x9) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000040)={0x0, 0x1, 0xf, 0x0, 0xbb, &(0x7f0000000480)="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"}) 03:14:42 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 1345.390145][ T28] audit: type=1804 audit(1600744484.951:1962): pid=16795 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir832804734/syzkaller.LBgua3/1360/bus" dev="sda1" ino=17068 res=1 errno=0 03:14:43 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x0) ftruncate(r2, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r3 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000040)=ANY=[], 0xffffff7d) [ 1345.548746][ T28] audit: type=1804 audit(1600744484.981:1963): pid=16795 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir832804734/syzkaller.LBgua3/1360/bus" dev="sda1" ino=17068 res=1 errno=0 [ 1345.802407][ T28] audit: type=1804 audit(1600744485.361:1964): pid=16799 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1735/bus" dev="sda1" ino=16671 res=1 errno=0 [ 1345.859075][ T28] audit: type=1804 audit(1600744485.361:1965): pid=16799 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1735/bus" dev="sda1" ino=16671 res=1 errno=0 03:14:46 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x0) ftruncate(r3, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) 03:14:46 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_GSO_MAX_SEGS={0x8}]}, 0x3c}}, 0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:14:47 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x0) ftruncate(r2, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r3 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000040)=ANY=[], 0xffffff7d) 03:14:47 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 1349.426609][ T28] audit: type=1804 audit(1600744488.981:1966): pid=16831 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1736/file1/bus" dev="loop5" ino=431 res=1 errno=0 [ 1349.591413][ T28] audit: type=1804 audit(1600744489.011:1967): pid=16831 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1736/file1/bus" dev="loop5" ino=431 res=1 errno=0 03:14:49 executing program 4: getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080), &(0x7f00000000c0)=0x4) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd86, &(0x7f0000000000)={0x0, 0x0, 0x2}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:14:50 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x0) ftruncate(r2, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) [ 1351.280392][ T28] audit: type=1804 audit(1600744490.841:1968): pid=16852 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir832804734/syzkaller.LBgua3/1361/bus" dev="sda1" ino=16968 res=1 errno=0 [ 1351.455969][ T28] audit: type=1804 audit(1600744490.911:1969): pid=16854 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1737/bus" dev="sda1" ino=16983 res=1 errno=0 [ 1351.730504][ T28] audit: type=1804 audit(1600744490.921:1970): pid=16854 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1737/bus" dev="sda1" ino=16983 res=1 errno=0 03:14:52 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x0) ftruncate(r3, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) 03:14:52 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6900) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:14:52 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x0) ftruncate(r2, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) [ 1353.479808][ T28] audit: type=1804 audit(1600744493.041:1971): pid=16869 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1738/file1/bus" dev="loop5" ino=432 res=1 errno=0 [ 1353.635416][ T28] audit: type=1804 audit(1600744493.061:1972): pid=16869 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1738/file1/bus" dev="loop5" ino=432 res=1 errno=0 03:14:52 executing program 4: exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f0000000000)={0x0, 0x0, 0x20}, &(0x7f00006d6000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:14:53 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x0) ftruncate(r2, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) [ 1354.456330][ T28] audit: type=1804 audit(1600744494.011:1973): pid=16880 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1739/file1/bus" dev="loop5" ino=433 res=1 errno=0 [ 1354.600427][ T28] audit: type=1804 audit(1600744494.011:1974): pid=16880 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1739/file1/bus" dev="loop5" ino=433 res=1 errno=0 03:14:55 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x0) ftruncate(r2, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) 03:14:56 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0xd706, 0x400040000000}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000040)={{{@in=@empty, @in6=@mcast1}}, {{@in6=@empty}, 0x0, @in6=@loopback}}, &(0x7f0000000140)=0xe8) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) inotify_add_watch(r0, &(0x7f0000000180)='./file0\x00', 0x84000000) [ 1359.002151][ T28] audit: type=1804 audit(1600744498.561:1975): pid=16895 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1740/file1/bus" dev="loop5" ino=434 res=1 errno=0 03:14:59 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x0) ftruncate(r2, 0x0) 03:14:59 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6900) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:14:59 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x0) ftruncate(r3, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) 03:14:59 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) prctl$PR_SET_TSC(0x1a, 0x3) syz_io_uring_setup(0x2e4d, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0x400}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000240)) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) tkill(r0, 0x1e) [ 1360.782877][ T28] audit: type=1804 audit(1600744500.341:1976): pid=16915 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir832804734/syzkaller.LBgua3/1363/file1/bus" dev="loop1" ino=436 res=1 errno=0 03:15:00 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x0) 03:15:00 executing program 4: ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, &(0x7f0000000040)) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) getpid() syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0xfffffffc, 0x0, 0x1, 0x174}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000240)) [ 1361.297943][ T28] audit: type=1804 audit(1600744500.851:1977): pid=16926 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1346/bus" dev="sda1" ino=16698 res=1 errno=0 [ 1361.350004][ T28] audit: type=1804 audit(1600744500.881:1978): pid=16926 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1346/bus" dev="sda1" ino=16698 res=1 errno=0 03:15:01 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x0) 03:15:01 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x0) ftruncate(r3, 0x0) r4 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, 0xffffffffffffffff, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) 03:15:02 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6900) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:15:02 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x0) 03:15:03 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x0) [ 1367.290721][ T28] audit: type=1804 audit(1600744506.851:1979): pid=16977 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1347/file1/bus" dev="sda1" ino=16799 res=1 errno=0 [ 1367.449049][ T28] audit: type=1804 audit(1600744506.881:1980): pid=16977 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1347/file1/bus" dev="sda1" ino=16799 res=1 errno=0 03:15:06 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) r0 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000040)=ANY=[], 0xfd30) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x48}}, 0x1) 03:15:07 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') ftruncate(0xffffffffffffffff, 0x0) 03:15:08 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x0) ftruncate(r3, 0x0) r4 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, 0xffffffffffffffff, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) 03:15:09 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 1369.553634][ T28] audit: type=1800 audit(1600744509.111:1981): pid=16999 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=16869 res=0 errno=0 03:15:09 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) ftruncate(0xffffffffffffffff, 0x0) 03:15:09 executing program 4: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x2000, 0x0) ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@null, @default, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f00000000c0)) [ 1370.662689][ T28] audit: type=1804 audit(1600744510.221:1982): pid=17025 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1348/file1/bus" dev="sda1" ino=16733 res=1 errno=0 03:15:10 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) ftruncate(0xffffffffffffffff, 0x0) 03:15:10 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) r0 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000040)=ANY=[], 0xfd30) setsockopt$llc_int(r0, 0x10c, 0x3, &(0x7f0000000000)=0x8000, 0x4) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) fcntl$setstatus(r1, 0x4, 0x64000) io_submit(r2, 0x6, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2703000000000009, 0x8003f00, 0x3, 0x1, 0x0, r1, &(0x7f0000000000), 0x3000}]) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000100)=0x8000) socket$pptp(0x18, 0x1, 0x2) membarrier(0x0, 0x0) connect$bt_sco(r1, &(0x7f0000000040)={0x1f, @fixed={[], 0x12}}, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f0000000080)={0x4}, 0x1) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x1c2, 0x0) ioctl$VIDIOC_G_INPUT(r3, 0x80045626, &(0x7f0000000280)) [ 1371.479628][ T28] audit: type=1804 audit(1600744511.041:1983): pid=17037 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1348/file1/bus" dev="sda1" ino=16733 res=1 errno=0 03:15:11 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) ftruncate(0xffffffffffffffff, 0x0) 03:15:12 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x0) ftruncate(r3, 0x0) r4 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, 0xffffffffffffffff, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) 03:15:12 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:15:12 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x6}, &(0x7f0000000040)=0x8) syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:15:13 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) ftruncate(0xffffffffffffffff, 0x0) 03:15:13 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/rpc\x00') ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000540)={&(0x7f00006d3000/0x3000)=nil, 0x3000}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000080)={0xffffffffffffffff, r1}) r2 = getegid() stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x8, &(0x7f0000000340)=[r2, 0x0, 0xee01, r3, r5, 0xee00, 0xee01, 0xffffffffffffffff]) openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x1, 0x0) execve(&(0x7f0000000380)='./file0\x00', &(0x7f0000000400)=[&(0x7f00000005c0)='/de\x00\x01\x00\x00\x905\xa7\x04g\xac\x0f\x9f\xe4Wm\xb9\x1d\x13\xe9\xf47O8\xdd\x89\xd4b\xa8\xa8V\x97\xa4\x01PB9]L\xea\xce\xf9#U\xab\xdfA\x96\x9c\xba1\xec=\xc2Mj\xf3\x102\x19o\f\xe4J\xfa\xdcZ\x10r$\xc7\xf4\xb4\xdf&#\xb5\xe1$-\x9a\xb6\x919P\x1d&\xe7\xd6\xbf\x90b\xfaA\x8d\x00\x10\xbd=\xfaSk\xffN(\xf5\xd0\xa8\xdds\x10\xe8\xa9>\xed\xb9\x8d\x11\x05n&R\xee\x9e\x9f\xf1\a&X\x14\x1cAUh2\xaa\x14\xec\xbe+\x9db\x8f\xf9\xae,\xeb\xa5\r;\x8a\xea\x7fs\xea\xba\xd0\x13\x05\xc8\x86)\xa5\xb0c\xc30\x99G\xe8\xc5\x1d\xf3\xca\x12\xc2\xdd'], &(0x7f0000000580)=[&(0x7f0000000480)='/dev/full\x00', &(0x7f00000004c0)='\t\xca@^],\x00', &(0x7f0000000500)=']-/\x03\x00', &(0x7f0000000740)='/dev/ashmem\x00\xc8\xaf\xfe\x929\x1fJ-\xd3\xff\xca\x85R\xaf\x04+\x8d$\xcf\xe6\x0e\xcb:_\xe8\x8bh]\xa8\xc1\xe3\xe1\xb7$\x04.\xe1\x97\xfb<2\xac\xfc\xc9_\x15\x8cR\x1c\xa2\x1f\xffy\xac\xf9X\xe8\xee\xca2\xfdk\x0e\x1c\x9a\xf5\xa6\x1a\xfb\xe2`\xa4\xfc\x81\x04\xfa\xb8\x18D\x04 \xaaiK\x8b\xd6\xffs\xf0\x1c\xcd\xcc\x80\x9e\xfe\xe2!\xec\xb0]>;\xf2\xbbo\x94K\xb1\xba8\xf5Q\x1a\xd9\xd7\x87\xbf\xf5\xd1}pL\nf\xc4\xa8\x82<\xb3\xb3QC\x17\x12\x02\xd1\x88o*\x1e/<\xd2\xcb\xc0d\t\x83\xd4]$\x96n3$=\x9a#\xd3\xbaH\x06\x99\x87\x96\xc1\xd2D\x80\x91\xb5\x1d\xf0I\xc2A\x9b4\x92\xaa\xa9\x85\xe5\x10\xf3\x03\xb6\x0f\x8c\x19\xf9\xdb=Z\x9e\xdaQ\xcc\xe2\x8f\"*h\x0f}\xc6\x9b\x8e\xc9\x0e\xebt\x8c\f\x8bM\xab\x977\x04\xd2\b\xb9\xa7\xf1[/\xe3h\xf1\xa5u,=\b(<\xfe\xc4h\xbe\xb5$\xbb\x9a\xab$\x0eD\x06?\x04\x17vW\x87Y\xbet \xcc=I\x03\"\xa4\x02\f=u\xc50\xd9\x1f\xee\x96!Wo?\x97\x8f\xb53\x02-4\x9a\xed<9\x89\x10ix6)L\xe3\xdeC.\xc6\r\xac\x91\xcfk\xb5A\x89\x86\x87mY\xb8\x00\xea\xda6\x1a\x1d\x06\xd9-\x9b\v$\x14\xc6`\x12e\x1cy\x8av.\xae']) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x80000, 0x0) getgroups(0x7, &(0x7f00000006c0)=[r5, r3, r3, r5, r3, r5, r5]) madvise(&(0x7f00006d6000/0x4000)=nil, 0x4000, 0x1) fchownat(r6, &(0x7f0000000680)='./file0\x00', r4, r7, 0x1000) [ 1373.739047][ T28] audit: type=1804 audit(1600744513.301:1984): pid=17066 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1349/file1/bus" dev="sda1" ino=17049 res=1 errno=0 [ 1375.089965][ T28] audit: type=1804 audit(1600744514.651:1985): pid=17083 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1349/file1/bus" dev="sda1" ino=17049 res=1 errno=0 03:15:17 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:15:17 executing program 5: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) ftruncate(0xffffffffffffffff, 0x0) 03:15:17 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8f, &(0x7f00000001c0)={0x0, 0x7eef, 0x2, 0x2, 0x89}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000000)) 03:15:17 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) [ 1378.622666][ T28] audit: type=1804 audit(1600744518.181:1986): pid=17092 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir832804734/syzkaller.LBgua3/1367/file1/bus" dev="loop1" ino=440 res=1 errno=0 [ 1378.816712][ T28] audit: type=1804 audit(1600744518.181:1987): pid=17092 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir832804734/syzkaller.LBgua3/1367/file1/bus" dev="loop1" ino=440 res=1 errno=0 03:15:18 executing program 5: syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) ftruncate(0xffffffffffffffff, 0x0) 03:15:18 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0xadbc, 0x0, 0x0, 0x2d5}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d1000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:15:23 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) 03:15:23 executing program 5: syz_mount_image$msdos(0x0, 0x0, 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) ftruncate(0xffffffffffffffff, 0x0) 03:15:23 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(0xffffffffffffffff, 0x800) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:15:24 executing program 5: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) ftruncate(0xffffffffffffffff, 0x0) [ 1385.959549][ T28] audit: type=1804 audit(1600744525.521:1988): pid=17140 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir832804734/syzkaller.LBgua3/1368/file1/bus" dev="loop1" ino=441 res=1 errno=0 [ 1386.118604][ T28] audit: type=1804 audit(1600744525.551:1989): pid=17140 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir832804734/syzkaller.LBgua3/1368/file1/bus" dev="loop1" ino=441 res=1 errno=0 [ 1386.330950][ T28] audit: type=1804 audit(1600744525.601:1990): pid=17150 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1351/file1/bus" dev="sda1" ino=17069 res=1 errno=0 [ 1386.592605][ T28] audit: type=1804 audit(1600744525.631:1991): pid=17150 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1351/file1/bus" dev="sda1" ino=17069 res=1 errno=0 03:15:27 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(0xffffffffffffffff, 0x800) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:15:27 executing program 5: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[]) ftruncate(0xffffffffffffffff, 0x0) 03:15:27 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) [ 1388.743961][ T28] audit: type=1804 audit(1600744528.301:1992): pid=17165 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir832804734/syzkaller.LBgua3/1369/file1/bus" dev="sda1" ino=16700 res=1 errno=0 03:15:28 executing program 5: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[]) ftruncate(0xffffffffffffffff, 0x0) [ 1388.918494][ T28] audit: type=1804 audit(1600744528.301:1993): pid=17165 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir832804734/syzkaller.LBgua3/1369/file1/bus" dev="sda1" ino=16700 res=1 errno=0 [ 1389.791685][ T28] audit: type=1804 audit(1600744529.351:1994): pid=17182 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1352/file1/bus" dev="sda1" ino=16700 res=1 errno=0 [ 1389.974877][ T28] audit: type=1804 audit(1600744529.351:1995): pid=17182 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1352/file1/bus" dev="sda1" ino=16700 res=1 errno=0 03:15:30 executing program 5: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) 03:15:30 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) 03:15:30 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(0xffffffffffffffff, 0x800) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 1392.049094][ T28] audit: type=1804 audit(1600744531.611:1996): pid=17200 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir832804734/syzkaller.LBgua3/1370/file1/bus" dev="loop1" ino=442 res=1 errno=0 [ 1392.208687][ T28] audit: type=1804 audit(1600744531.761:1997): pid=17207 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir832804734/syzkaller.LBgua3/1370/file1/bus" dev="loop1" ino=442 res=1 errno=0 03:15:31 executing program 5: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) 03:15:33 executing program 5: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) [ 1394.347604][ T28] audit: type=1804 audit(1600744533.901:1998): pid=17209 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1353/file1/bus" dev="sda1" ino=16918 res=1 errno=0 [ 1394.468604][ T28] audit: type=1804 audit(1600744533.901:1999): pid=17209 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1353/file1/bus" dev="sda1" ino=16918 res=1 errno=0 03:15:34 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) 03:15:34 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:15:35 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) [ 1395.931649][ T28] audit: type=1804 audit(1600744535.491:2000): pid=17230 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir832804734/syzkaller.LBgua3/1371/file1/bus" dev="loop1" ino=443 res=1 errno=0 [ 1396.120374][ T28] audit: type=1804 audit(1600744535.521:2001): pid=17230 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir832804734/syzkaller.LBgua3/1371/file1/bus" dev="loop1" ino=443 res=1 errno=0 [ 1396.344034][ T28] audit: type=1804 audit(1600744535.601:2002): pid=17236 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1760/file1/bus" dev="loop5" ino=444 res=1 errno=0 [ 1396.555692][ T28] audit: type=1804 audit(1600744535.611:2003): pid=17236 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1760/file1/bus" dev="loop5" ino=444 res=1 errno=0 [ 1396.787374][ T28] audit: type=1804 audit(1600744536.091:2004): pid=17243 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1354/file1/bus" dev="sda1" ino=16832 res=1 errno=0 [ 1396.812994][ T28] audit: type=1804 audit(1600744536.141:2005): pid=17243 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1354/file1/bus" dev="sda1" ino=16832 res=1 errno=0 03:15:37 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) 03:15:37 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) [ 1398.781645][ T28] audit: type=1804 audit(1600744538.341:2006): pid=17259 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1761/bus" dev="sda1" ino=16973 res=1 errno=0 [ 1398.941063][ T28] audit: type=1804 audit(1600744538.371:2007): pid=17259 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1761/bus" dev="sda1" ino=16973 res=1 errno=0 03:15:39 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(0xffffffffffffffff, 0x800) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:15:40 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 1400.995826][ T28] audit: type=1804 audit(1600744540.551:2008): pid=17271 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir832804734/syzkaller.LBgua3/1372/file1/bus" dev="sda1" ino=16886 res=1 errno=0 [ 1401.209986][ T28] audit: type=1804 audit(1600744540.601:2009): pid=17274 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir832804734/syzkaller.LBgua3/1372/file1/bus" dev="sda1" ino=16886 res=1 errno=0 [ 1401.410692][ T28] audit: type=1804 audit(1600744540.681:2010): pid=17272 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1355/file1/bus" dev="sda1" ino=17061 res=1 errno=0 [ 1401.497284][ T28] audit: type=1804 audit(1600744540.771:2011): pid=17272 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1355/file1/bus" dev="sda1" ino=17061 res=1 errno=0 [ 1401.602709][ T28] audit: type=1804 audit(1600744541.161:2012): pid=17280 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1762/bus" dev="sda1" ino=16986 res=1 errno=0 [ 1401.777678][ T28] audit: type=1804 audit(1600744541.191:2013): pid=17280 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1762/bus" dev="sda1" ino=16986 res=1 errno=0 03:15:42 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:15:42 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(0xffffffffffffffff, 0x800) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:15:42 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ftruncate(0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r4 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(0xffffffffffffffff, r3, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) [ 1403.088865][ T28] audit: type=1804 audit(1600744542.651:2014): pid=17292 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1763/file1/bus" dev="sda1" ino=16986 res=1 errno=0 [ 1403.380687][ T28] audit: type=1804 audit(1600744542.681:2015): pid=17292 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1763/file1/bus" dev="sda1" ino=16986 res=1 errno=0 03:15:44 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) r1 = open(0x0, 0x0, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:15:45 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 1406.229975][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 1406.229988][ T28] audit: type=1804 audit(1600744545.791:2018): pid=17316 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1764/file1/bus" dev="sda1" ino=17005 res=1 errno=0 [ 1406.483668][ T28] audit: type=1804 audit(1600744545.821:2019): pid=17316 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1764/file1/bus" dev="sda1" ino=17005 res=1 errno=0 03:15:47 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ftruncate(0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r4 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(0xffffffffffffffff, r3, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) 03:15:48 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 1409.532735][ T28] audit: type=1804 audit(1600744549.091:2020): pid=17336 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1765/file1/bus" dev="sda1" ino=16915 res=1 errno=0 [ 1409.796778][ T28] audit: type=1804 audit(1600744549.121:2021): pid=17336 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1765/file1/bus" dev="sda1" ino=16915 res=1 errno=0 03:15:51 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:15:51 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ftruncate(0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r4 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(0xffffffffffffffff, r3, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) 03:15:51 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) r1 = open(0x0, 0x0, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 1412.080184][ T28] audit: type=1804 audit(1600744551.641:2022): pid=17349 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1766/file1/bus" dev="sda1" ino=16847 res=1 errno=0 [ 1412.265024][ T28] audit: type=1804 audit(1600744551.641:2023): pid=17349 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1766/file1/bus" dev="sda1" ino=16847 res=1 errno=0 03:15:53 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) 03:15:53 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) r1 = open(0x0, 0x0, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 1414.956572][ T28] audit: type=1804 audit(1600744554.511:2024): pid=17382 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1767/bus" dev="sda1" ino=16931 res=1 errno=0 [ 1415.112689][ T28] audit: type=1804 audit(1600744554.551:2025): pid=17382 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1767/bus" dev="sda1" ino=16931 res=1 errno=0 03:15:55 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x0) ftruncate(r3, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) 03:15:56 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) 03:15:56 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(0x0, 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 1417.033047][ T28] audit: type=1804 audit(1600744556.591:2026): pid=17402 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1768/file1/bus" dev="loop5" ino=447 res=1 errno=0 [ 1417.188534][ T28] audit: type=1804 audit(1600744556.601:2027): pid=17403 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1360/file1/bus" dev="sda1" ino=16993 res=1 errno=0 [ 1417.338604][ T28] audit: type=1804 audit(1600744556.621:2028): pid=17402 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1768/file1/bus" dev="loop5" ino=447 res=1 errno=0 [ 1417.571031][ T28] audit: type=1804 audit(1600744556.971:2029): pid=17408 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir832804734/syzkaller.LBgua3/1376/bus" dev="sda1" ino=17090 res=1 errno=0 [ 1417.700086][ T28] audit: type=1804 audit(1600744556.971:2030): pid=17408 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir832804734/syzkaller.LBgua3/1376/bus" dev="sda1" ino=17090 res=1 errno=0 03:15:57 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(0x0, 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:15:58 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) r1 = open(0x0, 0x0, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:15:58 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x0) ftruncate(r3, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) [ 1420.040693][ T28] audit: type=1804 audit(1600744559.601:2031): pid=17439 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir832804734/syzkaller.LBgua3/1377/bus" dev="sda1" ino=16692 res=1 errno=0 [ 1420.209849][ T28] audit: type=1804 audit(1600744559.641:2032): pid=17439 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir832804734/syzkaller.LBgua3/1377/bus" dev="sda1" ino=16692 res=1 errno=0 03:16:00 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x0) ftruncate(r3, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) [ 1421.188413][ T28] audit: type=1804 audit(1600744560.741:2033): pid=17431 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1361/file1/bus" dev="sda1" ino=16838 res=1 errno=0 [ 1421.355331][ T28] audit: type=1804 audit(1600744560.851:2034): pid=17449 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1770/bus" dev="sda1" ino=17007 res=1 errno=0 [ 1421.543416][ T28] audit: type=1804 audit(1600744560.851:2035): pid=17449 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1770/bus" dev="sda1" ino=17007 res=1 errno=0 03:16:01 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(0x0, 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:16:01 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x0) ftruncate(r3, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) 03:16:01 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x0) ftruncate(r3, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) [ 1422.731209][ T28] audit: type=1804 audit(1600744562.291:2036): pid=17462 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1362/file1/bus" dev="sda1" ino=17012 res=1 errno=0 [ 1422.907439][ T28] audit: type=1804 audit(1600744562.341:2037): pid=17463 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1771/bus" dev="sda1" ino=17028 res=1 errno=0 [ 1423.094415][ T28] audit: type=1804 audit(1600744562.461:2038): pid=17463 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1771/bus" dev="sda1" ino=17028 res=1 errno=0 [ 1424.349313][ T28] audit: type=1804 audit(1600744563.911:2039): pid=17472 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir832804734/syzkaller.LBgua3/1378/bus" dev="sda1" ino=16824 res=1 errno=0 [ 1424.390649][ T28] audit: type=1804 audit(1600744563.931:2040): pid=17472 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir832804734/syzkaller.LBgua3/1378/bus" dev="sda1" ino=16824 res=1 errno=0 03:16:04 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:16:04 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x0) ftruncate(r3, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) 03:16:04 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x0) ftruncate(r3, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) [ 1425.508762][ T28] audit: type=1804 audit(1600744565.071:2041): pid=17481 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1772/bus" dev="sda1" ino=16811 res=1 errno=0 [ 1425.651669][ T28] audit: type=1804 audit(1600744565.091:2042): pid=17481 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1772/bus" dev="sda1" ino=16811 res=1 errno=0 [ 1425.826620][ T28] audit: type=1804 audit(1600744565.111:2043): pid=17484 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1363/file1/bus" dev="sda1" ino=16824 res=1 errno=0 [ 1425.991868][ T28] audit: type=1804 audit(1600744565.111:2044): pid=17484 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1363/file1/bus" dev="sda1" ino=16824 res=1 errno=0 03:16:05 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:16:06 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x0) ftruncate(r3, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) [ 1427.289986][ T28] audit: type=1804 audit(1600744566.851:2045): pid=17500 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1364/file1/bus" dev="sda1" ino=17065 res=1 errno=0 03:16:09 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:16:09 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x0) ftruncate(r3, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) [ 1430.316327][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 1430.316394][ T28] audit: type=1804 audit(1600744569.871:2051): pid=17520 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1774/bus" dev="sda1" ino=16960 res=1 errno=0 [ 1430.530687][ T28] audit: type=1804 audit(1600744569.951:2052): pid=17524 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1774/bus" dev="sda1" ino=16960 res=1 errno=0 03:16:10 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x0) ftruncate(r3, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) 03:16:10 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x0) ftruncate(r3, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) [ 1431.250659][ T28] audit: type=1804 audit(1600744570.811:2053): pid=17527 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1365/file1/bus" dev="sda1" ino=16656 res=1 errno=0 [ 1431.474939][ T28] audit: type=1804 audit(1600744570.841:2054): pid=17527 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1365/file1/bus" dev="sda1" ino=16656 res=1 errno=0 [ 1431.668567][ T28] audit: type=1804 audit(1600744570.961:2055): pid=17533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1775/bus" dev="sda1" ino=17068 res=1 errno=0 [ 1431.851218][ T28] audit: type=1804 audit(1600744570.961:2056): pid=17533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1775/bus" dev="sda1" ino=17068 res=1 errno=0 [ 1434.788683][ T28] audit: type=1804 audit(1600744574.351:2057): pid=17542 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir832804734/syzkaller.LBgua3/1380/bus" dev="sda1" ino=16770 res=1 errno=0 [ 1434.880908][ T28] audit: type=1804 audit(1600744574.351:2058): pid=17542 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir832804734/syzkaller.LBgua3/1380/bus" dev="sda1" ino=16770 res=1 errno=0 03:16:14 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:16:14 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) [ 1435.202865][ T28] audit: type=1804 audit(1600744574.761:2059): pid=17549 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1776/file1/bus" dev="loop5" ino=448 res=1 errno=0 03:16:14 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x7f07, 0x1, 0x8, 0x2a8, {{0x11, 0x4, 0x2, 0x1f, 0x44, 0x67, 0x0, 0x0, 0x29, 0x0, @multicast2, @empty, {[@lsrr={0x83, 0x23, 0xf, [@local, @multicast2, @remote, @loopback, @rand_addr=0x64010102, @broadcast, @remote, @broadcast]}, @timestamp_prespec={0x44, 0xc, 0x67, 0x3, 0x4, [{@dev={0xac, 0x14, 0x14, 0x39}, 0xffffffff}]}]}}}}}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000bc7ef9642d29ba564165605dca29708efdf9b15a5c10a126fc1a2751f642635bcd9a8bf7a928a5d054b0d2c54d519ea75c52f41ed6f2886973626b684c8bcede3294f6e73d06ad16dc2d26725ff833b5f83b499918e6a6ec245b781d41aee9624c847e2f2312d6a1db45bad354fc1a3f20340547860f97d30d407ffe406483a0524937ee7559e4bf70136746b37fdfbbb152758d37ed8bcac41eb7243bdcd536249c7996e898b61927eaa5a8790054ba13d3ade593220f96027090234aaf7ea92f41aab73e7a85eef87e956bb7c5c76a347264fd99359f4e57b0dcc2bcc188ea880a4b11a8bb81eb22b0ddfc689e3218cf310dcc61cab354149d9107d8a88b0aa5b5661555f00443aee5e714009e52cee5e88f008148ddbc0fa81bf938bed4a1ac778d5337cc0311d0772eeac3eab38426e8d1472ff514aa5379ed21551790cc10148410b4fc27582fd7106a8887a9a0b613dfe10aee77542d887208f5534f5d8ba943f258fc9e191f666e2aff1cebfc3ce2c1e8ff66bba1d9aa3308b67b279a2378db7024bf321636d0de8651e672ed4f01ba5da2c3f9042a8552bd3f2c9ad546ad0ea20b4d35fb0a15c6239f67c77447"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r3, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x2}}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r4, r3}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1a, 0xa, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x3}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, @exit, @generic={0x7, 0x1, 0x8, 0x8, 0x7d}, @call={0x85, 0x0, 0x0, 0x5d}, @map={0x18, 0xa, 0x1, 0x0, r0}]}, &(0x7f00000000c0)='GPL\x00', 0x7fff, 0x1000, &(0x7f0000000480)=""/4096, 0x41000, 0x4, [], r1, 0xd, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x1, 0xc, 0x4, 0x200}, 0x10, r4}, 0x78) exit_group(0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_BEARER_SET(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYRES64], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}}, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f00000016c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001680)={&(0x7f0000001600)={0x54, 0x0, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000001}, 0x80) syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000440)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8], 0x1c}, 0x1, 0x0, 0x0, 0x8804}, 0x8800) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x440000}, 0xc, &(0x7f0000001500)={&(0x7f0000001480)={0x4c, r8, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_MGMT_A_CV4DOI={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) [ 1435.330937][ T28] audit: type=1804 audit(1600744574.791:2060): pid=17549 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1776/file1/bus" dev="loop5" ino=448 res=1 errno=0 [ 1435.396527][ T28] audit: type=1804 audit(1600744574.951:2061): pid=17551 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1366/file1/bus" dev="sda1" ino=16873 res=1 errno=0 [ 1435.617002][ T28] audit: type=1804 audit(1600744574.951:2062): pid=17551 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1366/file1/bus" dev="sda1" ino=16873 res=1 errno=0 03:16:15 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:16:15 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x0) ftruncate(r3, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) [ 1436.364616][ T28] audit: type=1804 audit(1600744575.921:2063): pid=17560 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1367/file1/bus" dev="sda1" ino=16800 res=1 errno=0 [ 1436.669560][ T28] audit: type=1804 audit(1600744575.941:2064): pid=17560 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1367/file1/bus" dev="sda1" ino=16800 res=1 errno=0 03:16:16 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 1437.920600][T17567] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1437.947329][ T28] audit: type=1804 audit(1600744577.501:2065): pid=17565 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir832804734/syzkaller.LBgua3/1381/bus" dev="sda1" ino=16785 res=1 errno=0 [ 1438.071422][ T28] audit: type=1804 audit(1600744577.551:2066): pid=17565 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir832804734/syzkaller.LBgua3/1381/bus" dev="sda1" ino=16785 res=1 errno=0 [ 1438.341695][ T28] audit: type=1804 audit(1600744577.901:2067): pid=17573 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1368/bus" dev="sda1" ino=16984 res=1 errno=0 03:16:18 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x0) ftruncate(r3, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) [ 1439.409665][ T28] audit: type=1804 audit(1600744578.971:2068): pid=17580 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1368/bus" dev="sda1" ino=16984 res=1 errno=0 [ 1440.311732][T17567] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1440.448785][ T28] audit: type=1804 audit(1600744580.011:2069): pid=17587 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1777/bus" dev="sda1" ino=16935 res=1 errno=0 [ 1440.599765][ T28] audit: type=1804 audit(1600744580.031:2070): pid=17587 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1777/bus" dev="sda1" ino=16935 res=1 errno=0 03:16:20 executing program 4: r0 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000040)=ANY=[], 0xfd30) fdatasync(r0) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d2000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:16:20 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, 0x0, 0xffffff7d) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:16:20 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x0) ftruncate(r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) 03:16:21 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x0) ftruncate(r3, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) 03:16:21 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) r0 = syz_open_dev$vcsu(&(0x7f0000000040)='/dev/vcsu#\x00', 0x98e8941, 0x40080) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000380)={&(0x7f0000000080)="c93519fc9d9d821fe1196f2ba640f1a786a223284f3e9329f36651d029fb2fd0220a4ff810c5aa43411c13401f5e899ad516cf48b0b29cc3f16c06e62f1be1ddcb2c2b68d545609eea9adccbd8aa1f6350e748282bdb6e7e4f02f332c526cdace888d8cc0d568bca43c1e51457cc405d1250a108ef01b34f80d3dca86390e80d1ecab3e81c18e8642464548842e05e16f32ca8f76415095e05bc145e69663439cedb986f7474470f121ebf561cb3e4015d52d34655b28a0234750d3922e092ecfecccd0a52c84e1dbae90fadbd9a", &(0x7f0000000480)=""/4096, &(0x7f0000000280)="3d2402177427f1409227e1b07af4a5f3e16fe5ae80c068deee75634421f47bb516ed29c482ffcf3e18df2f5b999d516096891522dff161660c574ffb70ae25715ad65c48d8940e936dbcb44c3079edc5fe4a8c862641b3f5b65f54da9cb751c7ac00940344aee297117c57f5f146d9a771a3040876e0287794e67202469e996a5de1eea3716ea30f7c0e513f245132f0d59cdda14bfd24d22a3a94fc340fe7bbd3b8213eee2991a1f0d1987ef245decdd4b098dc3ff7bc00cfe6d2ad2b21d5004936dccb35b37bd805caa1aa1853d5e3a796d59418b8b27450d074f40c89309d03caffa7be8b8e574a6c3a4484", &(0x7f0000000180)="17cbc5a575749d079d3ba62793c7c8d0ad9dd03bd35456", 0xfffffffb, 0x1, 0x4}, 0x38) ioctl$IMCLEAR_L2(0xffffffffffffffff, 0x80044946, &(0x7f0000000000)=0x3) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f00000003c0)={0x0, 0x7fff, {0xffffffffffffffff}, {0x0}, 0x100, 0x3}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x142, 0x0) ioctl$NBD_CLEAR_QUE(r0, 0xab05) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r2) setreuid(r1, r2) setsockopt$sock_void(r0, 0x1, 0xd, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r3) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r5) syz_mount_image$hfsplus(&(0x7f00000014c0)='hfsplus\x00', &(0x7f0000001500)='./file0\x00', 0x83, 0x5, &(0x7f0000001880)=[{&(0x7f0000001540)="de3dfcdb295f38ec3c747555d16c180e7bee39a5f56962", 0x17, 0x6382}, {&(0x7f0000001580)="5f154e94145a7b5b0ca9c71ad164b899abe9643c26476a80ca61da20ba6e7c15d5f3a719e69bc2071444f343a0770aaaaff3", 0x32, 0x1}, {&(0x7f00000015c0)="844458967f4c442940f6ee6a3fc2b796b4c0b1c6a5a3a78216c7b32893d22e7eef406b23546a35798e759b5385368aaa2596bd2533845a048909e71a3a603cfa69fa2b3995bddc3fd7019cfc655b93eb90af872855eb865559306b74bbe4a0ad4cc65f8a8b1f1c3403445ce13bf60149f33aa99036d653619f0889d1638c103ea2ae02d07943e286cbdf22f2cb057fa984affefa536aa6903cea8efcc575cd3560c60c642cf8fb0063e4fd1880d14e2e5a522ff2ccb7f7014e5b3a7d6826490188", 0xc1, 0x401}, {&(0x7f00000016c0)="395bd0dca8b6f3e9aae7795282cf9179df3de174f7923256613254ae085948e726f255185d91987bfd488c8193e45a6f404901aef599b0c65e1e4d32e47844b6cc4f75ba6116c26a8c3dd06080c8af2b1bc5e2852e6cfaa8a44ff9ccea1021d68d986d4ebb0db8cd0ae3b646440e25e9893a0f66b6386b69b5a8cd35b943da03b2058fcf9ad39bd0c020e3a88f22b7d6232bd3e7435ef76a4d46e0647515c827d0cd622bbc334792582c7fd7553b4119cdf1", 0xb2, 0x6}, {&(0x7f0000001780)="e4e4a6f452ab3e5dc70c22020d4f7f9759ab52f2da58cd160ba0fb177fed28ef9026e602c0aa5ba41c68a9c3b371344b52981e86149139e5daf5619994b41ee72072206c04a4ef4c13621bf97c21daa7a7e2711c30bca245f8b3ff21f52679a81a4b7b327e11a903e2ccbfd86d8326202a3e299e15126037d0645fc2c26f4e701427c97d6f0ebaa72d8676244a6a1cdf6c993c6c8a6dae19ce016a2a75671d7fd96503c09617444076403e92d833157908079378d4755dfdd503ed191ce7d988785fcc1c37b63ed024fd167bfb2caf092db278e4ac9a552cb6857b911e18f4673f6c27d2cf18a54062ed8b7df71ea931f2e9", 0xf2, 0x1}], 0x24000, &(0x7f0000001900)=ANY=[@ANYBLOB="706172743d3078303030303030303030303030303030382c706172743d3078303030303030303130303030303030312c666f776e65723e2ea1563f02bc0aaae6c8302929b0e843d903ea23bb58a9a13955580f72c8e509352ed3c6590add5bbd2bca76b51c7cf8dc8f5f5a033d23e6ab4a0a9ece20b52a587ed19c7d5e826567563523336e40a39e430d280d66a914717077520e0e7cc617f19ac5766d97621036", @ANYRESDEC=r3, @ANYBLOB="2c7569643d0ddc3ed41536091f69133602d803e272c5687ccf3ed537fef4d9f24f2653350455089758e07b5f3fb2ebfdb46a1b2c808cbfc2c4be241cae5311933cf32c862066a49673000f7fcbd84a77d9396ed9300268a493ba3f7d8434de8390eb3b0d3d7ed89cacbc8c18146359dda3ad66ddeb93d360a73aeaa009affcbbcd95cc3c46ef2f5cefaa5ec3593f9f116bb38439f727328796167cb10000800b2921240b002aa6cd4b7e62a0848085cdbc60031779d4de1ad5f5f2fe6da771af7734cc7b08b9dde1d7ea2cbcc9461377965951fc104e505b020000", @ANYRESDEC=r5, @ANYBLOB="9cea801a3e60c2e124cec81a1fcbc9d6f2f1116b17a4e73a5af4605402f99bc6e9f07f6aca4f24f7f4770786808554dbf77475d29144866dc88a5ccc83df8620893d2c9132be4361c6df29f051d0b100de1921a95dd635c6cf33884b110b9d3c31c54756399b833f9691b94be5e3805dd68c2cff32e855ade02b17ab4ad21bc1222cae3aa0d1fafef9d4877d"]) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001480)={{&(0x7f00006d3000/0x1000)=nil, 0x1000}, 0x1}) [ 1441.944910][ T28] audit: type=1804 audit(1600744581.501:2071): pid=17602 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1778/bus" dev="sda1" ino=16951 res=1 errno=0 [ 1442.090589][ T28] audit: type=1804 audit(1600744581.501:2072): pid=17602 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1778/bus" dev="sda1" ino=16951 res=1 errno=0 03:16:22 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2, 0x0) ioctl$FITHAW(r0, 0xc0045878) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg(r1, &(0x7f0000002cc0), 0x68, 0x7ffffff7) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xfd30) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000040)={"36a907249b09f135106509cd375f3b42", 0x0, 0x0, {0x0, 0x1}, {0x80, 0x80000000}, 0x6, [0xffffffff, 0x1, 0xffff, 0xfff, 0x40, 0x8001, 0x20, 0x7, 0xcfc, 0xff, 0x9, 0x9, 0x7fff, 0x3, 0xfffffffffffffffd, 0x20000000000000]}) syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) fcntl$setstatus(r4, 0x4, 0x64000) io_submit(r5, 0x6, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2703000000000009, 0x8003f00, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f00006d3000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000280)="66dd7e00baf80c66b860b5a08666efbafc0c66b878ddd28266ef66b8000000000f23c80f21f866350800d0000f23f80f01ca2e660f38829300000fc75a00660f38810a66b9800000c00f326635001000000f3066b8ee1e05d60f23c00f21f86635030001000f23f867e076", 0x6b}], 0x1, 0x5a, &(0x7f0000000340)=[@dstype0={0x6, 0xb}], 0x1) r6 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r6, &(0x7f0000000040)=ANY=[], 0xfd30) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000140)={0x1, 0x800f, 0xffffff71, 0x7}, 0x10) 03:16:22 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x0) ftruncate(r3, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) 03:16:22 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) fcntl$setstatus(r0, 0x4, 0x64000) io_submit(r1, 0x6, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2703000000000009, 0x8003f00, 0x3, 0x1, 0x0, r0, &(0x7f0000000000), 0x3000}]) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000000)={0x3, 0x0, &(0x7f00006d2000/0x1000)=nil}) syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:16:23 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) fcntl$setstatus(r0, 0x4, 0x64000) io_submit(r1, 0x6, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2703000000000009, 0x8003f00, 0x3, 0x1, 0x0, r0, &(0x7f0000000000), 0x3000}]) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000)=0xffff, 0x4) syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) [ 1443.541484][ T28] audit: type=1804 audit(1600744583.101:2073): pid=17649 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir832804734/syzkaller.LBgua3/1382/file1/bus" dev="loop1" ino=449 res=1 errno=0 [ 1443.634443][ T28] audit: type=1804 audit(1600744583.121:2074): pid=17652 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir832804734/syzkaller.LBgua3/1382/file1/bus" dev="loop1" ino=449 res=1 errno=0 [ 1443.806656][ T28] audit: type=1804 audit(1600744583.361:2075): pid=17633 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1369/file1/bus" dev="sda1" ino=16876 res=1 errno=0 [ 1443.982855][ T28] audit: type=1804 audit(1600744583.361:2076): pid=17633 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1369/file1/bus" dev="sda1" ino=16876 res=1 errno=0 03:16:23 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, 0x0, 0xffffff7d) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 1444.520146][ T28] audit: type=1804 audit(1600744584.081:2077): pid=17658 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1779/bus" dev="sda1" ino=16890 res=1 errno=0 [ 1444.741718][ T28] audit: type=1804 audit(1600744584.081:2078): pid=17658 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1779/bus" dev="sda1" ino=16890 res=1 errno=0 03:16:24 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x0) ftruncate(r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) 03:16:25 executing program 4: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) fcntl$setstatus(r0, 0x4, 0x64000) io_submit(r1, 0x6, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2703000000000009, 0x8003f00, 0x3, 0x1, 0x0, r0, &(0x7f0000000000), 0x3000}]) setsockopt$inet6_dccp_buf(r0, 0x21, 0x80, &(0x7f0000000040)="9e83bdad7dc71655268e3c5e5e0170a8fe09657c683c323decaaddd42d9a", 0x1e) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000000)=[0x3, 0x4], 0x2) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) [ 1450.701826][ T28] audit: type=1804 audit(1600744590.261:2079): pid=17685 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir832804734/syzkaller.LBgua3/1383/file1/bus" dev="loop1" ino=450 res=1 errno=0 [ 1450.832031][ T28] audit: type=1804 audit(1600744590.261:2080): pid=17685 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir832804734/syzkaller.LBgua3/1383/file1/bus" dev="loop1" ino=450 res=1 errno=0 03:16:32 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, 0x0, 0xffffff7d) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:16:32 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x0) ftruncate(r3, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) 03:16:32 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x0) ftruncate(r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) [ 1453.582527][ T28] audit: type=1804 audit(1600744593.141:2081): pid=17703 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1780/bus" dev="sda1" ino=16964 res=1 errno=0 [ 1453.636937][ T28] audit: type=1804 audit(1600744593.141:2082): pid=17703 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1780/bus" dev="sda1" ino=16964 res=1 errno=0 03:16:33 executing program 4: clone(0x7d2b54a9040da0fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$read(0xb, r0, 0x0, 0x0) keyctl$clear(0x7, r0) exit_group(0x0) ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, &(0x7f0000000040)={0x0, 0x0, 0x8, [], &(0x7f0000000000)=0xd8}) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) fcntl$setstatus(r1, 0x4, 0x64000) r3 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000040)=ANY=[], 0xfd30) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) io_submit(r2, 0x6, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2703000000000009, 0x8003f00, 0x3, 0x1, 0x0, r1, &(0x7f0000000000), 0x3000}]) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) fcntl$setstatus(r4, 0x4, 0x64000) io_submit(r5, 0x6, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2703000000000009, 0x8003f00, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) inotify_add_watch(r4, &(0x7f0000000140)='./bus\x00', 0x4000200) syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:16:34 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, 0x0, 0xffffff7d) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 1455.305664][ T28] audit: type=1804 audit(1600744594.861:2083): pid=17706 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1371/file1/bus" dev="sda1" ino=16977 res=1 errno=0 [ 1455.447822][ T28] audit: type=1800 audit(1600744594.861:2084): pid=17706 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=16977 res=0 errno=0 [ 1455.625355][ T28] audit: type=1804 audit(1600744594.861:2085): pid=17707 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir832804734/syzkaller.LBgua3/1384/file1/bus" dev="loop1" ino=451 res=1 errno=0 [ 1455.855066][ T28] audit: type=1804 audit(1600744594.861:2086): pid=17707 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir832804734/syzkaller.LBgua3/1384/file1/bus" dev="loop1" ino=451 res=1 errno=0 [ 1455.989039][ T28] audit: type=1804 audit(1600744594.891:2087): pid=17710 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1371/file1/bus" dev="sda1" ino=16977 res=1 errno=0 [ 1456.148418][ T28] audit: type=1800 audit(1600744594.891:2088): pid=17710 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=16977 res=0 errno=0 [ 1456.248448][ T28] audit: type=1804 audit(1600744595.321:2089): pid=17720 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1781/file1/bus" dev="sda1" ino=16877 res=1 errno=0 [ 1456.361066][ T28] audit: type=1804 audit(1600744595.321:2090): pid=17720 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1781/file1/bus" dev="sda1" ino=16877 res=1 errno=0 03:16:37 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(0xffffffffffffffff, r1, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:16:37 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, 0x0, 0xffffff7d) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:16:37 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) io_uring_enter(0xffffffffffffffff, 0x1803, 0x435b, 0x3, &(0x7f0000000000)={[0x6]}, 0x8) 03:16:37 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(0xffffffffffffffff, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x0) ftruncate(r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r4 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r2, r3, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) [ 1458.344144][ T28] audit: type=1804 audit(1600744597.901:2091): pid=17737 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1782/file1/bus" dev="sda1" ino=17080 res=1 errno=0 [ 1458.548639][ T28] audit: type=1804 audit(1600744597.901:2092): pid=17737 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1782/file1/bus" dev="sda1" ino=17080 res=1 errno=0 [ 1458.701642][ T28] audit: type=1804 audit(1600744598.211:2093): pid=17753 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1372/bus" dev="sda1" ino=16807 res=1 errno=0 [ 1458.928516][ T28] audit: type=1804 audit(1600744598.221:2094): pid=17753 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1372/bus" dev="sda1" ino=16807 res=1 errno=0 03:16:38 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x0) ftruncate(r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) 03:16:39 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x8, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000000)='GPL\x00', 0x5, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r0, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r1}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r1}, 0xc) [ 1460.773785][ T28] audit: type=1804 audit(1600744600.331:2095): pid=17765 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1783/file1/bus" dev="loop5" ino=452 res=1 errno=0 [ 1460.988119][ T28] audit: type=1804 audit(1600744600.331:2096): pid=17765 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1783/file1/bus" dev="loop5" ino=452 res=1 errno=0 [ 1461.493356][ T28] audit: type=1804 audit(1600744601.051:2097): pid=17743 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir832804734/syzkaller.LBgua3/1385/file1/bus" dev="sda1" ino=17093 res=1 errno=0 [ 1461.656447][ T28] audit: type=1804 audit(1600744601.051:2098): pid=17743 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir832804734/syzkaller.LBgua3/1385/file1/bus" dev="sda1" ino=17093 res=1 errno=0 03:16:43 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(0xffffffffffffffff, r1, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:16:43 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x0) ftruncate(r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) 03:16:43 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(0xffffffffffffffff, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x0) ftruncate(r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r4 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r2, r3, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) 03:16:43 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) fcntl$setstatus(r0, 0x4, 0x64000) io_submit(r1, 0x6, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2703000000000009, 0x8003f00, 0x3, 0x1, 0x0, r0, &(0x7f0000000000), 0x3000}]) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0xfffffffe}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) [ 1464.013652][ T28] audit: type=1804 audit(1600744603.571:2099): pid=17796 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1784/file1/bus" dev="loop5" ino=453 res=1 errno=0 [ 1464.160638][ T28] audit: type=1804 audit(1600744603.601:2100): pid=17796 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1784/file1/bus" dev="loop5" ino=453 res=1 errno=0 [ 1464.907539][ T28] audit: type=1804 audit(1600744604.461:2101): pid=17801 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir832804734/syzkaller.LBgua3/1386/file1/bus" dev="loop1" ino=454 res=1 errno=0 [ 1464.933459][ T28] audit: type=1804 audit(1600744604.481:2102): pid=17801 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir832804734/syzkaller.LBgua3/1386/file1/bus" dev="loop1" ino=454 res=1 errno=0 [ 1465.089168][ T28] audit: type=1804 audit(1600744604.651:2103): pid=17817 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1373/file1/bus" dev="sda1" ino=16886 res=1 errno=0 [ 1465.186077][ T28] audit: type=1804 audit(1600744604.671:2104): pid=17807 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1373/file1/bus" dev="sda1" ino=16886 res=1 errno=0 03:16:47 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(0xffffffffffffffff, r1, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:16:47 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(0xffffffffffffffff, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x0) ftruncate(r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r4 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r2, r3, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) 03:16:47 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(0xffffffffffffffff, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x0) ftruncate(r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r4 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r2, r3, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) [ 1467.791002][ T28] audit: type=1804 audit(1600744607.351:2105): pid=17833 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1785/file1/bus" dev="sda1" ino=16907 res=1 errno=0 [ 1467.918355][ T28] audit: type=1804 audit(1600744607.411:2106): pid=17834 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1785/file1/bus" dev="sda1" ino=16907 res=1 errno=0 03:16:48 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffffff, &(0x7f0000000180)='./bus\x00', 0x0, 0x80) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xcc, 0x0, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x48, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}]}, @TIPC_NLA_SOCK={0x70, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x881}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x478d}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x200}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4963}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xead}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}]}]}, 0xcc}}, 0x800) r1 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000040)=ANY=[], 0xfd30) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/fuse\x00', 0x2, 0x0) write$FUSE_OPEN(r2, &(0x7f00000004c0)={0x20, 0xffffffffffffffda, 0x0, {0x0, 0x18}}, 0x20) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0xac, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x44, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x4}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}]}, 0xac}, 0x1, 0x0, 0x0, 0x44000}, 0x4) sendmsg$IPSET_CMD_GET_BYINDEX(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000000f060103000000000000000003000005050001000600000000000000020000000500010007000000"], 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x4048010) exit_group(0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000040)=0x2, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x103000, 0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:16:48 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(0xffffffffffffffff, r1, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 1469.170904][ T28] audit: type=1804 audit(1600744608.731:2107): pid=17842 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1374/file1/bus" dev="sda1" ino=16907 res=1 errno=0 [ 1469.322259][ T28] audit: type=1804 audit(1600744608.751:2108): pid=17842 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1374/file1/bus" dev="sda1" ino=16907 res=1 errno=0 [ 1469.485127][ T28] audit: type=1804 audit(1600744608.761:2109): pid=17844 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1786/file1/bus" dev="sda1" ino=16986 res=1 errno=0 [ 1469.661416][ T28] audit: type=1804 audit(1600744608.761:2110): pid=17844 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1786/file1/bus" dev="sda1" ino=16986 res=1 errno=0 03:16:49 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) syz_io_uring_setup(0x1d8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:16:52 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:16:52 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(0xffffffffffffffff, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x0) ftruncate(r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r4 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r2, r3, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) 03:16:52 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, 0xffffffffffffffff) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x0) ftruncate(r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r4 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r2, r3, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) 03:16:53 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0x3922, &(0x7f00000001c0), &(0x7f00006d6000/0x400000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000000)=0x1, 0x4) [ 1474.305235][ T28] audit: type=1804 audit(1600744613.861:2111): pid=17878 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1787/file1/bus" dev="loop5" ino=455 res=1 errno=0 [ 1474.493267][ T28] audit: type=1804 audit(1600744613.861:2112): pid=17878 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1787/file1/bus" dev="loop5" ino=455 res=1 errno=0 [ 1474.802813][ T28] audit: type=1804 audit(1600744613.861:2113): pid=17877 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1375/file1/bus" dev="sda1" ino=17117 res=1 errno=0 [ 1474.961509][ T28] audit: type=1804 audit(1600744613.941:2114): pid=17877 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1375/file1/bus" dev="sda1" ino=17117 res=1 errno=0 03:16:55 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000000)=0x1, 0x4) r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x3, 0x2) ioctl$VIDIOC_S_EDID(r0, 0xc0285629, &(0x7f00000000c0)={0x0, 0x1000, 0x5, [], &(0x7f0000000080)=0x2}) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:16:55 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 1476.169871][ T28] audit: type=1804 audit(1600744615.731:2115): pid=17888 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir832804734/syzkaller.LBgua3/1388/file1/bus" dev="loop1" ino=456 res=1 errno=0 [ 1476.338423][ T28] audit: type=1804 audit(1600744615.731:2116): pid=17888 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir832804734/syzkaller.LBgua3/1388/file1/bus" dev="loop1" ino=456 res=1 errno=0 03:16:58 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, 0xffffffffffffffff) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x0) ftruncate(r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r4 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r2, r3, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) 03:16:58 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(0xffffffffffffffff, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x0) ftruncate(r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r4 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r2, r3, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) 03:17:00 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x200000, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x34d100, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000080)=r1, 0x1) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xf8a, &(0x7f00000001c0)={0x0, 0x9366, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f00000000c0)) [ 1481.641327][ T28] audit: type=1804 audit(1600744621.201:2117): pid=17907 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1788/file1/bus" dev="loop5" ino=457 res=1 errno=0 [ 1481.790588][ T28] audit: type=1804 audit(1600744621.231:2118): pid=17907 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1788/file1/bus" dev="loop5" ino=457 res=1 errno=0 03:17:03 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(0xffffffffffffffff, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x0) ftruncate(r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r4 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r2, r3, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) 03:17:03 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 1485.524886][ T28] audit: type=1804 audit(1600744625.081:2119): pid=17924 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1789/file1/bus" dev="loop5" ino=458 res=1 errno=0 [ 1485.719964][ T28] audit: type=1804 audit(1600744625.081:2120): pid=17924 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1789/file1/bus" dev="loop5" ino=458 res=1 errno=0 03:17:07 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(0xffffffffffffffff, r1, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:17:07 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, r1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:17:07 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x8}, &(0x7f00000000c0)=0x90) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000240)) [ 1490.557374][ T28] audit: type=1804 audit(1600744630.111:2121): pid=17949 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1790/file1/bus" dev="sda1" ino=16776 res=1 errno=0 [ 1490.729386][ T28] audit: type=1804 audit(1600744630.111:2122): pid=17949 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1790/file1/bus" dev="sda1" ino=16776 res=1 errno=0 03:17:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, 0xffffffffffffffff) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x0) ftruncate(r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r4 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r2, r3, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) 03:17:13 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x1) r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) fcntl$setstatus(r0, 0x4, 0x64000) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x40600, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x408080, 0x0) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000280)={0x1, 0xa, [{r0, 0x0, 0xfffffffff0000000, 0x10000}, {r2, 0x0, 0xfffff000, 0xfffffffffffff000}, {r0, 0x0, 0x1000000, 0x1000}, {r3, 0x0, 0x1fffff000, 0xfffffffffffff000}, {r0, 0x0, 0x1000, 0x1000000000000}, {r0, 0x0, 0x10000, 0x4000}, {r0, 0x0, 0x8000, 0xfffff000}, {r0, 0x0, 0x0, 0xfffffffffffff000}, {r0, 0x0, 0x8000, 0xfffffffffffff000}, {r0, 0x0, 0xfffff000}]}) io_submit(r1, 0x6, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2703000000000009, 0x8003f00, 0x3, 0x1, 0x0, r0, &(0x7f0000000000), 0x3000}]) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00006d2000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:17:13 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(0xffffffffffffffff, r1, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 1494.179813][ T28] audit: type=1804 audit(1600744633.741:2123): pid=17959 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1378/file1/bus" dev="sda1" ino=16922 res=1 errno=0 [ 1494.377319][ T28] audit: type=1804 audit(1600744633.741:2124): pid=17959 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1378/file1/bus" dev="sda1" ino=16922 res=1 errno=0 [ 1496.563766][ T28] audit: type=1804 audit(1600744636.121:2125): pid=17977 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1791/file1/bus" dev="sda1" ino=16777 res=1 errno=0 [ 1496.704816][ T28] audit: type=1804 audit(1600744636.121:2126): pid=17978 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1791/file1/bus" dev="sda1" ino=16777 res=1 errno=0 03:17:17 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, r1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:17:17 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(0xffffffffffffffff, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x0) ftruncate(r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r4 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r2, r3, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) [ 1505.479689][ T28] audit: type=1804 audit(1600744645.041:2127): pid=18000 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1792/file1/bus" dev="loop5" ino=459 res=1 errno=0 [ 1505.621581][ T28] audit: type=1804 audit(1600744645.091:2128): pid=18000 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1792/file1/bus" dev="loop5" ino=459 res=1 errno=0 03:17:27 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, r1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:17:27 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(0xffffffffffffffff, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x0) ftruncate(r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r4 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r2, r3, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) 03:17:27 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, r1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:17:27 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x1) r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) fcntl$setstatus(r0, 0x4, 0x64000) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x40600, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x408080, 0x0) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000280)={0x1, 0xa, [{r0, 0x0, 0xfffffffff0000000, 0x10000}, {r2, 0x0, 0xfffff000, 0xfffffffffffff000}, {r0, 0x0, 0x1000000, 0x1000}, {r3, 0x0, 0x1fffff000, 0xfffffffffffff000}, {r0, 0x0, 0x1000, 0x1000000000000}, {r0, 0x0, 0x10000, 0x4000}, {r0, 0x0, 0x8000, 0xfffff000}, {r0, 0x0, 0x0, 0xfffffffffffff000}, {r0, 0x0, 0x8000, 0xfffffffffffff000}, {r0, 0x0, 0xfffff000}]}) io_submit(r1, 0x6, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2703000000000009, 0x8003f00, 0x3, 0x1, 0x0, r0, &(0x7f0000000000), 0x3000}]) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00006d2000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000240)) [ 1508.337254][ T28] audit: type=1804 audit(1600744647.891:2129): pid=18008 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1793/file1/bus" dev="sda1" ino=16951 res=1 errno=0 [ 1508.438008][ T28] audit: type=1804 audit(1600744647.891:2130): pid=18008 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1793/file1/bus" dev="sda1" ino=16951 res=1 errno=0 [ 1509.499882][ T28] audit: type=1804 audit(1600744649.061:2131): pid=18016 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir832804734/syzkaller.LBgua3/1391/file1/bus" dev="sda1" ino=16770 res=1 errno=0 [ 1509.611430][ T28] audit: type=1804 audit(1600744649.061:2132): pid=18016 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir832804734/syzkaller.LBgua3/1391/file1/bus" dev="sda1" ino=16770 res=1 errno=0 03:17:29 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, r1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:17:29 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x1) r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) fcntl$setstatus(r0, 0x4, 0x64000) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x40600, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x408080, 0x0) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000280)={0x1, 0xa, [{r0, 0x0, 0xfffffffff0000000, 0x10000}, {r2, 0x0, 0xfffff000, 0xfffffffffffff000}, {r0, 0x0, 0x1000000, 0x1000}, {r3, 0x0, 0x1fffff000, 0xfffffffffffff000}, {r0, 0x0, 0x1000, 0x1000000000000}, {r0, 0x0, 0x10000, 0x4000}, {r0, 0x0, 0x8000, 0xfffff000}, {r0, 0x0, 0x0, 0xfffffffffffff000}, {r0, 0x0, 0x8000, 0xfffffffffffff000}, {r0, 0x0, 0xfffff000}]}) io_submit(r1, 0x6, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2703000000000009, 0x8003f00, 0x3, 0x1, 0x0, r0, &(0x7f0000000000), 0x3000}]) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00006d2000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:17:30 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(0xffffffffffffffff, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x0) ftruncate(r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r4 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r2, r3, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) [ 1511.646898][ T28] audit: type=1804 audit(1600744651.201:2133): pid=18021 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1380/file1/bus" dev="sda1" ino=16968 res=1 errno=0 [ 1511.788354][ T28] audit: type=1804 audit(1600744651.201:2134): pid=18021 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1380/file1/bus" dev="sda1" ino=16968 res=1 errno=0 [ 1513.317540][ T28] audit: type=1804 audit(1600744652.871:2135): pid=18038 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1794/file1/bus" dev="sda1" ino=16844 res=1 errno=0 [ 1513.707720][ T28] audit: type=1804 audit(1600744653.261:2136): pid=18038 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1794/file1/bus" dev="sda1" ino=16844 res=1 errno=0 03:17:37 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, r1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:17:37 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x1) r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) fcntl$setstatus(r0, 0x4, 0x64000) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x40600, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x408080, 0x0) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000280)={0x1, 0xa, [{r0, 0x0, 0xfffffffff0000000, 0x10000}, {r2, 0x0, 0xfffff000, 0xfffffffffffff000}, {r0, 0x0, 0x1000000, 0x1000}, {r3, 0x0, 0x1fffff000, 0xfffffffffffff000}, {r0, 0x0, 0x1000, 0x1000000000000}, {r0, 0x0, 0x10000, 0x4000}, {r0, 0x0, 0x8000, 0xfffff000}, {r0, 0x0, 0x0, 0xfffffffffffff000}, {r0, 0x0, 0x8000, 0xfffffffffffff000}, {r0, 0x0, 0xfffff000}]}) io_submit(r1, 0x6, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2703000000000009, 0x8003f00, 0x3, 0x1, 0x0, r0, &(0x7f0000000000), 0x3000}]) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00006d2000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000240)) [ 1518.297761][ T28] audit: type=1804 audit(1600744657.851:2137): pid=18053 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1795/file1/bus" dev="sda1" ino=16989 res=1 errno=0 03:17:38 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) [ 1518.450264][ T28] audit: type=1804 audit(1600744657.851:2138): pid=18053 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1795/file1/bus" dev="sda1" ino=16989 res=1 errno=0 [ 1518.904202][ T28] audit: type=1804 audit(1600744658.461:2139): pid=18046 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir832804734/syzkaller.LBgua3/1392/bus" dev="sda1" ino=16998 res=1 errno=0 [ 1518.995111][ T28] audit: type=1804 audit(1600744658.461:2140): pid=18046 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir832804734/syzkaller.LBgua3/1392/bus" dev="sda1" ino=16998 res=1 errno=0 03:17:39 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, r1, 0x0, 0x0) 03:17:39 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x1) r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)) fcntl$setstatus(r0, 0x4, 0x64000) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x40600, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x408080, 0x0) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000280)={0x1, 0xa, [{r0, 0x0, 0xfffffffff0000000, 0x10000}, {r1, 0x0, 0xfffff000, 0xfffffffffffff000}, {r0, 0x0, 0x1000000, 0x1000}, {r2, 0x0, 0x1fffff000, 0xfffffffffffff000}, {r0, 0x0, 0x1000, 0x1000000000000}, {r0, 0x0, 0x10000, 0x4000}, {r0, 0x0, 0x8000, 0xfffff000}, {r0, 0x0, 0x0, 0xfffffffffffff000}, {r0, 0x0, 0x8000, 0xfffffffffffff000}, {r0, 0x0, 0xfffff000}]}) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00006d2000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:17:39 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(0xffffffffffffffff, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x0) ftruncate(r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r4 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r2, r3, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) [ 1521.401872][ T28] audit: type=1804 audit(1600744660.961:2141): pid=18069 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1381/file1/bus" dev="sda1" ino=17059 res=1 errno=0 [ 1521.548582][ T28] audit: type=1804 audit(1600744661.021:2142): pid=18069 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1381/file1/bus" dev="sda1" ino=17059 res=1 errno=0 [ 1521.699559][ T28] audit: type=1804 audit(1600744661.231:2143): pid=18074 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1796/bus" dev="sda1" ino=16898 res=1 errno=0 [ 1521.804175][ T28] audit: type=1804 audit(1600744661.231:2144): pid=18074 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1796/bus" dev="sda1" ino=16898 res=1 errno=0 03:17:44 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) 03:17:44 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, r1, 0x0, 0x0) 03:17:44 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x1) r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)) fcntl$setstatus(r0, 0x4, 0x64000) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x40600, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x408080, 0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00006d2000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000240)) [ 1525.109011][ T28] audit: type=1804 audit(1600744664.671:2145): pid=18091 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1797/file1/bus" dev="sda1" ino=17089 res=1 errno=0 [ 1525.328358][ T28] audit: type=1804 audit(1600744664.701:2146): pid=18091 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1797/file1/bus" dev="sda1" ino=17089 res=1 errno=0 03:17:45 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x1) r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)) fcntl$setstatus(r0, 0x4, 0x64000) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x40600, 0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00006d2000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:17:48 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) 03:17:48 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, r1, 0x0, 0x0) [ 1529.922120][ T28] audit: type=1804 audit(1600744669.481:2147): pid=18112 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1798/file1/bus" dev="sda1" ino=16955 res=1 errno=0 [ 1530.071537][ T28] audit: type=1804 audit(1600744669.571:2148): pid=18114 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1798/file1/bus" dev="sda1" ino=16955 res=1 errno=0 [ 1530.874068][ T28] audit: type=1804 audit(1600744670.431:2149): pid=18106 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir832804734/syzkaller.LBgua3/1393/file1/bus" dev="loop1" ino=460 res=1 errno=0 [ 1531.007167][ T28] audit: type=1804 audit(1600744670.431:2150): pid=18106 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir832804734/syzkaller.LBgua3/1393/file1/bus" dev="loop1" ino=460 res=1 errno=0 03:17:51 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x1) r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)) fcntl$setstatus(r0, 0x4, 0x64000) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x40600, 0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00006d2000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:17:51 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000040)=ANY=[], 0xffffff7d) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 1534.952141][ T28] audit: type=1804 audit(1600744674.511:2151): pid=18127 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1799/bus" dev="sda1" ino=16806 res=1 errno=0 [ 1535.121586][ T28] audit: type=1804 audit(1600744674.541:2152): pid=18127 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1799/bus" dev="sda1" ino=16806 res=1 errno=0 03:17:56 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000040)=ANY=[], 0xffffff7d) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:17:56 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, 0xffffffffffffffff) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x0) ftruncate(r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r4 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r2, r3, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) [ 1538.669006][ T28] audit: type=1804 audit(1600744678.231:2153): pid=18146 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1800/file1/bus" dev="sda1" ino=16896 res=1 errno=0 [ 1538.835093][ T28] audit: type=1804 audit(1600744678.251:2154): pid=18146 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1800/file1/bus" dev="sda1" ino=16896 res=1 errno=0 03:17:58 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x1) r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)) fcntl$setstatus(r0, 0x4, 0x64000) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x40600, 0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00006d2000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000240)) [ 1541.874000][ T28] audit: type=1804 audit(1600744681.431:2155): pid=18156 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir832804734/syzkaller.LBgua3/1394/file1/bus" dev="sda1" ino=16781 res=1 errno=0 [ 1541.999682][ T28] audit: type=1804 audit(1600744681.461:2156): pid=18156 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir832804734/syzkaller.LBgua3/1394/file1/bus" dev="sda1" ino=16781 res=1 errno=0 03:18:02 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x1) r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)) fcntl$setstatus(r0, 0x4, 0x64000) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00006d2000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:18:03 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000040)=ANY=[], 0xffffff7d) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:18:03 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000040)=ANY=[], 0xffffff7d) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:18:03 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x1) r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00006d2000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:18:03 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, 0xffffffffffffffff) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x0) ftruncate(r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r4 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r2, r3, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) [ 1544.612951][ T28] audit: type=1804 audit(1600744684.171:2157): pid=18171 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir832804734/syzkaller.LBgua3/1395/file1/bus" dev="loop1" ino=461 res=1 errno=0 [ 1544.766392][ T28] audit: type=1804 audit(1600744684.201:2158): pid=18171 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir832804734/syzkaller.LBgua3/1395/file1/bus" dev="loop1" ino=461 res=1 errno=0 [ 1544.950324][ T28] audit: type=1804 audit(1600744684.401:2159): pid=18166 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1801/file1/bus" dev="sda1" ino=16809 res=1 errno=0 [ 1545.119450][ T28] audit: type=1804 audit(1600744684.411:2160): pid=18166 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1801/file1/bus" dev="sda1" ino=16809 res=1 errno=0 03:18:06 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x1) r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00006d2000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000240)) [ 1548.665191][ T28] audit: type=1804 audit(1600744688.221:2161): pid=18190 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1384/bus" dev="sda1" ino=16794 res=1 errno=0 [ 1548.821097][ T28] audit: type=1804 audit(1600744688.271:2162): pid=18197 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir285114881/syzkaller.sR9GeS/1384/bus" dev="sda1" ino=16794 res=1 errno=0 03:18:08 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, r1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:18:08 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, 0xffffffffffffffff) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x0) ftruncate(r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r4 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r2, r3, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) [ 1549.792665][ T28] audit: type=1804 audit(1600744689.351:2163): pid=18208 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1802/file1/bus" dev="sda1" ino=16978 res=1 errno=0 03:18:09 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x1) r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00006d2000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000240)) [ 1552.736727][ T28] audit: type=1804 audit(1600744692.291:2164): pid=18220 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir832804734/syzkaller.LBgua3/1396/file1/bus" dev="loop1" ino=462 res=1 errno=0 03:18:10 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, r1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:18:09 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000040)=ANY=[], 0xffffff7d) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:18:12 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x1) r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00006d2000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:18:12 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x1) syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000240)) [ 1552.860885][ T28] audit: type=1804 audit(1600744692.361:2165): pid=18223 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir832804734/syzkaller.LBgua3/1396/file1/bus" dev="loop1" ino=462 res=1 errno=0 [ 1553.226664][ T28] audit: type=1804 audit(1600744692.451:2166): pid=18233 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1803/file1/bus" dev="sda1" ino=16981 res=1 errno=0 03:18:12 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, r1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 1553.767671][ T28] audit: type=1804 audit(1600744693.321:2167): pid=18246 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir092088519/syzkaller.YRGVHH/1804/file1/bus" dev="sda1" ino=17061 res=1 errno=0 03:18:13 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x1) syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:18:13 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:18:15 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x0) ftruncate(r3, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) 03:18:16 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000240)) [ 1559.733626][ T28] audit: type=1804 audit(1600744699.291:2168): pid=18275 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir832804734/syzkaller.LBgua3/1397/bus" dev="sda1" ino=16837 res=1 errno=0 [ 1559.793793][ T28] audit: type=1804 audit(1600744699.321:2169): pid=18275 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir832804734/syzkaller.LBgua3/1397/bus" dev="sda1" ino=16837 res=1 errno=0 03:18:17 executing program 0: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x1) r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)) fcntl$setstatus(r0, 0x4, 0x64000) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x40600, 0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00006d2000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:18:19 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:18:20 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:18:25 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:18:25 executing program 0: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x1) r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)) fcntl$setstatus(r0, 0x4, 0x64000) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x40600, 0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00006d2000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:18:26 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x0) ftruncate(r3, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) 03:18:26 executing program 4: exit_group(0x1) syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:18:26 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 1568.043010][ T28] audit: type=1804 audit(1600744707.601:2170): pid=18321 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir832804734/syzkaller.LBgua3/1398/bus" dev="sda1" ino=16723 res=1 errno=0 [ 1568.198801][ T28] audit: type=1804 audit(1600744707.601:2171): pid=18322 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir832804734/syzkaller.LBgua3/1398/bus" dev="sda1" ino=16723 res=1 errno=0 03:18:29 executing program 4: exit_group(0x1) syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:18:29 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:18:30 executing program 4: exit_group(0x1) syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:18:30 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) r1 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:18:31 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x0) ftruncate(r3, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) 03:18:34 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x1) syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:18:35 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) r1 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 1577.257660][ T28] audit: type=1804 audit(1600744716.811:2172): pid=18363 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir832804734/syzkaller.LBgua3/1399/file1/bus" dev="sda1" ino=16984 res=1 errno=0 [ 1577.405225][ T28] audit: type=1804 audit(1600744716.811:2173): pid=18363 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir832804734/syzkaller.LBgua3/1399/file1/bus" dev="sda1" ino=16984 res=1 errno=0 03:18:40 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x1) syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:18:41 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:18:41 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) r1 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:18:41 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', 0x0, 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x0) ftruncate(r3, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) 03:18:43 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x1) syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000240)) [ 1584.800381][ T28] audit: type=1804 audit(1600744724.361:2174): pid=18391 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir832804734/syzkaller.LBgua3/1400/bus" dev="sda1" ino=16933 res=1 errno=0 [ 1584.923040][ T28] audit: type=1804 audit(1600744724.361:2175): pid=18391 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir832804734/syzkaller.LBgua3/1400/bus" dev="sda1" ino=16933 res=1 errno=0 03:18:46 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:18:46 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:18:46 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0xd8a, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:18:52 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:18:52 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', 0x0, 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x0) ftruncate(r3, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) [ 1597.186963][ T28] audit: type=1804 audit(1600744736.741:2176): pid=18433 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir832804734/syzkaller.LBgua3/1401/bus" dev="sda1" ino=16792 res=1 errno=0 [ 1597.979150][ T28] audit: type=1804 audit(1600744737.541:2177): pid=18436 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir832804734/syzkaller.LBgua3/1401/bus" dev="sda1" ino=16792 res=1 errno=0 03:18:57 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:18:57 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:18:57 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:19:01 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', 0x0, 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x0) ftruncate(r3, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) 03:19:01 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6900) ftruncate(0xffffffffffffffff, 0x800) r0 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:19:01 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:19:02 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f00006d2000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000240)) 03:19:02 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:19:05 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6900) ftruncate(0xffffffffffffffff, 0x800) r0 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000040)=ANY=[], 0xffffff7d) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 1606.019693][ T5073] ================================================================== [ 1606.027825][ T5073] BUG: KCSAN: data-race in dentry_lru_isolate / link_path_walk [ 1606.035345][ T5073] [ 1606.037660][ T5073] write to 0xffff888125a60240 of 4 bytes by task 18466 on cpu 1: [ 1606.045357][ T5073] dentry_lru_isolate+0x9f/0x200 [ 1606.050280][ T5073] __list_lru_walk_one+0xfb/0x320 [ 1606.055285][ T5073] list_lru_walk_one+0x75/0x90 [ 1606.060035][ T5073] prune_dcache_sb+0x67/0xa0 [ 1606.064618][ T5073] super_cache_scan+0x23b/0x2d0 [ 1606.069459][ T5073] do_shrink_slab+0x286/0x5c0 [ 1606.074129][ T5073] shrink_slab+0xea/0x1c0 [ 1606.078447][ T5073] shrink_node_memcgs+0x270/0x410 [ 1606.083464][ T5073] shrink_node+0x9ed/0x1230 [ 1606.087954][ T5073] shrink_zones+0x2af/0x490 [ 1606.092440][ T5073] do_try_to_free_pages+0x193/0x6e0 [ 1606.097619][ T5073] try_to_free_pages+0x38e/0x8b0 [ 1606.102559][ T5073] __alloc_pages_slowpath+0x55f/0x9e0 [ 1606.107932][ T5073] __alloc_pages_nodemask+0x266/0x380 [ 1606.113304][ T5073] alloc_pages_vma+0x3e6/0x890 [ 1606.118053][ T5073] shmem_alloc_and_acct_page+0x2ba/0x650 [ 1606.123666][ T5073] shmem_getpage_gfp+0x669/0x19c0 [ 1606.128696][ T5073] shmem_write_begin+0x83/0x100 [ 1606.133541][ T5073] generic_perform_write+0x196/0x390 [ 1606.138815][ T5073] __generic_file_write_iter+0x154/0x330 [ 1606.144454][ T5073] generic_file_write_iter+0x2f3/0x3e0 [ 1606.149919][ T5073] vfs_write+0x665/0x6f0 [ 1606.154153][ T5073] ksys_write+0xce/0x180 [ 1606.158391][ T5073] __x64_sys_write+0x3e/0x50 [ 1606.162995][ T5073] do_syscall_64+0x39/0x80 [ 1606.167411][ T5073] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1606.173350][ T5073] [ 1606.175671][ T5073] read to 0xffff888125a60240 of 4 bytes by task 5073 on cpu 0: [ 1606.183235][ T5073] link_path_walk+0x334/0x730 [ 1606.187912][ T5073] path_lookupat+0x7b/0x560 [ 1606.192448][ T5073] filename_lookup+0xf2/0x380 [ 1606.197128][ T5073] user_path_at_empty+0x3b/0x50 [ 1606.201989][ T5073] vfs_statx+0xb8/0x2b0 [ 1606.206143][ T5073] __se_sys_newlstat+0x46/0x250 [ 1606.210986][ T5073] __x64_sys_newlstat+0x2d/0x40 [ 1606.215859][ T5073] do_syscall_64+0x39/0x80 [ 1606.220280][ T5073] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1606.226156][ T5073] [ 1606.228502][ T5073] Reported by Kernel Concurrency Sanitizer on: [ 1606.234647][ T5073] CPU: 0 PID: 5073 Comm: systemd-udevd Not tainted 5.9.0-rc6-syzkaller #0 [ 1606.243137][ T5073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1606.253193][ T5073] ================================================================== [ 1606.261252][ T5073] Kernel panic - not syncing: panic_on_warn set ... [ 1606.267838][ T5073] CPU: 0 PID: 5073 Comm: systemd-udevd Not tainted 5.9.0-rc6-syzkaller #0 [ 1606.276341][ T5073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1606.286753][ T5073] Call Trace: [ 1606.290113][ T5073] dump_stack+0x10f/0x19d [ 1606.294436][ T5073] panic+0x207/0x64a [ 1606.298331][ T5073] ? vprintk_emit+0x44a/0x4f0 [ 1606.303064][ T5073] kcsan_report+0x684/0x690 [ 1606.307571][ T5073] ? kcsan_setup_watchpoint+0x41e/0x4a0 [ 1606.313167][ T5073] ? link_path_walk+0x334/0x730 [ 1606.318021][ T5073] ? path_lookupat+0x7b/0x560 [ 1606.322699][ T5073] ? filename_lookup+0xf2/0x380 [ 1606.327548][ T5073] ? user_path_at_empty+0x3b/0x50 [ 1606.332621][ T5073] ? vfs_statx+0xb8/0x2b0 [ 1606.336964][ T5073] ? __se_sys_newlstat+0x46/0x250 [ 1606.342004][ T5073] ? __x64_sys_newlstat+0x2d/0x40 [ 1606.347031][ T5073] ? do_syscall_64+0x39/0x80 [ 1606.351621][ T5073] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1606.357694][ T5073] ? dput+0x374/0x420 [ 1606.361677][ T5073] ? inode_permission+0xb2/0x330 [ 1606.366613][ T5073] ? inode_permission+0xb2/0x330 [ 1606.371557][ T5073] kcsan_setup_watchpoint+0x41e/0x4a0 [ 1606.376979][ T5073] ? inode_permission+0xb2/0x330 [ 1606.381928][ T5073] link_path_walk+0x334/0x730 [ 1606.386608][ T5073] path_lookupat+0x7b/0x560 [ 1606.391296][ T5073] filename_lookup+0xf2/0x380 [ 1606.396115][ T5073] ? strncpy_from_user+0x195/0x2e0 [ 1606.401466][ T5073] user_path_at_empty+0x3b/0x50 [ 1606.406348][ T5073] vfs_statx+0xb8/0x2b0 [ 1606.410507][ T5073] ? __seccomp_filter+0x4ce/0xe90 [ 1606.415533][ T5073] __se_sys_newlstat+0x46/0x250 [ 1606.420384][ T5073] ? __secure_computing+0x12e/0x1c0 [ 1606.425581][ T5073] ? syscall_trace_enter+0x145/0x2c0 [ 1606.430866][ T5073] ? fpregs_assert_state_consistent+0x7e/0x90 [ 1606.436941][ T5073] __x64_sys_newlstat+0x2d/0x40 [ 1606.441802][ T5073] do_syscall_64+0x39/0x80 [ 1606.446233][ T5073] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1606.452275][ T5073] RIP: 0033:0x7f3fdca27335 [ 1606.456702][ T5073] Code: 69 db 2b 00 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 83 ff 01 48 89 f0 77 30 48 89 c7 48 89 d6 b8 06 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 03 f3 c3 90 48 8b 15 31 db 2b 00 f7 d8 64 89 [ 1606.476606][ T5073] RSP: 002b:00007ffcff0d9878 EFLAGS: 00000246 ORIG_RAX: 0000000000000006 [ 1606.485025][ T5073] RAX: ffffffffffffffda RBX: 0000555d49d59650 RCX: 00007f3fdca27335 [ 1606.493002][ T5073] RDX: 00007ffcff0d98b0 RSI: 00007ffcff0d98b0 RDI: 0000555d49d58650 [ 1606.501097][ T5073] RBP: 00007ffcff0d9970 R08: 00007f3fdcce6178 R09: 0000000000001010 [ 1606.509144][ T5073] R10: 0000000000000020 R11: 0000000000000246 R12: 0000555d49d58650 [ 1606.517127][ T5073] R13: 0000555d49d5866a R14: 0000555d49d5f4a5 R15: 0000555d49d5f4aa [ 1606.526862][ T5073] Kernel Offset: disabled [ 1606.532054][ T5073] Rebooting in 86400 seconds..