[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 58.466692][ T26] audit: type=1800 audit(1572367169.644:25): pid=8587 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 58.486961][ T26] audit: type=1800 audit(1572367169.644:26): pid=8587 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 58.512999][ T26] audit: type=1800 audit(1572367169.644:27): pid=8587 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.227' (ECDSA) to the list of known hosts. 2019/10/29 16:39:40 fuzzer started 2019/10/29 16:39:41 dialing manager at 10.128.0.26:34715 2019/10/29 16:39:42 syscalls: 2541 2019/10/29 16:39:42 code coverage: enabled 2019/10/29 16:39:42 comparison tracing: enabled 2019/10/29 16:39:42 extra coverage: extra coverage is not supported by the kernel 2019/10/29 16:39:42 setuid sandbox: enabled 2019/10/29 16:39:42 namespace sandbox: enabled 2019/10/29 16:39:42 Android sandbox: /sys/fs/selinux/policy does not exist 2019/10/29 16:39:42 fault injection: enabled 2019/10/29 16:39:42 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/10/29 16:39:42 net packet injection: enabled 2019/10/29 16:39:42 net device setup: enabled 2019/10/29 16:39:42 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 16:41:54 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$ntfs(&(0x7f0000000340)='ntfs\x00', &(0x7f0000000400)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={[{@gid={'gid'}}]}) 16:41:55 executing program 1: r0 = semget$private(0x0, 0x0, 0x0) semop(r0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) eventfd2(0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x8000) semctl$SETALL(0x0, 0x0, 0x11, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) clock_gettime(0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='pids.current\x00', 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78e, 0x0, @perf_config_ext={0x10000}, 0x0, 0x0, 0x0, 0x0, 0x4126, 0x20000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r5, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000000)=""/105) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x9, &(0x7f0000000200)) syzkaller login: [ 203.831646][ T8755] IPVS: ftp: loaded support on port[0] = 21 [ 203.981286][ T8757] IPVS: ftp: loaded support on port[0] = 21 [ 203.991843][ T8755] chnl_net:caif_netlink_parms(): no params data found 16:41:55 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) semtimedop(0x0, &(0x7f0000000000)=[{}], 0x1, &(0x7f0000000080)={0x0, 0x989680}) [ 204.080716][ T8755] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.103041][ T8755] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.110778][ T8755] device bridge_slave_0 entered promiscuous mode [ 204.170854][ T8755] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.183926][ T8755] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.204165][ T8755] device bridge_slave_1 entered promiscuous mode [ 204.240038][ T8761] IPVS: ftp: loaded support on port[0] = 21 [ 204.262835][ T8755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.294692][ T8755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.330034][ T8757] chnl_net:caif_netlink_parms(): no params data found [ 204.381457][ T8755] team0: Port device team_slave_0 added [ 204.392118][ T8755] team0: Port device team_slave_1 added 16:41:55 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) times(0x0) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0xf642e7e) open(0x0, 0x200, 0x0) creat(&(0x7f0000000700)='./bus\x00', 0x0) [ 204.422056][ T8757] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.430520][ T8757] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.439619][ T8757] device bridge_slave_0 entered promiscuous mode [ 204.497319][ T8755] device hsr_slave_0 entered promiscuous mode [ 204.563291][ T8755] device hsr_slave_1 entered promiscuous mode [ 204.609571][ T8757] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.622714][ T8757] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.631091][ T8757] device bridge_slave_1 entered promiscuous mode [ 204.646270][ T8763] IPVS: ftp: loaded support on port[0] = 21 16:41:55 executing program 4: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) mount(&(0x7f0000000680)=ANY=[@ANYBLOB='/dev/md0'], &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='iso9660\x00', 0x0, 0x0) [ 204.739629][ T8757] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.777639][ T8757] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.821414][ T8761] chnl_net:caif_netlink_parms(): no params data found [ 204.848839][ T8755] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.856063][ T8755] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.863853][ T8755] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.870931][ T8755] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.936738][ T8757] team0: Port device team_slave_0 added [ 204.972057][ T8761] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.982438][ T8761] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.991944][ T8761] device bridge_slave_0 entered promiscuous mode [ 205.010197][ T8757] team0: Port device team_slave_1 added [ 205.027513][ T8766] IPVS: ftp: loaded support on port[0] = 21 16:41:56 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0800b5055e0bcfe87b2071") r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r1, 0x0, 0x1f, &(0x7f0000000080)=""/93, &(0x7f0000000100)=0x5d) [ 205.070318][ T8761] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.077939][ T8761] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.089001][ T8761] device bridge_slave_1 entered promiscuous mode [ 205.108694][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.119858][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.236827][ T8757] device hsr_slave_0 entered promiscuous mode [ 205.263220][ T8757] device hsr_slave_1 entered promiscuous mode [ 205.323129][ T8757] debugfs: Directory 'hsr0' with parent '/' already present! [ 205.348905][ T8761] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.364397][ T8761] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.373624][ T8763] chnl_net:caif_netlink_parms(): no params data found [ 205.385914][ T8770] IPVS: ftp: loaded support on port[0] = 21 [ 205.421626][ T8761] team0: Port device team_slave_0 added [ 205.446544][ T8761] team0: Port device team_slave_1 added [ 205.519286][ T8763] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.526511][ T8763] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.534768][ T8763] device bridge_slave_0 entered promiscuous mode [ 205.565200][ T8761] device hsr_slave_0 entered promiscuous mode [ 205.614223][ T8761] device hsr_slave_1 entered promiscuous mode [ 205.653098][ T8761] debugfs: Directory 'hsr0' with parent '/' already present! [ 205.672840][ T8763] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.680701][ T8763] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.688563][ T8763] device bridge_slave_1 entered promiscuous mode [ 205.716929][ T8755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.744510][ T8763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.758186][ T8763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.793194][ T8763] team0: Port device team_slave_0 added [ 205.800217][ T8763] team0: Port device team_slave_1 added [ 205.867847][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 205.879449][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 205.937086][ T8763] device hsr_slave_0 entered promiscuous mode [ 205.993392][ T8763] device hsr_slave_1 entered promiscuous mode [ 206.033088][ T8763] debugfs: Directory 'hsr0' with parent '/' already present! [ 206.071068][ T8755] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.080914][ T8770] chnl_net:caif_netlink_parms(): no params data found [ 206.117530][ T8766] chnl_net:caif_netlink_parms(): no params data found [ 206.168827][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 206.177882][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 206.186443][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.193538][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.240666][ T8757] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.249595][ T8770] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.257591][ T8770] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.265877][ T8770] device bridge_slave_0 entered promiscuous mode [ 206.275218][ T8770] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.282442][ T8770] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.290368][ T8770] device bridge_slave_1 entered promiscuous mode [ 206.298163][ T8766] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.305516][ T8766] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.313443][ T8766] device bridge_slave_0 entered promiscuous mode [ 206.331181][ T8757] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.341371][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 206.350434][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 206.358948][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.366000][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.374756][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 206.383166][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 206.406192][ T8770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.417008][ T8766] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.424598][ T8766] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.432298][ T8766] device bridge_slave_1 entered promiscuous mode [ 206.457448][ T8770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.477275][ T8767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 206.486416][ T8767] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 206.495040][ T8767] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.502068][ T8767] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.509680][ T8767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 206.518447][ T8767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 206.526942][ T8767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 206.535558][ T8767] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 206.544667][ T8767] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.551750][ T8767] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.559695][ T8767] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 206.579322][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 206.588417][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 206.615193][ T8770] team0: Port device team_slave_0 added [ 206.634745][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 206.642591][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 206.651363][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 206.660075][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 206.668459][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 206.677003][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 206.685687][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 206.706323][ T8770] team0: Port device team_slave_1 added [ 206.729342][ T8766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.743572][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 206.751407][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 206.759883][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 206.768478][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 206.777653][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 206.785820][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 206.794527][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 206.804692][ T8755] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 206.876527][ T8770] device hsr_slave_0 entered promiscuous mode [ 206.936468][ T8770] device hsr_slave_1 entered promiscuous mode [ 206.973203][ T8770] debugfs: Directory 'hsr0' with parent '/' already present! [ 206.983016][ T8766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.006953][ T8755] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.040707][ T8761] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.071149][ T8766] team0: Port device team_slave_0 added [ 207.080348][ T3532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 207.089315][ T3532] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 207.097746][ T3532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 207.106280][ T3532] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 207.118128][ T8757] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 207.134936][ T8761] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.149572][ T8766] team0: Port device team_slave_1 added [ 207.168126][ T8767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 207.180171][ T8767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 207.210261][ T8763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.244630][ T8767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 207.254445][ T8767] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 207.262741][ T8767] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.269835][ T8767] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.277709][ T8767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 207.286312][ T8767] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 207.295023][ T8767] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.302091][ T8767] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.309911][ T8767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 207.318392][ T8767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 207.327546][ T8767] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 207.389663][ T8766] device hsr_slave_0 entered promiscuous mode [ 207.419083][ T8782] __ntfs_error: 3 callbacks suppressed [ 207.419089][ T8782] ntfs: (device loop0): parse_options(): Unrecognized mount option . [ 207.453604][ T8766] device hsr_slave_1 entered promiscuous mode [ 207.505004][ T8766] debugfs: Directory 'hsr0' with parent '/' already present! [ 207.530989][ T8761] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 207.542026][ T8761] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 207.555482][ T2903] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 207.563627][ T2903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 207.571195][ T2903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 207.580990][ T2903] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 207.589453][ T2903] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 207.599484][ T2903] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 207.607922][ T2903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 207.616171][ T2903] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 207.624726][ T2903] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 207.633021][ T2903] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 207.641568][ T2903] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 207.649596][ T2903] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 207.659458][ T8763] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.697630][ T8757] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.715539][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 207.724511][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 207.737080][ T8787] ntfs: (device loop0): parse_options(): Unrecognized mount option . [ 207.750072][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.757287][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.771458][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 207.780092][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 207.788675][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.795775][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.803503][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready 16:41:59 executing program 0: [ 207.852716][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 207.874002][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 207.883947][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 207.892619][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 16:41:59 executing program 0: [ 207.916190][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 207.931330][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 207.953661][ T8767] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 207.978003][ T8763] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 207.997577][ T8763] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network 16:41:59 executing program 0: [ 208.033246][ T8761] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.045666][ T3532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 208.061269][ T3532] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 208.084257][ T3532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 208.092786][ T3532] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready 16:41:59 executing program 0: [ 208.171995][ T8763] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.198309][ T8774] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 208.258274][ T8770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.288385][ T8766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.302862][ T8809] devpts: called with bogus options [ 208.310005][ T3532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 208.318611][ T3532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 208.337749][ T8770] 8021q: adding VLAN 0 to HW filter on device team0 16:41:59 executing program 1: 16:41:59 executing program 0: [ 208.366684][ T8766] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.392754][ T8774] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 208.401728][ T8774] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 208.471520][ T3532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 208.490652][ T3532] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 208.511637][ T3532] bridge0: port 1(bridge_slave_0) entered blocking state 16:41:59 executing program 0: [ 208.518795][ T3532] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.533855][ T3532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 208.542611][ T3532] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 208.559209][ T3532] bridge0: port 2(bridge_slave_1) entered blocking state 16:41:59 executing program 1: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) [ 208.566345][ T3532] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.603324][ T3532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 208.626990][ T3532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 208.646769][ T3532] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 208.661665][ T3532] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.668807][ T3532] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.677135][ T3532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 208.685792][ T3532] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 208.694529][ T3532] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.701614][ T3532] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.709702][ T3532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 208.718593][ T3532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 208.757256][ T8774] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 208.771396][ T8774] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 208.786795][ T8774] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 208.797472][ T8774] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 208.806201][ T8774] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 208.815675][ T8774] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 208.824507][ T8774] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 208.835067][ T8774] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 208.849974][ T8774] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready 16:42:00 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3660, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=ANY=[@ANYBLOB="b800000019000100000006005b000000ff010000000000000000000000000001e000000100000000800000000000000000000000000000000a0001000000002e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000fbbccf810000000000000000fd85d16e79bad40ac3794899000000000000000000000000000000d94bfeadbfce0d4ed6f71b242b42000000ea0000000000000000000000000000000000000500000000000000000000000000000000000000e6010000000100000000002000"], 0xb8}}, 0x0) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) [ 208.873147][ T2903] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 208.896085][ T2903] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 208.939905][ T2903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 208.968773][ T2903] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 208.977532][ T2903] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready 16:42:00 executing program 3: sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(de#3_ede(\x00'}, 0x58) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 208.986108][ T2903] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 209.005333][ T8766] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 209.027605][ C1] hrtimer: interrupt took 38351 ns [ 209.057779][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 209.080567][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 209.126691][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 209.189127][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 209.229130][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 209.237691][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 209.291980][ T8770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.332390][ T8766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.631509][ T8865] isofs_fill_super: bread failed, dev=md0, iso_blknum=16, block=32 16:42:00 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3660, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=ANY=[@ANYBLOB="b800000019000100000006005b000000ff010000000000000000000000000001e000000100000000800000000000000000000000000000000a0001000000002e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000fbbccf810000000000000000fd85d16e79bad40ac3794899000000000000000000000000000000d94bfeadbfce0d4ed6f71b242b42000000ea0000000000000000000000000000000000000500000000000000000000000000000000000000e6010000000100000000002000"], 0xb8}}, 0x0) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) 16:42:00 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r1 = socket$kcm(0x29, 0x1000000000002, 0x0) sendmmsg$inet(r1, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)="b7", 0x140000}], 0x1, 0x0, 0x0, 0x3}, 0x3400}], 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x77359400}, {0x0, 0x989680}}, 0x0) tkill(r0, 0x1004000000015) 16:42:00 executing program 0: r0 = socket(0x18, 0x3, 0x0) setsockopt(r0, 0x1000000029, 0x33, 0x0, 0x0) 16:42:00 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) sched_setattr(0x0, 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) readv(r0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/234, 0xea}], 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0xee}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}}) syz_open_procfs(0x0, &(0x7f0000000200)='net/igmp\x00') connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x37ffff, @remote}, 0xffffffffffffff9a) mkdir(0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sysinfo(0x0) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f00000000c0)) 16:42:00 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000000)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee3, &(0x7f0000000140)={0x0, 0x1, 0x1, 0x0}) 16:42:00 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3660, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=ANY=[@ANYBLOB="b800000019000100000006005b000000ff010000000000000000000000000001e000000100000000800000000000000000000000000000000a0001000000002e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000fbbccf810000000000000000fd85d16e79bad40ac3794899000000000000000000000000000000d94bfeadbfce0d4ed6f71b242b42000000ea0000000000000000000000000000000000000500000000000000000000000000000000000000e6010000000100000000002000"], 0xb8}}, 0x0) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) [ 209.846509][ T8882] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 16:42:01 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x10, 0x0) 16:42:01 executing program 5: add_key$user(0x0, &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x1e, 0x2, 0x0) bind(r1, &(0x7f0000d80f80)=@generic={0x0, "0103000000000000000000080000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8400a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc126cb184a"}, 0x80) bind(0xffffffffffffffff, &(0x7f0000670000)=@generic={0x1e, "01fd000000000000000000000000fc00000005a10eb80c00000000800000002e0a53b232394a000000010000f800ffff0f82e52b0a669ae43a620170a00021f069ca021f6ff9dc1161e7068f358c00f9ecff1458d1ea03000030ffff000000090003b9e2ead200c577aeb81c90541d6d7c770ee590c8bcf70dc151eb1849"}, 0x80) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="020300030c0000000000002000000000020009004000000000412d1fbc000000030006000000f9180200ee00fbb70000d81458186fe8b90002000100000000000000030200044a7b030005000000000002000000e0003f0100000000fca0d971e9fd2bb4b88e524ae03e6521c84c1d7afa5cac81f30f16cd3ba77e4d5a8a682d271d4e0b57a07686d8cd335d8541ca148e882dc5bafceed2dedb06c1d95dfcc7e08e6dc8bbcceb36c8006a8f1f30d73c8bed605e80f0ffffffffffff868f4201d9aefb6a5bbb0b991d5869ba58b29657e9f52d253cd1763b5b63f2e3a903a61b5f356a92a7cf414929d5a711c5e5ecccac591c16810e2139361bf5d4c622e51838be0519213dd7c5877769c93cf9834d14f4380af8105ed77b8270ce92bc9abd2bd3845c66c70438e35226614ccab04740fefdb60db0f84751d920ff76f11409f13e2e917e04430baaae9183bdbc425a676e446d1c9d2e6bddb8a2bc0fc34b47c489da04495a9d14c81173b48e00fe958fb7f4cfb3611d43fc5a36461c2e6175f6f5a4b69482d0"], 0x60}}, 0x0) fchmod(r0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) exit(0x2) 16:42:01 executing program 1: open$dir(0x0, 0x0, 0x18) r0 = open(&(0x7f0000000300)='./file0\x00', 0x86842, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r2 = open$dir(0x0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) sendto$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x61e94af9a13dcba8, 0x0, 0x0) r3 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000900), 0x10) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000003a80)={{{@in=@broadcast, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4e24, 0x0, 0x4e21, 0x0, 0x2, 0x40, 0x80}, {0x0, 0x9, 0xfffffffffffff801, 0x0, 0x0, 0x101, 0x800, 0x8}, {0x800, 0x1, 0x9}, 0x80000000, 0x6e6bbb, 0x0, 0x0, 0x2}, {{@in6=@dev={0xfe, 0x80, [], 0x29}, 0x4d5, 0x3c}, 0xa, @in=@multicast2, 0x3505, 0x0, 0x2, 0x0, 0x0, 0x7fffffff, 0x7}}, 0xe8) ioctl$int_in(0xffffffffffffffff, 0x800000800c5012, 0x0) write$FUSE_LSEEK(r3, 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x10000) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x402800, 0x0) ioctl$KVM_GET_CLOCK(r5, 0x8030ae7c, &(0x7f0000000180)) write$9p(r0, &(0x7f0000000800)="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", 0x5f4) sendfile(r0, r1, 0x0, 0x10000) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000003a40)='/proc/capi/capi20ncci\x00', 0x240, 0x0) perf_event_open(&(0x7f00000039c0)={0x3, 0x70, 0x0, 0x40, 0x2, 0x3, 0x0, 0x4, 0x10000, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x33a, 0x3, @perf_bp={&(0x7f0000003980), 0x5}, 0x8, 0x9, 0xd488, 0x9, 0x0, 0x7, 0x81}, 0xffffffffffffffff, 0x0, r6, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000038c0)=[{{&(0x7f0000000340)=@pppol2tp={0x18, 0x1, {0x0, r7, {0x2, 0x4e21, @remote}, 0x2, 0x4, 0x0, 0x3}}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000003c0)="0aface892fc8caadfa31e02d3ce0e42d656563cc6bf3b360090220fbf14919bae39573dae28a44d71cfafa9edb6cb9f6254f82c9df8e1e1a066c47af4c5425e46beeb588d00c3fb5200c", 0x4a}, {&(0x7f0000000440)="474314544460ac583c9b02dcf00415c2e615a86cff327aaa48b59ba322e6c5bc075a2832eb38f6e36c666036ae8e2caae96d346427ba89f2598c7ca3a6395792fe7a52707125aa9d8959b5718b1ac3b29e8ec6972fb801945cd2fb259052ea6ad55c8a68c9cb99f0bf5dc7c2ecb194df8321fdfb14fa2938541274d6dc4894a53bde31262ba9a718e43410bf3740ce163fe8483f7d2b24491bd6d512dc9bbf72f90e1e10cb50068a3157f2b1ee8226f6c0709ae8dc5d8aa86950ba814b4ece84a070c053dd", 0xc5}, {&(0x7f0000000600)="69e5471910a6650dda50d3f9deaf3e1ed9ea84be15fab41404b23a0165602dbf93b788e3bd4fc59b0c2843daf5aaf15cd2e64f46227e88120dfab3a8a2eb707c8b252fc16901320b77da510c28aafeb0180772e9c7c58a1c6f127f9d6b12c67f1fc4f103af8b28c416aaab9c74e5c1afc24a9361202db219e96ae8d9c6ed3cc0517f08a843efc2879043ddd90a98f2c636a2d5b81b1688eb6b05aa3e943cbe38ede75de7cc1fb377f738cc0f5efec6963e43bfdd7ce31fab0d9a8d", 0xbb}], 0x3}}, {{&(0x7f00000006c0)=@rc={0x1f, {0xfc, 0x43, 0x65, 0x5, 0x3f, 0x2}, 0x1}, 0x80, &(0x7f0000002280)=[{&(0x7f0000000e00)="0c283040eb513f0f467cb4ae918177dfccfd69a952dd5c5e6ac9d4a8874a542ed10fc881cb41dc79dd1730f7cd475705ae762c1a3947382061a1973d13f0a53fb770f416f2647810750ac3b6d3362af5141145f551c3f6e1ecfe4d66947e0cd0fa1e3dc550cedc51ffa8cf7a073eced5d68e4ebe48ff069f142363b509cba598223ab6f12f61387ec6bc31d86e011372aa700fe706ed888b80cd92dbbbd11f6ab84854e233fd9e796d6ba98e081941ffb468296968f56d04822ed3215e3a40728a4c3f18e0285cbe4a8bdc9a53d22df3d749235d563efc2038e3c2cce8cd914cc1d1e3dd1f554f68d051", 0xea}, {&(0x7f0000000740)="17578ed9a49fcd73f5ee61e49238c50746ab2875533ecca3eefb2f7a553fe6451b9a3a67384d795cc12752ece13c27a89fa087aa1c03f4daa9d00d4cecf0ca69f8e43c0b2f9a70eb1cfb5dc42ce6b4983e07aae39a2ce7841e8e51300707a51863c49f1e66af13efdce837266fbed7ba86702c5a743e0488084c", 0x7a}, {&(0x7f00000007c0)="c3e972bdc1e7c5a40f9a97361e23737e31e18701f27678c1fecb496d2fc70915556f2de41cb1c0cc39670937d421468b474e478080b1ddbd378e06cb", 0x3c}, {&(0x7f0000000f00)}, {&(0x7f0000001f00)="3938a24af1b679fe7b7242e544c8510d51040e1331f23c66471780724cbdcaa20d5734d4ac2be9d1e55956b05411a64fb4228784ce474edf", 0x38}, {&(0x7f0000001f40)="338679cd57e44e31ed379994acaf698f428fce4d6a398c45e28495d62380bd17eb6bfbda498b37b0950f7a84e49f363832982d601da0e5659802bc28661f9273370297740ef7dc72e6d3408c3a978cc0e3c1eb01e850be3b5fc52a383d959271e41d5a9421fd76a8b38786a25b0c15626cb735db8ffe0f53ee530003ccda423b941756adf98d1d48be1f4852e54200d34b31dd5dbc0851a71b7fbd55640b69ebc7a8b5e3bfb728421ad399ed6ec0e3714d55a127849307e23eff2e27040ac324a143d39a3c9762bc521aeed18326a3c9f330c49e0187c389d3891bba16b42ba0364f1f2f9897ae75fb892f88c3854042", 0xf0}, {&(0x7f0000002140)="6e63411268ead1d02d5f0b06078fb921c6bbbff01649ded599f1918c375d08b11e3a9f4f22fa9c3c1e637f2c50a42ff6bc04c6bd50389d1b4342c51ecd39f4d4738ec81e9689355248cebf413d49", 0x4e}, {&(0x7f00000021c0)="4a820f031b79e8c2c9fe31075cc156b314974a8306b71de89a0c8466780875ec0fc065dc37137d17c9a0a14a06654f4e2b3a6e95338a93f00b7bac7ffb803aebc6d89cf0f361e37f4ff9b3d7f12a638edc57511cd63f14a3a5ec43298ec326915ded35eb3b95568bb20f3c54d0845acacc4e753f161aae2a816fd814935448982879cd210e5a289078cd5f826822527284d46cb77c1834", 0x97}], 0x8, &(0x7f0000002340)=[{0x1010, 0x110, 0x9, "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"}, {0x68, 0x29, 0x0, "8cf7f295819ce60e8e9ff2c6f455a4ec58558a989cedde92d82937fea2b7865ba592c1161bb7d870efcc11ae4e47f35fe3f9969c40615b63ed6bc339cebb7e0a409281ca3ce4848a0f521cfe6515a6b5a6cb1ec4"}], 0x1078}}, {{0x0, 0x0, &(0x7f0000003480)=[{&(0x7f00000033c0)="f7d740e2c9bc32aa730b7765362c1e29c1c37c695de7e45d51b33869d44bf1adb2c1678de9decd2addbe37403716f6852e90d0ccdf74532dc5febe09a5a226fe605084e23d155cd028897c6d5ddf0b54fc500db26c52b8f69c446d888b9a68548f5dd9c6696d53dfc291ade44555171674b50d22411dd25308bb5e88606e7ea3ec69ca4d576bb7bf341410da2b2737b3778ffb8a", 0x94}], 0x1, &(0x7f00000034c0)=[{0x108, 0x101, 0x3, "e9f56ca20b13d0b72c5ef97cb8ad4e2eed74e56582364158944219dd449393464300db5ee4c65d2a95f2578fdc7c2fa205442e56fe47b9bfcb9976f80573a0c74cbb8d1a701dfcd84cb79284b6c9630e63d3ce6afa674fd5890ed487712641579edd308be2e70d6ca4f115b9ebdb1d0749a786a8f27de7f312f2aff7658faeb3f1096a1bf4e8be7c72a56092ad20101f0b63eff3c25e650fd4346dc6628e433a3058af1bd5f040fa2035e0d6ae296c58ddaf50e2a83276e6644c475a3a704f87ae8d8046df3f7328ec815c03838fdbdfee12ce8d3507ba4ceda86b343368f5ba044a97968562d16decd729512f4a12d298246d5fcc90"}, {0xd8, 0x104, 0x9, "3c5fc46bcb263933ec18f8d1bf0bd1c45c5ae92a2d0047c90344b144fab8172825f6d87df2683d0748ad3474cdc99effd1ba28912dfedd224220d25eaf446444eac96894ff29b6f218d0052d83e87043e3e6bd3ab935e74449a64bad5687e53fb6d73d23f6f15ae45625f4e3161019084cf3811de33771a50891cfa89214131baa002de14e853ffd0fcaca20e731a05c0239fccafeed7e5bbcd400c38018e44aeec6e2f93354e0304cb9b8f7d5b4aa42a046fe64c2a00e049fd73f40b942204499c0"}, {0x78, 0x119, 0x4c, "32130418eb682a3c9026615656a7f530429c477cfcac5b60e578832ee0822ab996868bd02a0beab227d02cf67ccb782daa63577b6282bb9db87398bf24cd91e4eb19d0efcb1724c2c37ea075a4933a149a2e9e23c4567e0cc3d877e889075c102ccc35"}, {0x18, 0x100, 0x0, "a2f271b608c91e11"}, {0x90, 0x11, 0x1, "4a3d58cbdef9dfa881e245df5a384f89c84d8aec14a34222035aa4b5d2b39c3cbf5a3849ef276f023976a9575c08275266e3416207976021ac24c1b61860d8572c2807450b9786c2d09387f8ec188f536de7fac5cb124f58b68de326471ebd30dc618229693e2141291e160c491fd1d1e14bcf0cb3f6b5912a1cd64a"}, {0xd0, 0xc934bd6cbc290cea, 0x4, "e7032717231c6f33df51e9b903cbc1e803c805504eff366fbe0ac070b9adf1f443106ef4c6de3aecfffb2aad48050ccc2bf5e5868813a75d0ab532841cbfe01a5e3ee06b9aa75035aa5697eaaffffc78272215f489416db1f95d3858b081e31cbd6f51cb3016cddebd5821b35dd08e233ded05444f2c367dde24320886b821a3dce85f25f85304e04871778cb8f6f2b0688cb3093bb4227ab6c89553f05855871cbc72cddbc98b192f28983f929c5ce3d00215a8281631b87f65c163a5286abe"}], 0x3d0}}], 0x3, 0x4000) 16:42:01 executing program 3: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x12e) write$UHID_CREATE2(r0, &(0x7f0000000440)={0xb, 'syz0\x00', 'syz0\x00', 'syz1\x00'}, 0x118) [ 210.263125][ T26] audit: type=1800 audit(1572367321.434:31): pid=8900 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=16545 res=0 16:42:01 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x1ee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) close(r0) [ 210.433027][ T26] audit: type=1804 audit(1572367321.474:32): pid=8902 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir996966594/syzkaller.HVYw7B/4/file0" dev="sda1" ino=16545 res=1 [ 210.543258][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 210.549470][ C0] protocol 88fb is buggy, dev hsr_slave_1 16:42:01 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x10, 0x0) [ 210.589289][ T8767] hid-generic 0000:0000:0000.0001: ignoring exceeding usage max [ 210.593176][ T26] audit: type=1804 audit(1572367321.694:33): pid=8900 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir996966594/syzkaller.HVYw7B/4/file0" dev="sda1" ino=16545 res=1 [ 210.680393][ T8767] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on sz1 16:42:01 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x201, 0x80081) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x5521, 0x0) 16:42:01 executing program 1: open$dir(0x0, 0x0, 0x18) r0 = open(&(0x7f0000000300)='./file0\x00', 0x86842, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r2 = open$dir(0x0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) sendto$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x61e94af9a13dcba8, 0x0, 0x0) r3 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000900), 0x10) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000003a80)={{{@in=@broadcast, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4e24, 0x0, 0x4e21, 0x0, 0x2, 0x40, 0x80}, {0x0, 0x9, 0xfffffffffffff801, 0x0, 0x0, 0x101, 0x800, 0x8}, {0x800, 0x1, 0x9}, 0x80000000, 0x6e6bbb, 0x0, 0x0, 0x2}, {{@in6=@dev={0xfe, 0x80, [], 0x29}, 0x4d5, 0x3c}, 0xa, @in=@multicast2, 0x3505, 0x0, 0x2, 0x0, 0x0, 0x7fffffff, 0x7}}, 0xe8) ioctl$int_in(0xffffffffffffffff, 0x800000800c5012, 0x0) write$FUSE_LSEEK(r3, 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x10000) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x402800, 0x0) ioctl$KVM_GET_CLOCK(r5, 0x8030ae7c, &(0x7f0000000180)) write$9p(r0, &(0x7f0000000800)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117acd43725fe17993634f1695dabd7f998cd55e9d5bd911e86aa7a4ad75a574bb9693dd6018b25d942a9544bca1ebb0e8d10c092cdcb85797673972099e4041aaf8d636f66cb1103ef2050ad28fabaed33d6927889d97f4b5ce0de71d3fd832980f4f088d0d824e20549b4bbd906ffa51ce9de54d779eb4de462faac20a3ab0ed9934373ca22cea5454f4c2a740cd461e39956bb5f98df2aebc60cf32623adbffbcc378fa7250b6a3fc863dadcf6d4f8b804bfe70f0796eee6218445dad2811dd6b540ff52efa2f167dd9c1b8b016268d37db430983fefc0645d20614c8df2eb0872c58e09664e672b0b6a9970fec199257e1c606ec3e364c66a0f4d258c74accd43b987c756d602fd8787fed3aa43fd8d84e9656d4a413fa9a423bc54b873583d6d497005e54712fafc71384988d80134fbf84f53fdd74b354848006b8b5b67e7cc5a472475d3ae545ca1fcf7628b873e31ba83a98a7ad5b0cfbe9711b517a9a1388ad0efa2a3b4e22152021d631b731e2e100a9831111db7acce948bb5deeea260463c140ac929e77c58402776caf85d4569a75dde2f64c4491508afb541ed9b2c81fc95c06706235f383e31cf662c95b1e49cfd94871e22720a41535756e419b271276941692bd023dd9ca8bec4f7db1e5c00d8b3be7b8e826a6aadd001edd0dfeb00f8048442b5c48456fd642e629dcb2ff55592665ff491cd832672ce4d999da186db2c3a1f8b6b1f7d3750d7cdb3097954e6e14fb2183ad662c63d4ce8b82dc2487f0fe2ea2827b53a7c6dcced878d2fb29c1d3ff583570e7bc172d1a5c716e0447cb08ce3c468ffdf975da372f3f3eb455aaf5822bc04a51b6cad24a2331369df81c123b009a2381b42e9aeb077f621608d81c12a5f5c6c295d74afd4dd5c051296be0b54c70bf899b347c36bff62f313079983409d7f9cf1242c917985c1b5d0736fe21f8514f63d0369a374c42da40bd5140bc3e602d00c3cb4f8e621863ab47422778d67d72de34753fd72cef80649a1548e4e8dcbcffe4054cc9d8a1f922623a75904cbdaacde768131e587269a4a99d82f7009c1b8ab79aa232a2fd45ad71b60fca627576b31e5fa6a87525884b08d721a21400fb1f950b96ead82f408cc4388d3b78fb456616429a520656d5e5a876fd04748498902c86f58d45f4c1b3919eb846a00edf07e7a830bf723e4774f085f15534dd3b5246c0c0970b5ad7bb39b30b156a9430378c5b0aab1261c78d72ac301cd552d5e8dd4b642ec1dc0672745d593bb26d095b5b23576e3cfd6ab580f6e09419d0f0c64250fafaa3759aa1888da48d89c3f7c9454b0b3d0ab40445f5bed4493ef43ab08f31b1345ac4ffd94ad79c9eee53904ed6f572817153190d2e6863f2e39356bb99926419fd314341a536b7e76cae60bf7750a4c29e3f4c7f005530b1d4ee0e25b93b76fcc1108222f0b00de52cf4100e97adfd7b9db1370586ba27e1e183299be00d0df8439c380edf2f79deb441eac59b814b04accdff5e17f02046139f91f0332661676ff506e575f0cb2850bcc9f8666f6d1f69f8f4271cb804a79fccd7016f049d1a494c46a527c437fa0be6d51ec7543d9bd7a2f016194ebe3c99080a6c9b5119863dfe865f8e60cae29f50b67dbfaa0a3c9794d73034485ca1613344c572783db3dfab01b28089c51cda99cefa4c1c881a29e229f04c7e0fd04dc425ae8417852e6e31520c6207e9d4e35285feef2a2cb8a3bceb08a166fa4284a516362621e2c06731a442791f1db063a32cf1f005c914102c7273cb4d7ab1bf567d72f230783d2ea99c43a60e8729132441ee6c5362c33f9b613f84417c3c5549f4e3d9e73c6f83f16c8e57ae22fe5f54515e111fe43ad7c400d214281452bb6141cecad84b23a695f061988d906d03be5d89584634b9e9d9a9b072f8e7cbb47c47719318a2001cafa665dd2c82672d16877ea115bd023fc1975f7c59664bfb06f66a1a5e3f05cb283fb45ea67a2727ee6e10bf35b31fdd03d43ec67b753f6737e0d2f", 0x5f4) sendfile(r0, r1, 0x0, 0x10000) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000003a40)='/proc/capi/capi20ncci\x00', 0x240, 0x0) perf_event_open(&(0x7f00000039c0)={0x3, 0x70, 0x0, 0x40, 0x2, 0x3, 0x0, 0x4, 0x10000, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x33a, 0x3, @perf_bp={&(0x7f0000003980), 0x5}, 0x8, 0x9, 0xd488, 0x9, 0x0, 0x7, 0x81}, 0xffffffffffffffff, 0x0, r6, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000038c0)=[{{&(0x7f0000000340)=@pppol2tp={0x18, 0x1, {0x0, r7, {0x2, 0x4e21, @remote}, 0x2, 0x4, 0x0, 0x3}}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000003c0)="0aface892fc8caadfa31e02d3ce0e42d656563cc6bf3b360090220fbf14919bae39573dae28a44d71cfafa9edb6cb9f6254f82c9df8e1e1a066c47af4c5425e46beeb588d00c3fb5200c", 0x4a}, {&(0x7f0000000440)="474314544460ac583c9b02dcf00415c2e615a86cff327aaa48b59ba322e6c5bc075a2832eb38f6e36c666036ae8e2caae96d346427ba89f2598c7ca3a6395792fe7a52707125aa9d8959b5718b1ac3b29e8ec6972fb801945cd2fb259052ea6ad55c8a68c9cb99f0bf5dc7c2ecb194df8321fdfb14fa2938541274d6dc4894a53bde31262ba9a718e43410bf3740ce163fe8483f7d2b24491bd6d512dc9bbf72f90e1e10cb50068a3157f2b1ee8226f6c0709ae8dc5d8aa86950ba814b4ece84a070c053dd", 0xc5}, {&(0x7f0000000600)="69e5471910a6650dda50d3f9deaf3e1ed9ea84be15fab41404b23a0165602dbf93b788e3bd4fc59b0c2843daf5aaf15cd2e64f46227e88120dfab3a8a2eb707c8b252fc16901320b77da510c28aafeb0180772e9c7c58a1c6f127f9d6b12c67f1fc4f103af8b28c416aaab9c74e5c1afc24a9361202db219e96ae8d9c6ed3cc0517f08a843efc2879043ddd90a98f2c636a2d5b81b1688eb6b05aa3e943cbe38ede75de7cc1fb377f738cc0f5efec6963e43bfdd7ce31fab0d9a8d", 0xbb}], 0x3}}, {{&(0x7f00000006c0)=@rc={0x1f, {0xfc, 0x43, 0x65, 0x5, 0x3f, 0x2}, 0x1}, 0x80, &(0x7f0000002280)=[{&(0x7f0000000e00)="0c283040eb513f0f467cb4ae918177dfccfd69a952dd5c5e6ac9d4a8874a542ed10fc881cb41dc79dd1730f7cd475705ae762c1a3947382061a1973d13f0a53fb770f416f2647810750ac3b6d3362af5141145f551c3f6e1ecfe4d66947e0cd0fa1e3dc550cedc51ffa8cf7a073eced5d68e4ebe48ff069f142363b509cba598223ab6f12f61387ec6bc31d86e011372aa700fe706ed888b80cd92dbbbd11f6ab84854e233fd9e796d6ba98e081941ffb468296968f56d04822ed3215e3a40728a4c3f18e0285cbe4a8bdc9a53d22df3d749235d563efc2038e3c2cce8cd914cc1d1e3dd1f554f68d051", 0xea}, {&(0x7f0000000740)="17578ed9a49fcd73f5ee61e49238c50746ab2875533ecca3eefb2f7a553fe6451b9a3a67384d795cc12752ece13c27a89fa087aa1c03f4daa9d00d4cecf0ca69f8e43c0b2f9a70eb1cfb5dc42ce6b4983e07aae39a2ce7841e8e51300707a51863c49f1e66af13efdce837266fbed7ba86702c5a743e0488084c", 0x7a}, {&(0x7f00000007c0)="c3e972bdc1e7c5a40f9a97361e23737e31e18701f27678c1fecb496d2fc70915556f2de41cb1c0cc39670937d421468b474e478080b1ddbd378e06cb", 0x3c}, {&(0x7f0000000f00)}, {&(0x7f0000001f00)="3938a24af1b679fe7b7242e544c8510d51040e1331f23c66471780724cbdcaa20d5734d4ac2be9d1e55956b05411a64fb4228784ce474edf", 0x38}, {&(0x7f0000001f40)="338679cd57e44e31ed379994acaf698f428fce4d6a398c45e28495d62380bd17eb6bfbda498b37b0950f7a84e49f363832982d601da0e5659802bc28661f9273370297740ef7dc72e6d3408c3a978cc0e3c1eb01e850be3b5fc52a383d959271e41d5a9421fd76a8b38786a25b0c15626cb735db8ffe0f53ee530003ccda423b941756adf98d1d48be1f4852e54200d34b31dd5dbc0851a71b7fbd55640b69ebc7a8b5e3bfb728421ad399ed6ec0e3714d55a127849307e23eff2e27040ac324a143d39a3c9762bc521aeed18326a3c9f330c49e0187c389d3891bba16b42ba0364f1f2f9897ae75fb892f88c3854042", 0xf0}, {&(0x7f0000002140)="6e63411268ead1d02d5f0b06078fb921c6bbbff01649ded599f1918c375d08b11e3a9f4f22fa9c3c1e637f2c50a42ff6bc04c6bd50389d1b4342c51ecd39f4d4738ec81e9689355248cebf413d49", 0x4e}, {&(0x7f00000021c0)="4a820f031b79e8c2c9fe31075cc156b314974a8306b71de89a0c8466780875ec0fc065dc37137d17c9a0a14a06654f4e2b3a6e95338a93f00b7bac7ffb803aebc6d89cf0f361e37f4ff9b3d7f12a638edc57511cd63f14a3a5ec43298ec326915ded35eb3b95568bb20f3c54d0845acacc4e753f161aae2a816fd814935448982879cd210e5a289078cd5f826822527284d46cb77c1834", 0x97}], 0x8, &(0x7f0000002340)=[{0x1010, 0x110, 0x9, "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"}, {0x68, 0x29, 0x0, "8cf7f295819ce60e8e9ff2c6f455a4ec58558a989cedde92d82937fea2b7865ba592c1161bb7d870efcc11ae4e47f35fe3f9969c40615b63ed6bc339cebb7e0a409281ca3ce4848a0f521cfe6515a6b5a6cb1ec4"}], 0x1078}}, {{0x0, 0x0, &(0x7f0000003480)=[{&(0x7f00000033c0)="f7d740e2c9bc32aa730b7765362c1e29c1c37c695de7e45d51b33869d44bf1adb2c1678de9decd2addbe37403716f6852e90d0ccdf74532dc5febe09a5a226fe605084e23d155cd028897c6d5ddf0b54fc500db26c52b8f69c446d888b9a68548f5dd9c6696d53dfc291ade44555171674b50d22411dd25308bb5e88606e7ea3ec69ca4d576bb7bf341410da2b2737b3778ffb8a", 0x94}], 0x1, &(0x7f00000034c0)=[{0x108, 0x101, 0x3, "e9f56ca20b13d0b72c5ef97cb8ad4e2eed74e56582364158944219dd449393464300db5ee4c65d2a95f2578fdc7c2fa205442e56fe47b9bfcb9976f80573a0c74cbb8d1a701dfcd84cb79284b6c9630e63d3ce6afa674fd5890ed487712641579edd308be2e70d6ca4f115b9ebdb1d0749a786a8f27de7f312f2aff7658faeb3f1096a1bf4e8be7c72a56092ad20101f0b63eff3c25e650fd4346dc6628e433a3058af1bd5f040fa2035e0d6ae296c58ddaf50e2a83276e6644c475a3a704f87ae8d8046df3f7328ec815c03838fdbdfee12ce8d3507ba4ceda86b343368f5ba044a97968562d16decd729512f4a12d298246d5fcc90"}, {0xd8, 0x104, 0x9, "3c5fc46bcb263933ec18f8d1bf0bd1c45c5ae92a2d0047c90344b144fab8172825f6d87df2683d0748ad3474cdc99effd1ba28912dfedd224220d25eaf446444eac96894ff29b6f218d0052d83e87043e3e6bd3ab935e74449a64bad5687e53fb6d73d23f6f15ae45625f4e3161019084cf3811de33771a50891cfa89214131baa002de14e853ffd0fcaca20e731a05c0239fccafeed7e5bbcd400c38018e44aeec6e2f93354e0304cb9b8f7d5b4aa42a046fe64c2a00e049fd73f40b942204499c0"}, {0x78, 0x119, 0x4c, "32130418eb682a3c9026615656a7f530429c477cfcac5b60e578832ee0822ab996868bd02a0beab227d02cf67ccb782daa63577b6282bb9db87398bf24cd91e4eb19d0efcb1724c2c37ea075a4933a149a2e9e23c4567e0cc3d877e889075c102ccc35"}, {0x18, 0x100, 0x0, "a2f271b608c91e11"}, {0x90, 0x11, 0x1, "4a3d58cbdef9dfa881e245df5a384f89c84d8aec14a34222035aa4b5d2b39c3cbf5a3849ef276f023976a9575c08275266e3416207976021ac24c1b61860d8572c2807450b9786c2d09387f8ec188f536de7fac5cb124f58b68de326471ebd30dc618229693e2141291e160c491fd1d1e14bcf0cb3f6b5912a1cd64a"}, {0xd0, 0xc934bd6cbc290cea, 0x4, "e7032717231c6f33df51e9b903cbc1e803c805504eff366fbe0ac070b9adf1f443106ef4c6de3aecfffb2aad48050ccc2bf5e5868813a75d0ab532841cbfe01a5e3ee06b9aa75035aa5697eaaffffc78272215f489416db1f95d3858b081e31cbd6f51cb3016cddebd5821b35dd08e233ded05444f2c367dde24320886b821a3dce85f25f85304e04871778cb8f6f2b0688cb3093bb4227ab6c89553f05855871cbc72cddbc98b192f28983f929c5ce3d00215a8281631b87f65c163a5286abe"}], 0x3d0}}], 0x3, 0x4000) 16:42:01 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3660, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=ANY=[@ANYBLOB="b800000019000100000006005b000000ff010000000000000000000000000001e000000100000000800000000000000000000000000000000a0001000000002e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000fbbccf810000000000000000fd85d16e79bad40ac3794899000000000000000000000000000000d94bfeadbfce0d4ed6f71b242b42000000ea0000000000000000000000000000000000000500000000000000000000000000000000000000e6010000000100000000002000"], 0xb8}}, 0x0) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) 16:42:02 executing program 3: getpid() bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) open(&(0x7f0000000600)='./bus\x00', 0x0, 0x0) ioctl$CAPI_GET_FLAGS(0xffffffffffffffff, 0x80044323, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) dup(0xffffffffffffffff) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$P9_RWRITE(r0, 0x0, 0xfe5a) close(r0) [ 210.851551][ T26] audit: type=1800 audit(1572367322.024:34): pid=8919 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=16548 res=0 16:42:02 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8b0f, &(0x7f00000001c0)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x96\x00\x00\x00\x00\x00$\x00\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00l\x00\x00\x00\x00\x00\x00\x00\x00\x00s\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\xb1\xc4vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\r\xbe\x16%\xde\xa2o\xa9\\%\xc8\xfa\xd9t\xe5t\x9d\aj\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[c\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xfd\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0\xd8\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x99\x00'/399) 16:42:02 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x201, 0x80081) ioctl$USBDEVFS_CONTROL(r0, 0x41045508, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb2, 0x0, 0x0}) [ 210.976620][ T26] audit: type=1804 audit(1572367322.084:35): pid=8919 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir996966594/syzkaller.HVYw7B/5/file0" dev="sda1" ino=16548 res=1 16:42:02 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f0000000040), 0x0}, 0x20) 16:42:02 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xe, 0x4, 0x4, 0x1}, 0x279) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f0000000040), 0x0}, 0x20) 16:42:02 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'vet\x00\x00\x00\x00\x00D\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) lstat(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETGROUP(r1, 0x400454ce, r2) setgroups(0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'vet\x00\x00\x00\x00\x00D\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 16:42:02 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x4a98) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) open(0x0, 0x0, 0x0) 16:42:02 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x201, 0x80081) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000000)={0x0, 0x1, [{}]}) 16:42:02 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 16:42:02 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) statfs(&(0x7f00000000c0)='./file0\x00', 0x0) [ 211.466849][ T8950] vhci_hcd: invalid port number 0 16:42:02 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0xfffffddf, 0x0, 0x4}, 0x20) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) r2 = open(&(0x7f0000000600)='./bus\x00', 0x40042, 0x0) write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14}, 0x14) r3 = syz_open_dev$mice(0x0, 0x0, 0x8400) getsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, 0x0, 0x0) ioctl$CAPI_GET_FLAGS(r3, 0x80044323, &(0x7f0000000480)) socket$nl_generic(0x10, 0x3, 0x10) dup(0xffffffffffffffff) read$FUSE(r2, &(0x7f0000000640), 0x10000011b) write$P9_RWRITE(r1, 0x0, 0xfe5a) close(r1) [ 211.576494][ T8950] vhci_hcd: invalid port number 0 16:42:02 executing program 2: 16:42:02 executing program 4: 16:42:02 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x4a98) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) open(0x0, 0x0, 0x0) 16:42:03 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) statfs(&(0x7f00000000c0)='./file0\x00', 0x0) [ 211.788670][ T8971] vhci_hcd: invalid port number 0 16:42:03 executing program 4: 16:42:03 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x4a98) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) open(0x0, 0x0, 0x0) 16:42:03 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'vet\x00\x00\x00\x00\x00D\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) lstat(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETGROUP(r1, 0x400454ce, r2) setgroups(0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'vet\x00\x00\x00\x00\x00D\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 16:42:03 executing program 2: 16:42:03 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) open(&(0x7f0000000000)='./file0\x00', 0x82342, 0x0) [ 212.136527][ T8989] vhci_hcd: invalid port number 0 16:42:03 executing program 2: open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = socket(0xa, 0x2, 0x0) tee(r0, 0xffffffffffffffff, 0x5, 0x0) write$binfmt_elf64(r0, &(0x7f0000001d80)=ANY=[@ANYBLOB="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"], 0x877) r1 = open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") socket$inet_tcp(0x2, 0x1, 0x0) r3 = semget$private(0x0, 0x1, 0x0) semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f00000001c0)=""/23) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r4 = socket(0x400000000000010, 0x802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write(r4, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) getsockopt$inet_buf(r2, 0x0, 0x29, &(0x7f0000000200)=""/4096, &(0x7f0000001200)=0x1000) 16:42:03 executing program 4: [ 212.325590][ T26] audit: type=1804 audit(1572367323.504:36): pid=8999 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir823069651/syzkaller.QCw7sU/6/bus" dev="sda1" ino=16530 res=1 [ 212.432548][ T26] audit: type=1804 audit(1572367323.504:37): pid=8999 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir823069651/syzkaller.QCw7sU/6/bus" dev="sda1" ino=16530 res=1 [ 212.521890][ T26] audit: type=1804 audit(1572367323.634:38): pid=9005 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir823069651/syzkaller.QCw7sU/6/bus" dev="sda1" ino=16530 res=1 [ 212.553693][ T26] audit: type=1804 audit(1572367323.664:39): pid=9006 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir823069651/syzkaller.QCw7sU/6/bus" dev="sda1" ino=16530 res=1 [ 212.590574][ T26] audit: type=1800 audit(1572367323.684:40): pid=8999 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=16530 res=0 16:42:03 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0xfffffddf, 0x0, 0x4}, 0x20) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) r2 = open(&(0x7f0000000600)='./bus\x00', 0x40042, 0x0) write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14}, 0x14) r3 = syz_open_dev$mice(0x0, 0x0, 0x8400) getsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, 0x0, 0x0) ioctl$CAPI_GET_FLAGS(r3, 0x80044323, &(0x7f0000000480)) socket$nl_generic(0x10, 0x3, 0x10) dup(0xffffffffffffffff) read$FUSE(r2, &(0x7f0000000640), 0x10000011b) write$P9_RWRITE(r1, 0x0, 0xfe5a) close(r1) 16:42:03 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x4a98) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) open(0x0, 0x0, 0x0) 16:42:03 executing program 4: 16:42:03 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) statfs(&(0x7f00000000c0)='./file0\x00', 0x0) 16:42:03 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'vet\x00\x00\x00\x00\x00D\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) lstat(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETGROUP(r1, 0x400454ce, r2) setgroups(0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'vet\x00\x00\x00\x00\x00D\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 16:42:03 executing program 2: open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = socket(0xa, 0x2, 0x0) tee(r0, 0xffffffffffffffff, 0x5, 0x0) write$binfmt_elf64(r0, &(0x7f0000001d80)=ANY=[@ANYBLOB="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"], 0x877) r1 = open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") socket$inet_tcp(0x2, 0x1, 0x0) r3 = semget$private(0x0, 0x1, 0x0) semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f00000001c0)=""/23) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r4 = socket(0x400000000000010, 0x802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write(r4, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) getsockopt$inet_buf(r2, 0x0, 0x29, &(0x7f0000000200)=""/4096, &(0x7f0000001200)=0x1000) [ 212.654888][ T26] audit: type=1800 audit(1572367323.684:41): pid=9005 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=16530 res=0 16:42:03 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0xfffffddf, 0x0, 0x4}, 0x20) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) r2 = open(&(0x7f0000000600)='./bus\x00', 0x40042, 0x0) write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14}, 0x14) r3 = syz_open_dev$mice(0x0, 0x0, 0x8400) getsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, 0x0, 0x0) ioctl$CAPI_GET_FLAGS(r3, 0x80044323, &(0x7f0000000480)) socket$nl_generic(0x10, 0x3, 0x10) dup(0xffffffffffffffff) read$FUSE(r2, &(0x7f0000000640), 0x10000011b) write$P9_RWRITE(r1, 0x0, 0xfe5a) close(r1) [ 212.765042][ T9019] vhci_hcd: invalid port number 0 [ 212.785723][ T26] audit: type=1800 audit(1572367323.684:42): pid=9006 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=16530 res=0 16:42:04 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x4a98) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 16:42:04 executing program 2: open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = socket(0xa, 0x2, 0x0) tee(r0, 0xffffffffffffffff, 0x5, 0x0) write$binfmt_elf64(r0, &(0x7f0000001d80)=ANY=[@ANYBLOB="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"], 0x877) r1 = open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") socket$inet_tcp(0x2, 0x1, 0x0) r3 = semget$private(0x0, 0x1, 0x0) semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f00000001c0)=""/23) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r4 = socket(0x400000000000010, 0x802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write(r4, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) getsockopt$inet_buf(r2, 0x0, 0x29, &(0x7f0000000200)=""/4096, &(0x7f0000001200)=0x1000) [ 212.869625][ T26] audit: type=1804 audit(1572367323.884:43): pid=9016 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir823069651/syzkaller.QCw7sU/7/bus" dev="sda1" ino=16539 res=1 16:42:04 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) statfs(&(0x7f00000000c0)='./file0\x00', 0x0) [ 213.010330][ T9035] vhci_hcd: invalid port number 0 [ 213.018715][ T26] audit: type=1804 audit(1572367323.894:44): pid=9016 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir823069651/syzkaller.QCw7sU/7/bus" dev="sda1" ino=16539 res=1 16:42:04 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x4a98) [ 213.075375][ T26] audit: type=1804 audit(1572367324.184:45): pid=9034 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir823069651/syzkaller.QCw7sU/8/bus" dev="sda1" ino=16560 res=1 16:42:04 executing program 2: open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = socket(0xa, 0x2, 0x0) tee(r0, 0xffffffffffffffff, 0x5, 0x0) write$binfmt_elf64(r0, &(0x7f0000001d80)=ANY=[@ANYBLOB="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"], 0x877) r1 = open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") socket$inet_tcp(0x2, 0x1, 0x0) r3 = semget$private(0x0, 0x1, 0x0) semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f00000001c0)=""/23) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r4 = socket(0x400000000000010, 0x802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write(r4, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) getsockopt$inet_buf(r2, 0x0, 0x29, &(0x7f0000000200)=""/4096, &(0x7f0000001200)=0x1000) [ 213.120982][ T26] audit: type=1804 audit(1572367324.184:46): pid=9034 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir823069651/syzkaller.QCw7sU/8/bus" dev="sda1" ino=16560 res=1 [ 213.198132][ T9038] vhci_hcd: invalid port number 0 16:42:04 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0xfffffddf, 0x0, 0x4}, 0x20) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) r2 = open(&(0x7f0000000600)='./bus\x00', 0x40042, 0x0) write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14}, 0x14) r3 = syz_open_dev$mice(0x0, 0x0, 0x8400) getsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, 0x0, 0x0) ioctl$CAPI_GET_FLAGS(r3, 0x80044323, &(0x7f0000000480)) socket$nl_generic(0x10, 0x3, 0x10) dup(0xffffffffffffffff) read$FUSE(r2, &(0x7f0000000640), 0x10000011b) write$P9_RWRITE(r1, 0x0, 0xfe5a) close(r1) 16:42:04 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 16:42:04 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) dup(r3) statfs(&(0x7f00000000c0)='./file0\x00', 0x0) 16:42:04 executing program 4: 16:42:04 executing program 2: open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = socket(0xa, 0x2, 0x0) tee(r0, 0xffffffffffffffff, 0x5, 0x0) write$binfmt_elf64(r0, &(0x7f0000001d80)=ANY=[@ANYBLOB="7f454c4600030302060000000000000006003e00030000002a00000000000000400000000000000002000000000000001f0000000000380002000900080004000500000002000000010000800000000000000000000000e0ff0f000000000000060000000000000001000000000000000500000000000000850e4ed7040000001f0000000200000000000000080000000000000007000000000000000200000000000000010000000000000081000000000000007196a2f6e71ce0ff521c98354ccd6a2679ca514061cc6b550b289405f7a21e2e3bb63eed7a97d71742c5c7b878b2878d713110cce79f116979cb192ba80f04275b484c3c9b9a8e1342f91f2db072df0e6c1ada0cab7bc66014dbaf1d1e089901b5f272bee74a6f725f5f05c50e3767d12df4864c628f424155d70c549d066bcd91c23cd43d3270058f45cb73cc3f50dd21323b9d1a2b060e170c3ecec40777d6a84860a8fc699752e158937ab6269c32bbc7caea7be9a7b016cb81d3fb758bce2a1413a6715f3500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba5db561705af6ad7f016abd006b0c61e3fda2a35e067d5f29c6de28214187eec75038cb7e2381aa09063116636223fd9df3500599abc05d213376362e"], 0x877) r1 = open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") socket$inet_tcp(0x2, 0x1, 0x0) r3 = semget$private(0x0, 0x1, 0x0) semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f00000001c0)=""/23) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) socket(0x400000000000010, 0x802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$inet_buf(r2, 0x0, 0x29, &(0x7f0000000200)=""/4096, &(0x7f0000001200)=0x1000) 16:42:04 executing program 0: 16:42:04 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 213.622151][ T9051] vhci_hcd: invalid port number 0 16:42:04 executing program 0: 16:42:04 executing program 2: open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = socket(0xa, 0x2, 0x0) tee(r0, 0xffffffffffffffff, 0x5, 0x0) write$binfmt_elf64(r0, &(0x7f0000001d80)=ANY=[@ANYBLOB="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"], 0x877) r1 = open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") socket$inet_tcp(0x2, 0x1, 0x0) r3 = semget$private(0x0, 0x1, 0x0) semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f00000001c0)=""/23) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) socket(0x400000000000010, 0x802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$inet_buf(r2, 0x0, 0x29, &(0x7f0000000200)=""/4096, &(0x7f0000001200)=0x1000) 16:42:04 executing program 4: 16:42:05 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) dup(r3) statfs(&(0x7f00000000c0)='./file0\x00', 0x0) 16:42:05 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 16:42:05 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0xfffffddf, 0x0, 0x4}, 0x20) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) r2 = open(&(0x7f0000000600)='./bus\x00', 0x40042, 0x0) write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14}, 0x14) r3 = syz_open_dev$mice(0x0, 0x0, 0x8400) getsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, 0x0, 0x0) ioctl$CAPI_GET_FLAGS(r3, 0x80044323, &(0x7f0000000480)) socket$nl_generic(0x10, 0x3, 0x10) dup(0xffffffffffffffff) read$FUSE(r2, &(0x7f0000000640), 0x10000011b) write$P9_RWRITE(r1, 0x0, 0xfe5a) close(r1) 16:42:05 executing program 0: 16:42:05 executing program 4: 16:42:05 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 16:42:05 executing program 2: open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = socket(0xa, 0x2, 0x0) tee(r0, 0xffffffffffffffff, 0x5, 0x0) write$binfmt_elf64(r0, &(0x7f0000001d80)=ANY=[@ANYBLOB="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"], 0x877) r1 = open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") socket$inet_tcp(0x2, 0x1, 0x0) r3 = semget$private(0x0, 0x1, 0x0) semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f00000001c0)=""/23) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) socket(0x400000000000010, 0x802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$inet_buf(r2, 0x0, 0x29, &(0x7f0000000200)=""/4096, &(0x7f0000001200)=0x1000) 16:42:05 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) dup(r3) statfs(&(0x7f00000000c0)='./file0\x00', 0x0) 16:42:05 executing program 4: 16:42:05 executing program 0: 16:42:05 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 16:42:05 executing program 2: open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = socket(0xa, 0x2, 0x0) tee(r0, 0xffffffffffffffff, 0x5, 0x0) write$binfmt_elf64(r0, &(0x7f0000001d80)=ANY=[@ANYBLOB="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"], 0x877) r1 = open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") socket$inet_tcp(0x2, 0x1, 0x0) r3 = semget$private(0x0, 0x1, 0x0) semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f00000001c0)=""/23) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r4 = socket(0x400000000000010, 0x802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r5) write(r4, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) getsockopt$inet_buf(r2, 0x0, 0x29, &(0x7f0000000200)=""/4096, &(0x7f0000001200)=0x1000) 16:42:05 executing program 4: 16:42:05 executing program 0: 16:42:06 executing program 5: syz_open_procfs(0x0, 0x0) clone(0x4000000000003fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$dspn(0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000000040)=""/12, 0xc, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x10420300, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_AD_LACP_RATE={0x8}, @IFLA_BOND_MODE={0x8, 0x1, 0x4}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0xf000}, 0x0) 16:42:06 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) statfs(&(0x7f00000000c0)='./file0\x00', 0x0) 16:42:06 executing program 2: open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = socket(0xa, 0x2, 0x0) tee(r0, 0xffffffffffffffff, 0x5, 0x0) write$binfmt_elf64(r0, &(0x7f0000001d80)=ANY=[@ANYBLOB="7f454c4600030302060000000000000006003e00030000002a00000000000000400000000000000002000000000000001f0000000000380002000900080004000500000002000000010000800000000000000000000000e0ff0f000000000000060000000000000001000000000000000500000000000000850e4ed7040000001f0000000200000000000000080000000000000007000000000000000200000000000000010000000000000081000000000000007196a2f6e71ce0ff521c98354ccd6a2679ca514061cc6b550b289405f7a21e2e3bb63eed7a97d71742c5c7b878b2878d713110cce79f116979cb192ba80f04275b484c3c9b9a8e1342f91f2db072df0e6c1ada0cab7bc66014dbaf1d1e089901b5f272bee74a6f725f5f05c50e3767d12df4864c628f424155d70c549d066bcd91c23cd43d3270058f45cb73cc3f50dd21323b9d1a2b060e170c3ecec40777d6a84860a8fc699752e158937ab6269c32bbc7caea7be9a7b016cb81d3fb758bce2a1413a6715f3500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba5db561705af6ad7f016abd006b0c61e3fda2a35e067d5f29c6de28214187eec75038cb7e2381aa09063116636223fd9df3500599abc05d213376362e"], 0x877) r1 = open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") socket$inet_tcp(0x2, 0x1, 0x0) r3 = semget$private(0x0, 0x1, 0x0) semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f00000001c0)=""/23) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r4 = socket(0x400000000000010, 0x802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r5) write(r4, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) getsockopt$inet_buf(r2, 0x0, 0x29, &(0x7f0000000200)=""/4096, &(0x7f0000001200)=0x1000) 16:42:06 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 16:42:06 executing program 4: r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)=0x10000000006) write$UHID_INPUT(r0, &(0x7f00000002c0)={0x8, "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", 0xa943708f26830065}, 0x1006) r1 = socket$kcm(0x2b, 0x200000000000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 16:42:06 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x4, 0x4, 0x1, 0x0, r0}, 0x3c) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000000)={r1, &(0x7f00000001c0), 0x0}, 0x20) 16:42:06 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3660, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) [ 214.977177][ T9124] vhci_hcd: invalid port number 0 [ 214.992133][ T9132] netlink: 'syz-executor.5': attribute type 21 has an invalid length. [ 215.013416][ T9132] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 215.035491][ T9132] INFO: trying to register non-static key. [ 215.041421][ T9132] the code is fine but needs lockdep annotation. [ 215.047737][ T9132] turning off the locking correctness validator. [ 215.054061][ T9132] CPU: 1 PID: 9132 Comm: syz-executor.5 Not tainted 5.4.0-rc5-next-20191029 #0 [ 215.062980][ T9132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 215.073027][ T9132] Call Trace: [ 215.076321][ T9132] dump_stack+0x172/0x1f0 [ 215.080659][ T9132] register_lock_class+0x179e/0x1850 [ 215.085942][ T9132] ? is_dynamic_key+0x1c0/0x1c0 [ 215.090785][ T9132] ? mark_held_locks+0xa4/0xf0 [ 215.093069][ T9143] vhci_hcd: invalid port number 0 [ 215.095546][ T9132] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 215.106419][ T9132] ? stack_depot_save+0x25a/0x450 [ 215.111442][ T9132] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 215.117252][ T9132] __lock_acquire+0xf4/0x4a00 [ 215.121943][ T9132] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 215.127757][ T9132] ? stack_depot_save+0x25a/0x450 [ 215.132782][ T9132] ? mark_held_locks+0xf0/0xf0 [ 215.137541][ T9132] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 215.143347][ T9132] ? kasan_kmalloc+0x9/0x10 [ 215.144048][ T3920] kobject: 'loop2' (00000000d807c4d3): kobject_uevent_env [ 215.147846][ T9132] ? __kmalloc_node+0x4e/0x70 [ 215.159609][ T9132] ? kvmalloc_node+0x68/0x100 [ 215.162725][ T3920] kobject: 'loop2' (00000000d807c4d3): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 215.164278][ T9132] ? alloc_netdev_mqs+0x8b4/0xde0 [ 215.164291][ T9132] ? rtnl_create_link+0x22d/0xab0 [ 215.164304][ T9132] ? __rtnl_newlink+0xfa3/0x16e0 [ 215.164315][ T9132] ? rtnl_newlink+0x69/0xa0 [ 215.164332][ T9132] lock_acquire+0x190/0x410 [ 215.190379][ T3920] kobject: 'loop1' (0000000027601ef4): kobject_uevent_env [ 215.193854][ T9132] ? bond_3ad_update_lacp_rate+0xb9/0x290 [ 215.193872][ T9132] _raw_spin_lock_bh+0x33/0x50 [ 215.193885][ T9132] ? bond_3ad_update_lacp_rate+0xb9/0x290 [ 215.193896][ T9132] bond_3ad_update_lacp_rate+0xb9/0x290 [ 215.193914][ T9132] ? bond_opt_get_val+0x120/0x120 [ 215.204070][ T3920] kobject: 'loop1' (0000000027601ef4): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 215.205500][ T9132] ? bond_3ad_lacpdu_recv+0x730/0x730 [ 215.205519][ T9132] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 215.205531][ T9132] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 215.205549][ T9132] bond_option_lacp_rate_set+0x66/0x80 [ 215.219287][ T3920] kobject: 'loop0' (00000000179f3c34): kobject_uevent_env [ 215.221704][ T9132] __bond_opt_set+0x2a1/0x540 [ 215.221719][ T9132] bond_changelink+0x139e/0x1bd0 [ 215.221735][ T9132] ? memset+0x32/0x40 [ 215.227821][ T3920] kobject: 'loop0' (00000000179f3c34): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 215.232513][ T9132] ? bond_slave_changelink+0x1e0/0x1e0 [ 215.232532][ T9132] bond_newlink+0x2d/0x90 [ 215.232543][ T9132] ? bond_changelink+0x1bd0/0x1bd0 [ 215.232562][ T9132] __rtnl_newlink+0x10a1/0x16e0 [ 215.244290][ T3920] kobject: 'loop1' (0000000027601ef4): kobject_uevent_env [ 215.248030][ T9132] ? rtnl_link_unregister+0x250/0x250 [ 215.248045][ T9132] ? is_bpf_text_address+0xce/0x160 16:42:06 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) statfs(&(0x7f00000000c0)='./file0\x00', 0x0) 16:42:06 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 16:42:06 executing program 2: open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = socket(0xa, 0x2, 0x0) tee(r0, 0xffffffffffffffff, 0x5, 0x0) write$binfmt_elf64(r0, &(0x7f0000001d80)=ANY=[@ANYBLOB="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"], 0x877) r1 = open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") socket$inet_tcp(0x2, 0x1, 0x0) r3 = semget$private(0x0, 0x1, 0x0) semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f00000001c0)=""/23) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r4 = socket(0x400000000000010, 0x802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r5) write(r4, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) getsockopt$inet_buf(r2, 0x0, 0x29, &(0x7f0000000200)=""/4096, &(0x7f0000001200)=0x1000) 16:42:06 executing program 1: r0 = syz_open_dev$usbfs(0x0, 0x77, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 16:42:06 executing program 1: r0 = syz_open_dev$usbfs(0x0, 0x77, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 215.248056][ T9132] ? kernel_text_address+0x73/0xf0 [ 215.248073][ T9132] ? unwind_get_return_address+0x61/0xa0 [ 215.254368][ T3920] kobject: 'loop1' (0000000027601ef4): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 215.259820][ T9132] ? profile_setup.cold+0xbb/0xbb [ 215.259837][ T9132] ? arch_stack_walk+0x97/0xf0 [ 215.259853][ T9132] ? stack_trace_save+0xac/0xe0 [ 215.259870][ T9132] ? stack_trace_consume_entry+0x190/0x190 [ 215.267209][ T3920] kobject: 'loop1' (0000000027601ef4): kobject_uevent_env [ 215.272406][ T9132] ? mark_lock+0xc2/0x1220 [ 215.272427][ T9132] ? save_stack+0x5c/0x90 [ 215.272435][ T9132] ? save_stack+0x23/0x90 [ 215.272452][ T9132] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 215.277617][ T3920] kobject: 'loop1' (0000000027601ef4): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 215.282018][ T9132] ? kasan_kmalloc+0x9/0x10 [ 215.282031][ T9132] ? kmem_cache_alloc_trace+0x158/0x790 [ 215.282058][ T9132] ? rtnl_newlink+0x4b/0xa0 [ 215.282078][ T9132] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 215.354594][ T3920] kobject: 'loop0' (00000000179f3c34): kobject_uevent_env [ 215.359398][ T9132] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 215.370833][ T3920] kobject: 'loop0' (00000000179f3c34): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 215.374761][ T9132] rtnl_newlink+0x69/0xa0 [ 215.374774][ T9132] ? __rtnl_newlink+0x16e0/0x16e0 [ 215.374784][ T9132] rtnetlink_rcv_msg+0x45e/0xaf0 [ 215.374801][ T9132] ? rtnl_bridge_getlink+0x910/0x910 [ 215.473760][ T9132] ? netlink_deliver_tap+0x228/0xbe0 [ 215.479047][ T9132] ? find_held_lock+0x35/0x130 [ 215.483811][ T9132] netlink_rcv_skb+0x177/0x450 [ 215.488557][ T9132] ? rtnl_bridge_getlink+0x910/0x910 [ 215.493816][ T9132] ? netlink_ack+0xb50/0xb50 [ 215.498380][ T9132] ? __kasan_check_read+0x11/0x20 [ 215.503382][ T9132] ? netlink_deliver_tap+0x24a/0xbe0 [ 215.508642][ T9132] rtnetlink_rcv+0x1d/0x30 [ 215.513106][ T9132] netlink_unicast+0x531/0x710 [ 215.517866][ T9132] ? netlink_attachskb+0x7c0/0x7c0 [ 215.522973][ T9132] ? _copy_from_iter_full+0x25d/0x8c0 [ 215.528324][ T9132] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 215.534026][ T9132] ? __check_object_size+0x3d/0x437 [ 215.539201][ T9132] netlink_sendmsg+0x8cf/0xda0 [ 215.544010][ T9132] ? netlink_unicast+0x710/0x710 [ 215.548927][ T9132] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 215.554575][ T9132] ? apparmor_socket_sendmsg+0x2a/0x30 [ 215.560011][ T9132] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 215.566232][ T9132] ? security_socket_sendmsg+0x8d/0xc0 [ 215.571676][ T9132] ? netlink_unicast+0x710/0x710 [ 215.576585][ T9132] sock_sendmsg+0xd7/0x130 [ 215.580977][ T9132] ___sys_sendmsg+0x803/0x920 [ 215.585630][ T9132] ? copy_msghdr_from_user+0x440/0x440 [ 215.591063][ T9132] ? __kasan_check_read+0x11/0x20 [ 215.596064][ T9132] ? __fget+0x37f/0x550 [ 215.600196][ T9132] ? ksys_dup3+0x3e0/0x3e0 [ 215.604587][ T9132] ? __fget_light+0x1a9/0x230 [ 215.609239][ T9132] ? __fdget+0x1b/0x20 [ 215.613286][ T9132] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 215.619507][ T9132] __sys_sendmsg+0x105/0x1d0 [ 215.624075][ T9132] ? __sys_sendmsg_sock+0xd0/0xd0 [ 215.629079][ T9132] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 215.634550][ T9132] ? do_syscall_64+0x26/0x760 [ 215.639205][ T9132] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 215.645244][ T9132] ? do_syscall_64+0x26/0x760 [ 215.649892][ T9132] __x64_sys_sendmsg+0x78/0xb0 [ 215.654633][ T9132] do_syscall_64+0xfa/0x760 [ 215.659111][ T9132] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 215.664973][ T9132] RIP: 0033:0x459f49 [ 215.668844][ T9132] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 215.688456][ T9132] RSP: 002b:00007f32dd078c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 215.697291][ T9132] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459f49 [ 215.705238][ T9132] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 215.713185][ T9132] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 215.721131][ T9132] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f32dd0796d4 [ 215.729102][ T9132] R13: 00000000004c8338 R14: 00000000004de608 R15: 00000000ffffffff [ 215.740024][ T8763] kobject: '9p-9' (0000000072bfc1eb): kobject_uevent_env [ 215.749290][ T8763] kobject: '9p-9' (0000000072bfc1eb): fill_kobj_path: path = '/devices/virtual/bdi/9p-9' [ 215.759554][ T8763] kobject: '9p-9' (0000000072bfc1eb): kobject_cleanup, parent 00000000e7dc1562 [ 215.768630][ T8763] kobject: '9p-9' (0000000072bfc1eb): calling ktype release [ 215.778076][ T8763] kobject: '9p-9': free name [ 215.815866][ T3920] kobject: 'loop3' (00000000beed3b8a): kobject_uevent_env [ 215.823971][ T3920] kobject: 'loop3' (00000000beed3b8a): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 215.831488][ T9163] kobject: '9p-10' (0000000091ed8672): kobject_add_internal: parent: 'bdi', set: 'devices' [ 215.847579][ T9163] kobject: '9p-10' (0000000091ed8672): kobject_uevent_env [ 215.854885][ T9163] kobject: '9p-10' (0000000091ed8672): fill_kobj_path: path = '/devices/virtual/bdi/9p-10' 16:42:07 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x4, 0x4, 0x1, 0x0, r0}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080), 0x2}, 0x20) 16:42:07 executing program 1: r0 = syz_open_dev$usbfs(0x0, 0x77, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 16:42:07 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="390000000306090368fe07002b00000001000a0014000a0045a800070300001419001a00120002000e0001000a000300"/57, 0x39}], 0x1) 16:42:07 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) statfs(&(0x7f00000000c0)='./file0\x00', 0x0) [ 215.879304][ T8763] kobject: '9p-10' (0000000091ed8672): kobject_uevent_env [ 215.886750][ T8763] kobject: '9p-10' (0000000091ed8672): fill_kobj_path: path = '/devices/virtual/bdi/9p-10' [ 215.897774][ T3920] kobject: 'loop5' (00000000b308b34c): kobject_uevent_env [ 215.917212][ T9166] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 16:42:07 executing program 4: perf_event_open(&(0x7f0000000280)={0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x3, 0x11) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x23, &(0x7f0000000280), 0xa8) 16:42:07 executing program 2: open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = socket(0xa, 0x2, 0x0) tee(r0, 0xffffffffffffffff, 0x5, 0x0) write$binfmt_elf64(r0, &(0x7f0000001d80)=ANY=[@ANYBLOB="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"], 0x877) r1 = open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") socket$inet_tcp(0x2, 0x1, 0x0) r3 = semget$private(0x0, 0x1, 0x0) semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f00000001c0)=""/23) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r4 = socket(0x400000000000010, 0x802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write(r4, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) getsockopt$inet_buf(r2, 0x0, 0x29, &(0x7f0000000200)=""/4096, &(0x7f0000001200)=0x1000) 16:42:07 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x0, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 215.925499][ T3920] kobject: 'loop5' (00000000b308b34c): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 215.936371][ T8763] kobject: '9p-10' (0000000091ed8672): kobject_cleanup, parent 00000000e7dc1562 [ 215.946067][ T9166] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.0'. [ 215.963793][ T8763] kobject: '9p-10' (0000000091ed8672): calling ktype release [ 215.972458][ T3920] kobject: 'loop4' (000000000959d90f): kobject_uevent_env 16:42:07 executing program 4: perf_event_open(&(0x7f0000000280)={0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x3, 0x11) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x23, &(0x7f0000000280), 0xa8) 16:42:07 executing program 2: open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = socket(0xa, 0x2, 0x0) tee(r0, 0xffffffffffffffff, 0x5, 0x0) write$binfmt_elf64(r0, &(0x7f0000001d80)=ANY=[@ANYBLOB="7f454c4600030302060000000000000006003e00030000002a00000000000000400000000000000002000000000000001f0000000000380002000900080004000500000002000000010000800000000000000000000000e0ff0f000000000000060000000000000001000000000000000500000000000000850e4ed7040000001f0000000200000000000000080000000000000007000000000000000200000000000000010000000000000081000000000000007196a2f6e71ce0ff521c98354ccd6a2679ca514061cc6b550b289405f7a21e2e3bb63eed7a97d71742c5c7b878b2878d713110cce79f116979cb192ba80f04275b484c3c9b9a8e1342f91f2db072df0e6c1ada0cab7bc66014dbaf1d1e089901b5f272bee74a6f725f5f05c50e3767d12df4864c628f424155d70c549d066bcd91c23cd43d3270058f45cb73cc3f50dd21323b9d1a2b060e170c3ecec40777d6a84860a8fc699752e158937ab6269c32bbc7caea7be9a7b016cb81d3fb758bce2a1413a6715f3500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba5db561705af6ad7f016abd006b0c61e3fda2a35e067d5f29c6de28214187eec75038cb7e2381aa09063116636223fd9df3500599abc05d213376362e"], 0x877) r1 = open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") socket$inet_tcp(0x2, 0x1, 0x0) r3 = semget$private(0x0, 0x1, 0x0) semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f00000001c0)=""/23) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r4 = socket(0x400000000000010, 0x802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write(r4, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) getsockopt$inet_buf(r2, 0x0, 0x29, &(0x7f0000000200)=""/4096, &(0x7f0000001200)=0x1000) [ 215.998299][ T8763] kobject: '9p-10': free name [ 216.003837][ T3920] kobject: 'loop4' (000000000959d90f): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 216.024496][ T3920] kobject: 'loop2' (00000000d807c4d3): kobject_uevent_env [ 216.033845][ T3920] kobject: 'loop2' (00000000d807c4d3): fill_kobj_path: path = '/devices/virtual/block/loop2' 16:42:07 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="390000000306090368fe07002b00000001000a0014000a0045a800070300001419001a00120002000e0001000a000300"/57, 0x39}], 0x1) 16:42:07 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x4, 0x4, 0x1, 0x0, r0}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080), 0x2}, 0x20) [ 216.064248][ T3920] kobject: 'loop1' (0000000027601ef4): kobject_uevent_env [ 216.078280][ T3920] kobject: 'loop1' (0000000027601ef4): fill_kobj_path: path = '/devices/virtual/block/loop1' 16:42:07 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x0, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 16:42:07 executing program 4: perf_event_open(&(0x7f0000000280)={0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x3, 0x11) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x23, &(0x7f0000000280), 0xa8) [ 216.109834][ T3920] kobject: 'loop0' (00000000179f3c34): kobject_uevent_env [ 216.129247][ T9187] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 16:42:07 executing program 2: open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = socket(0xa, 0x2, 0x0) tee(r0, 0xffffffffffffffff, 0x5, 0x0) write$binfmt_elf64(r0, &(0x7f0000001d80)=ANY=[@ANYBLOB="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"], 0x877) r1 = open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") socket$inet_tcp(0x2, 0x1, 0x0) r3 = semget$private(0x0, 0x1, 0x0) semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f00000001c0)=""/23) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r4 = socket(0x400000000000010, 0x802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write(r4, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) getsockopt$inet_buf(r2, 0x0, 0x29, &(0x7f0000000200)=""/4096, &(0x7f0000001200)=0x1000) 16:42:07 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x0, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 216.151887][ T9187] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.0'. [ 216.162368][ T3920] kobject: 'loop0' (00000000179f3c34): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 216.179029][ T3920] kobject: 'loop5' (00000000b308b34c): kobject_uevent_env [ 216.191900][ T3920] kobject: 'loop5' (00000000b308b34c): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 216.238711][ T9196] kobject: '9p-11' (0000000026568a3a): kobject_add_internal: parent: 'bdi', set: 'devices' [ 216.238732][ T3920] kobject: 'loop4' (000000000959d90f): kobject_uevent_env [ 216.280268][ T3920] kobject: 'loop4' (000000000959d90f): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 216.290582][ T9196] kobject: '9p-11' (0000000026568a3a): kobject_uevent_env [ 216.290619][ T9196] kobject: '9p-11' (0000000026568a3a): fill_kobj_path: path = '/devices/virtual/bdi/9p-11' 16:42:07 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) statfs(&(0x7f00000000c0)='./file0\x00', 0x0) 16:42:07 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x4, 0x4, 0x1, 0x0, r0}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080), 0x2}, 0x20) 16:42:07 executing program 4: perf_event_open(&(0x7f0000000280)={0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x3, 0x11) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x23, &(0x7f0000000280), 0xa8) 16:42:07 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 16:42:07 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="390000000306090368fe07002b00000001000a0014000a0045a800070300001419001a00120002000e0001000a000300"/57, 0x39}], 0x1) 16:42:07 executing program 2: open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = socket(0xa, 0x2, 0x0) tee(r0, 0xffffffffffffffff, 0x5, 0x0) write$binfmt_elf64(r0, &(0x7f0000001d80)=ANY=[@ANYBLOB="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"], 0x877) r1 = open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") socket$inet_tcp(0x2, 0x1, 0x0) r3 = semget$private(0x0, 0x1, 0x0) semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f00000001c0)=""/23) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r4 = socket(0x400000000000010, 0x802, 0x0) r5 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write(r4, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) getsockopt$inet_buf(r2, 0x0, 0x29, &(0x7f0000000200)=""/4096, &(0x7f0000001200)=0x1000) [ 216.326198][ T3920] kobject: 'loop3' (00000000beed3b8a): kobject_uevent_env [ 216.340848][ T3920] kobject: 'loop3' (00000000beed3b8a): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 216.352372][ T3920] kobject: 'loop2' (00000000d807c4d3): kobject_uevent_env [ 216.359838][ T3920] kobject: 'loop2' (00000000d807c4d3): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 216.390006][ T8763] kobject: '9p-11' (0000000026568a3a): kobject_uevent_env [ 216.391177][ T9211] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 216.416864][ T3920] kobject: 'loop1' (0000000027601ef4): kobject_uevent_env [ 216.417559][ T8763] kobject: '9p-11' (0000000026568a3a): fill_kobj_path: path = '/devices/virtual/bdi/9p-11' 16:42:07 executing program 4: perf_event_open(&(0x7f0000000280)={0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x3, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x23, &(0x7f0000000280), 0xa8) 16:42:07 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 16:42:07 executing program 2: open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = socket(0xa, 0x2, 0x0) tee(r0, 0xffffffffffffffff, 0x5, 0x0) write$binfmt_elf64(r0, &(0x7f0000001d80)=ANY=[@ANYBLOB="7f454c4600030302060000000000000006003e00030000002a00000000000000400000000000000002000000000000001f0000000000380002000900080004000500000002000000010000800000000000000000000000e0ff0f000000000000060000000000000001000000000000000500000000000000850e4ed7040000001f0000000200000000000000080000000000000007000000000000000200000000000000010000000000000081000000000000007196a2f6e71ce0ff521c98354ccd6a2679ca514061cc6b550b289405f7a21e2e3bb63eed7a97d71742c5c7b878b2878d713110cce79f116979cb192ba80f04275b484c3c9b9a8e1342f91f2db072df0e6c1ada0cab7bc66014dbaf1d1e089901b5f272bee74a6f725f5f05c50e3767d12df4864c628f424155d70c549d066bcd91c23cd43d3270058f45cb73cc3f50dd21323b9d1a2b060e170c3ecec40777d6a84860a8fc699752e158937ab6269c32bbc7caea7be9a7b016cb81d3fb758bce2a1413a6715f3500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba5db561705af6ad7f016abd006b0c61e3fda2a35e067d5f29c6de28214187eec75038cb7e2381aa09063116636223fd9df3500599abc05d213376362e"], 0x877) r1 = open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") socket$inet_tcp(0x2, 0x1, 0x0) r3 = semget$private(0x0, 0x1, 0x0) semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f00000001c0)=""/23) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r4 = socket(0x400000000000010, 0x802, 0x0) r5 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write(r4, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) getsockopt$inet_buf(r2, 0x0, 0x29, &(0x7f0000000200)=""/4096, &(0x7f0000001200)=0x1000) [ 216.427979][ T9211] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.0'. [ 216.450971][ T3920] kobject: 'loop1' (0000000027601ef4): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 216.474364][ T3920] kobject: 'loop5' (00000000b308b34c): kobject_uevent_env [ 216.477501][ T8763] kobject: '9p-11' (0000000026568a3a): kobject_cleanup, parent 00000000e7dc1562 16:42:07 executing program 4: perf_event_open(&(0x7f0000000280)={0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280), 0xa8) 16:42:07 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 16:42:07 executing program 2: open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = socket(0xa, 0x2, 0x0) tee(r0, 0xffffffffffffffff, 0x5, 0x0) write$binfmt_elf64(r0, &(0x7f0000001d80)=ANY=[@ANYBLOB="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"], 0x877) r1 = open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") socket$inet_tcp(0x2, 0x1, 0x0) r3 = semget$private(0x0, 0x1, 0x0) semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f00000001c0)=""/23) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r4 = socket(0x400000000000010, 0x802, 0x0) r5 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write(r4, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) getsockopt$inet_buf(r2, 0x0, 0x29, &(0x7f0000000200)=""/4096, &(0x7f0000001200)=0x1000) [ 216.496390][ T3920] kobject: 'loop5' (00000000b308b34c): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 216.518955][ T8763] kobject: '9p-11' (0000000026568a3a): calling ktype release [ 216.527201][ T3920] kobject: 'loop4' (000000000959d90f): kobject_uevent_env [ 216.533215][ T8763] kobject: '9p-11': free name [ 216.575953][ T3920] kobject: 'loop4' (000000000959d90f): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 216.600073][ T3920] kobject: 'loop1' (0000000027601ef4): kobject_uevent_env [ 216.612885][ T3920] kobject: 'loop1' (0000000027601ef4): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 216.631913][ T3920] kobject: 'loop2' (00000000d807c4d3): kobject_uevent_env [ 216.653396][ T3920] kobject: 'loop2' (00000000d807c4d3): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 216.664792][ T3920] kobject: 'loop4' (000000000959d90f): kobject_uevent_env [ 216.671922][ T3920] kobject: 'loop4' (000000000959d90f): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 216.683565][ T3920] kobject: 'loop2' (00000000d807c4d3): kobject_uevent_env [ 216.690698][ T3920] kobject: 'loop2' (00000000d807c4d3): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 216.699759][ T9227] kobject: '9p-12' (000000003ad27d14): kobject_add_internal: parent: 'bdi', set: 'devices' [ 216.702236][ T3920] kobject: 'loop1' (0000000027601ef4): kobject_uevent_env [ 216.713288][ T9227] kobject: '9p-12' (000000003ad27d14): kobject_uevent_env 16:42:07 executing program 4: perf_event_open(&(0x7f0000000280)={0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280), 0xa8) 16:42:07 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x4, 0x4, 0x1, 0x0, r0}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080), 0x2}, 0x20) 16:42:07 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) statfs(&(0x7f00000000c0)='./file0\x00', 0x0) 16:42:07 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 16:42:07 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="390000000306090368fe07002b00000001000a0014000a0045a800070300001419001a00120002000e0001000a000300"/57, 0x39}], 0x1) 16:42:07 executing program 2: open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = socket(0xa, 0x2, 0x0) tee(r0, 0xffffffffffffffff, 0x5, 0x0) write$binfmt_elf64(r0, &(0x7f0000001d80)=ANY=[@ANYBLOB="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"], 0x877) r1 = open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") socket$inet_tcp(0x2, 0x1, 0x0) r3 = semget$private(0x0, 0x1, 0x0) semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f00000001c0)=""/23) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) getsockopt$inet_buf(r2, 0x0, 0x29, &(0x7f0000000200)=""/4096, &(0x7f0000001200)=0x1000) [ 216.718277][ T3920] kobject: 'loop1' (0000000027601ef4): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 216.727345][ T9227] kobject: '9p-12' (000000003ad27d14): fill_kobj_path: path = '/devices/virtual/bdi/9p-12' [ 216.736660][ T3920] kobject: 'loop4' (000000000959d90f): kobject_uevent_env [ 216.752430][ T3920] kobject: 'loop4' (000000000959d90f): fill_kobj_path: path = '/devices/virtual/block/loop4' 16:42:08 executing program 4: perf_event_open(&(0x7f0000000280)={0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280), 0xa8) [ 216.779458][ T9233] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 216.792251][ T3920] kobject: 'loop2' (00000000d807c4d3): kobject_uevent_env [ 216.807218][ T3920] kobject: 'loop2' (00000000d807c4d3): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 216.814851][ T9233] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.0'. 16:42:08 executing program 2: open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = socket(0xa, 0x2, 0x0) tee(r0, 0xffffffffffffffff, 0x5, 0x0) write$binfmt_elf64(r0, &(0x7f0000001d80)=ANY=[@ANYBLOB="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"], 0x877) r1 = open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") socket$inet_tcp(0x2, 0x1, 0x0) r3 = semget$private(0x0, 0x1, 0x0) semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f00000001c0)=""/23) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) getsockopt$inet_buf(r2, 0x0, 0x29, &(0x7f0000000200)=""/4096, &(0x7f0000001200)=0x1000) 16:42:08 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 216.834871][ T8763] kobject: '9p-12' (000000003ad27d14): kobject_uevent_env [ 216.842987][ T3920] kobject: 'loop4' (000000000959d90f): kobject_uevent_env [ 216.854949][ T8763] kobject: '9p-12' (000000003ad27d14): fill_kobj_path: path = '/devices/virtual/bdi/9p-12' [ 216.863218][ T3920] kobject: 'loop4' (000000000959d90f): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 216.874200][ T8763] kobject: '9p-12' (000000003ad27d14): kobject_cleanup, parent 00000000e7dc1562 16:42:08 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x4, 0x4, 0x1, 0x0, r0}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080), 0x2}, 0x20) 16:42:08 executing program 4: r0 = socket$kcm(0xa, 0x3, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x23, &(0x7f0000000280), 0xa8) 16:42:08 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 16:42:08 executing program 0: writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)="390000000306090368fe07002b00000001000a0014000a0045a800070300001419001a00120002000e0001000a000300"/57, 0x39}], 0x1) [ 216.893004][ T8763] kobject: '9p-12' (000000003ad27d14): calling ktype release [ 216.915220][ T3920] kobject: 'loop1' (0000000027601ef4): kobject_uevent_env [ 216.930813][ T8763] kobject: '9p-12': free name 16:42:08 executing program 2: open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = socket(0xa, 0x2, 0x0) tee(r0, 0xffffffffffffffff, 0x5, 0x0) write$binfmt_elf64(r0, &(0x7f0000001d80)=ANY=[@ANYBLOB="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"], 0x877) r1 = open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") socket$inet_tcp(0x2, 0x1, 0x0) r3 = semget$private(0x0, 0x1, 0x0) semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f00000001c0)=""/23) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) getsockopt$inet_buf(r2, 0x0, 0x29, &(0x7f0000000200)=""/4096, &(0x7f0000001200)=0x1000) [ 216.951835][ T3920] kobject: 'loop1' (0000000027601ef4): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 216.984082][ T3920] kobject: 'loop0' (00000000179f3c34): kobject_uevent_env [ 216.995385][ T3920] kobject: 'loop0' (00000000179f3c34): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 217.013267][ T3920] kobject: 'loop2' (00000000d807c4d3): kobject_uevent_env [ 217.020475][ T3920] kobject: 'loop2' (00000000d807c4d3): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 217.044846][ T3920] kobject: 'loop3' (00000000beed3b8a): kobject_uevent_env [ 217.051982][ T3920] kobject: 'loop3' (00000000beed3b8a): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 217.078293][ T3920] kobject: 'loop1' (0000000027601ef4): kobject_uevent_env [ 217.087030][ T3920] kobject: 'loop1' (0000000027601ef4): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 217.098163][ T9257] kobject: '9p-13' (00000000408ee0b1): kobject_add_internal: parent: 'bdi', set: 'devices' [ 217.098469][ T3920] kobject: 'loop2' (00000000d807c4d3): kobject_uevent_env [ 217.108456][ T9257] kobject: '9p-13' (00000000408ee0b1): kobject_uevent_env [ 217.117913][ T3920] kobject: 'loop2' (00000000d807c4d3): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 217.122863][ T9257] kobject: '9p-13' (00000000408ee0b1): fill_kobj_path: path = '/devices/virtual/bdi/9p-13' [ 217.136134][ T3920] kobject: 'loop5' (00000000b308b34c): kobject_uevent_env 16:42:08 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) statfs(&(0x7f00000000c0)='./file0\x00', 0x0) 16:42:08 executing program 0: writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)="390000000306090368fe07002b00000001000a0014000a0045a800070300001419001a00120002000e0001000a000300"/57, 0x39}], 0x1) 16:42:08 executing program 4: r0 = socket$kcm(0xa, 0x3, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x23, &(0x7f0000000280), 0xa8) 16:42:08 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x4, 0x4, 0x1, 0x0, r0}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080), 0x2}, 0x20) 16:42:08 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) 16:42:08 executing program 2: open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = socket(0xa, 0x2, 0x0) tee(r0, 0xffffffffffffffff, 0x5, 0x0) write$binfmt_elf64(r0, &(0x7f0000001d80)=ANY=[@ANYBLOB="7f454c4600030302060000000000000006003e00030000002a00000000000000400000000000000002000000000000001f0000000000380002000900080004000500000002000000010000800000000000000000000000e0ff0f000000000000060000000000000001000000000000000500000000000000850e4ed7040000001f0000000200000000000000080000000000000007000000000000000200000000000000010000000000000081000000000000007196a2f6e71ce0ff521c98354ccd6a2679ca514061cc6b550b289405f7a21e2e3bb63eed7a97d71742c5c7b878b2878d713110cce79f116979cb192ba80f04275b484c3c9b9a8e1342f91f2db072df0e6c1ada0cab7bc66014dbaf1d1e089901b5f272bee74a6f725f5f05c50e3767d12df4864c628f424155d70c549d066bcd91c23cd43d3270058f45cb73cc3f50dd21323b9d1a2b060e170c3ecec40777d6a84860a8fc699752e158937ab6269c32bbc7caea7be9a7b016cb81d3fb758bce2a1413a6715f3500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba5db561705af6ad7f016abd006b0c61e3fda2a35e067d5f29c6de28214187eec75038cb7e2381aa09063116636223fd9df3500599abc05d213376362e"], 0x877) r1 = open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") socket$inet_tcp(0x2, 0x1, 0x0) r3 = semget$private(0x0, 0x1, 0x0) semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f00000001c0)=""/23) r4 = socket(0x400000000000010, 0x802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write(r4, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) getsockopt$inet_buf(r2, 0x0, 0x29, &(0x7f0000000200)=""/4096, &(0x7f0000001200)=0x1000) [ 217.150083][ T3920] kobject: 'loop5' (00000000b308b34c): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 217.185328][ T3920] kobject: 'loop1' (0000000027601ef4): kobject_uevent_env 16:42:08 executing program 4: r0 = socket$kcm(0xa, 0x3, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x23, &(0x7f0000000280), 0xa8) 16:42:08 executing program 0: writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)="390000000306090368fe07002b00000001000a0014000a0045a800070300001419001a00120002000e0001000a000300"/57, 0x39}], 0x1) 16:42:08 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) [ 217.196372][ T3920] kobject: 'loop1' (0000000027601ef4): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 217.209530][ T8763] kobject: '9p-13' (00000000408ee0b1): kobject_uevent_env [ 217.231757][ T8763] kobject: '9p-13' (00000000408ee0b1): fill_kobj_path: path = '/devices/virtual/bdi/9p-13' 16:42:08 executing program 2: open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = socket(0xa, 0x2, 0x0) tee(r0, 0xffffffffffffffff, 0x5, 0x0) write$binfmt_elf64(r0, &(0x7f0000001d80)=ANY=[@ANYBLOB="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"], 0x877) r1 = open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") socket$inet_tcp(0x2, 0x1, 0x0) r3 = semget$private(0x0, 0x1, 0x0) semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f00000001c0)=""/23) r4 = socket(0x400000000000010, 0x802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write(r4, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) getsockopt$inet_buf(r2, 0x0, 0x29, &(0x7f0000000200)=""/4096, &(0x7f0000001200)=0x1000) 16:42:08 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x4, 0x4, 0x1, 0x0, r0}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080), 0x2}, 0x20) [ 217.249360][ T3920] kobject: 'loop0' (00000000179f3c34): kobject_uevent_env [ 217.272985][ T3920] kobject: 'loop0' (00000000179f3c34): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 217.293273][ T8763] kobject: '9p-13' (00000000408ee0b1): kobject_cleanup, parent 00000000e7dc1562 16:42:08 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x3, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x23, &(0x7f0000000280), 0xa8) [ 217.307764][ T3920] kobject: 'loop2' (00000000d807c4d3): kobject_uevent_env [ 217.328575][ T3920] kobject: 'loop2' (00000000d807c4d3): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 217.341034][ T8763] kobject: '9p-13' (00000000408ee0b1): calling ktype release [ 217.355602][ T8763] kobject: '9p-13': free name [ 217.367789][ T3920] kobject: 'loop0' (00000000179f3c34): kobject_uevent_env [ 217.375140][ T3920] kobject: 'loop0' (00000000179f3c34): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 217.386300][ T3920] kobject: 'loop5' (00000000b308b34c): kobject_uevent_env [ 217.394305][ T3920] kobject: 'loop5' (00000000b308b34c): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 217.406142][ T3920] kobject: 'loop3' (00000000beed3b8a): kobject_uevent_env [ 217.413294][ T3920] kobject: 'loop3' (00000000beed3b8a): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 217.424732][ T3920] kobject: 'loop1' (0000000027601ef4): kobject_uevent_env [ 217.431875][ T3920] kobject: 'loop1' (0000000027601ef4): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 217.443106][ T3920] kobject: 'loop2' (00000000d807c4d3): kobject_uevent_env [ 217.450234][ T3920] kobject: 'loop2' (00000000d807c4d3): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 217.461436][ T3920] kobject: 'loop4' (000000000959d90f): kobject_uevent_env [ 217.468587][ T3920] kobject: 'loop4' (000000000959d90f): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 217.479861][ T3920] kobject: 'loop0' (00000000179f3c34): kobject_uevent_env [ 217.487036][ T3920] kobject: 'loop0' (00000000179f3c34): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 217.495810][ T9282] kobject: '9p-14' (00000000412e15a8): kobject_add_internal: parent: 'bdi', set: 'devices' [ 217.498262][ T3920] kobject: 'loop1' (0000000027601ef4): kobject_uevent_env [ 217.509930][ T9282] kobject: '9p-14' (00000000412e15a8): kobject_uevent_env [ 217.514370][ T3920] kobject: 'loop1' (0000000027601ef4): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 217.521626][ T9282] kobject: '9p-14' (00000000412e15a8): fill_kobj_path: path = '/devices/virtual/bdi/9p-14' [ 217.532761][ T3920] kobject: 'loop2' (00000000d807c4d3): kobject_uevent_env [ 217.548847][ T3920] kobject: 'loop2' (00000000d807c4d3): fill_kobj_path: path = '/devices/virtual/block/loop2' 16:42:08 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000400)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}}, 0xa0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) statfs(&(0x7f00000000c0)='./file0\x00', 0x0) 16:42:08 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="390000000306090368fe07002b00000001000a0014000a0045a800070300001419001a00120002000e0001000a000300"/57, 0x39}], 0x1) 16:42:08 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) 16:42:08 executing program 2: open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = socket(0xa, 0x2, 0x0) tee(r0, 0xffffffffffffffff, 0x5, 0x0) write$binfmt_elf64(r0, &(0x7f0000001d80)=ANY=[@ANYBLOB="7f454c4600030302060000000000000006003e00030000002a00000000000000400000000000000002000000000000001f0000000000380002000900080004000500000002000000010000800000000000000000000000e0ff0f000000000000060000000000000001000000000000000500000000000000850e4ed7040000001f0000000200000000000000080000000000000007000000000000000200000000000000010000000000000081000000000000007196a2f6e71ce0ff521c98354ccd6a2679ca514061cc6b550b289405f7a21e2e3bb63eed7a97d71742c5c7b878b2878d713110cce79f116979cb192ba80f04275b484c3c9b9a8e1342f91f2db072df0e6c1ada0cab7bc66014dbaf1d1e089901b5f272bee74a6f725f5f05c50e3767d12df4864c628f424155d70c549d066bcd91c23cd43d3270058f45cb73cc3f50dd21323b9d1a2b060e170c3ecec40777d6a84860a8fc699752e158937ab6269c32bbc7caea7be9a7b016cb81d3fb758bce2a1413a6715f3500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba5db561705af6ad7f016abd006b0c61e3fda2a35e067d5f29c6de28214187eec75038cb7e2381aa09063116636223fd9df3500599abc05d213376362e"], 0x877) r1 = open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") socket$inet_tcp(0x2, 0x1, 0x0) r3 = semget$private(0x0, 0x1, 0x0) semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f00000001c0)=""/23) r4 = socket(0x400000000000010, 0x802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write(r4, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) getsockopt$inet_buf(r2, 0x0, 0x29, &(0x7f0000000200)=""/4096, &(0x7f0000001200)=0x1000) 16:42:08 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080), 0x2}, 0x20) 16:42:08 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x3, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x23, &(0x7f0000000280), 0xa8) 16:42:08 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080), 0x2}, 0x20) [ 217.560087][ T3920] kobject: 'loop5' (00000000b308b34c): kobject_uevent_env [ 217.582123][ T3920] kobject: 'loop5' (00000000b308b34c): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 217.608085][ T3920] kobject: 'loop4' (000000000959d90f): kobject_uevent_env [ 217.615669][ T8763] kobject: '9p-14' (00000000412e15a8): kobject_uevent_env [ 217.620088][ T3920] kobject: 'loop4' (000000000959d90f): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 217.633057][ T26] kauditd_printk_skb: 36 callbacks suppressed 16:42:08 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x3, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x23, &(0x7f0000000280), 0xa8) 16:42:08 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 16:42:08 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="390000000306090368fe07002b00000001000a0014000a0045a800070300001419001a00120002000e0001000a000300"/57, 0x39}], 0x1) 16:42:08 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080), 0x2}, 0x20) 16:42:08 executing program 2: open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = socket(0xa, 0x2, 0x0) tee(r0, 0xffffffffffffffff, 0x5, 0x0) write$binfmt_elf64(r0, &(0x7f0000001d80)=ANY=[@ANYBLOB="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"], 0x877) r1 = open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") socket$inet_tcp(0x2, 0x1, 0x0) semget$private(0x0, 0x1, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r3 = socket(0x400000000000010, 0x802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) getsockopt$inet_buf(r2, 0x0, 0x29, &(0x7f0000000200)=""/4096, &(0x7f0000001200)=0x1000) [ 217.633067][ T26] audit: type=1804 audit(1572367328.784:83): pid=9291 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir823069651/syzkaller.QCw7sU/27/bus" dev="sda1" ino=16587 res=1 [ 217.652690][ T8763] kobject: '9p-14' (00000000412e15a8): fill_kobj_path: path = '/devices/virtual/bdi/9p-14' [ 217.690225][ T3920] kobject: 'loop0' (00000000179f3c34): kobject_uevent_env [ 217.702023][ T3920] kobject: 'loop0' (00000000179f3c34): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 217.712427][ T26] audit: type=1804 audit(1572367328.794:84): pid=9291 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir823069651/syzkaller.QCw7sU/27/bus" dev="sda1" ino=16587 res=1 [ 217.747109][ T3920] kobject: 'loop1' (0000000027601ef4): kobject_uevent_env [ 217.752360][ T8763] kobject: '9p-14' (00000000412e15a8): kobject_cleanup, parent 00000000e7dc1562 [ 217.762954][ T3920] kobject: 'loop1' (0000000027601ef4): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 217.775949][ T26] audit: type=1804 audit(1572367328.944:85): pid=9300 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir823069651/syzkaller.QCw7sU/28/bus" dev="sda1" ino=16593 res=1 [ 217.808005][ T3920] kobject: 'loop5' (00000000b308b34c): kobject_uevent_env [ 217.809440][ T8763] kobject: '9p-14' (00000000412e15a8): calling ktype release [ 217.822738][ T3920] kobject: 'loop5' (00000000b308b34c): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 217.834377][ T3920] kobject: 'loop2' (00000000d807c4d3): kobject_uevent_env [ 217.841508][ T3920] kobject: 'loop2' (00000000d807c4d3): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 217.849640][ T8763] kobject: '9p-14': free name [ 217.852051][ T26] audit: type=1804 audit(1572367328.944:86): pid=9300 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir823069651/syzkaller.QCw7sU/28/bus" dev="sda1" ino=16593 res=1 [ 217.881213][ T3920] kobject: 'loop4' (000000000959d90f): kobject_uevent_env [ 217.888395][ T3920] kobject: 'loop4' (000000000959d90f): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 217.900344][ T3920] kobject: 'loop3' (00000000beed3b8a): kobject_uevent_env [ 217.919514][ T3920] kobject: 'loop3' (00000000beed3b8a): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 217.931004][ T3920] kobject: 'loop5' (00000000b308b34c): kobject_uevent_env [ 217.938375][ T3920] kobject: 'loop5' (00000000b308b34c): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 217.949924][ T3920] kobject: 'loop4' (000000000959d90f): kobject_uevent_env [ 217.957328][ T3920] kobject: 'loop4' (000000000959d90f): fill_kobj_path: path = '/devices/virtual/block/loop4' 16:42:09 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000400)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}}, 0xa0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) statfs(&(0x7f00000000c0)='./file0\x00', 0x0) 16:42:09 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x4, 0x4, 0x1}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080), 0x2}, 0x20) 16:42:09 executing program 4: perf_event_open(&(0x7f0000000280)={0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x3, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x23, &(0x7f0000000280), 0xa8) 16:42:09 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="390000000306090368fe07002b00000001000a0014000a0045a800070300001419001a00120002000e0001000a000300"/57, 0x39}], 0x1) 16:42:09 executing program 2: open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = socket(0xa, 0x2, 0x0) tee(r0, 0xffffffffffffffff, 0x5, 0x0) write$binfmt_elf64(r0, &(0x7f0000001d80)=ANY=[@ANYBLOB="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"], 0x877) r1 = open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r3 = socket(0x400000000000010, 0x802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) getsockopt$inet_buf(r2, 0x0, 0x29, &(0x7f0000000200)=""/4096, &(0x7f0000001200)=0x1000) 16:42:09 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 217.969158][ T3920] kobject: 'loop1' (0000000027601ef4): kobject_uevent_env [ 217.976510][ T3920] kobject: 'loop1' (0000000027601ef4): fill_kobj_path: path = '/devices/virtual/block/loop1' 16:42:09 executing program 4: perf_event_open(&(0x7f0000000280)={0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x3, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x23, &(0x7f0000000280), 0xa8) 16:42:09 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x4, 0x4, 0x1}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080), 0x2}, 0x20) 16:42:09 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 16:42:09 executing program 0: socket$netlink(0x10, 0x3, 0xc) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)="390000000306090368fe07002b00000001000a0014000a0045a800070300001419001a00120002000e0001000a000300"/57, 0x39}], 0x1) [ 218.022279][ T3920] kobject: 'loop5' (00000000b308b34c): kobject_uevent_env [ 218.029515][ T26] audit: type=1804 audit(1572367329.204:87): pid=9319 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir823069651/syzkaller.QCw7sU/29/bus" dev="sda1" ino=16590 res=1 16:42:09 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x4, 0x4, 0x1}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080), 0x2}, 0x20) 16:42:09 executing program 2: open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = socket(0xa, 0x2, 0x0) tee(r0, 0xffffffffffffffff, 0x5, 0x0) write$binfmt_elf64(r0, &(0x7f0000001d80)=ANY=[@ANYBLOB="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