pen_dev$tty1(0xc, 0x4, 0x1) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'essiv(gcm(twofish-generic),blake2s-160-x86)\x00'}, 0x58) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000340)=[{&(0x7f00000002c0)="84a4cadec83582e6d9321b47a05ef7b741ae24a9473f249e5fb21de600c30ac3", 0x20, 0x7}, {&(0x7f0000000300)="0f", 0x1, 0xff}], 0x400, &(0x7f0000000380)='aead\x00') [ 1884.162248][ T27] audit: type=1804 audit(1586660485.898:4020): pid=20079 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir209219610/syzkaller.nCjs6O/659/file0" dev="sda1" ino=16786 res=1 [ 1884.264007][ T27] audit: type=1804 audit(1586660485.948:4021): pid=20082 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir209219610/syzkaller.nCjs6O/659/file0" dev="sda1" ino=16786 res=1 03:01:26 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f00000000c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) bind$alg(0xffffffffffffffff, 0x0, 0x0) [ 1884.347651][ T27] audit: type=1804 audit(1586660485.948:4022): pid=20082 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir209219610/syzkaller.nCjs6O/659/file0" dev="sda1" ino=16786 res=1 [ 1884.347672][ T27] audit: type=1804 audit(1586660486.048:4023): pid=20082 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir209219610/syzkaller.nCjs6O/659/file0" dev="sda1" ino=16786 res=1 03:01:26 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) clone3(&(0x7f0000000280)={0x80000800, &(0x7f0000000000)=0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000180), {0x38}, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=""/52, &(0x7f0000000240)=[r1], 0x1}, 0x50) fstatfs(r2, &(0x7f0000000300)=""/253) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r3, r0, 0x0, 0xffffff38) [ 1884.347692][ T27] audit: type=1804 audit(1586660486.088:4024): pid=20086 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir057656323/syzkaller.yzn8jn/414/file0" dev="sda1" ino=16881 res=1 03:01:34 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, 0x0) sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'essiv(gcm(twofish-generic),blake2s-160-x86)\x00'}, 0x58) syz_mount_image$nfs4(0x0, 0x0, 0x2, 0x2, &(0x7f0000000340)=[{&(0x7f00000002c0)="84a4cadec83582e6d9321b47a05ef7b741ae24a9473f249e", 0x18, 0x7}, {&(0x7f0000000300)="0f", 0x1, 0xff}], 0x400, &(0x7f0000000380)='aead\x00') 03:01:34 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f00000000c0)) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r3) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) ioprio_get$uid(0x3, r3) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)={0x3, @bcast, r3}) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000040)=0x20000000, 0x4) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x30000, 0x0) ioctl$KDMKTONE(r4, 0x4b30, 0xde2e) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000100)={@null=' \x00', 0xa, 'bridge0\x00'}) bind$alg(0xffffffffffffffff, 0x0, 0x0) 03:01:34 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, 0x0) sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'essiv(gcm(twofish-generic),blake2s-160-x86)\x00'}, 0x58) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000340)=[{&(0x7f00000002c0)="84a4cadec83582e6d9321b47a05ef7b741ae24a9473f249e5fb21de600c30ac3", 0x20, 0x7}, {&(0x7f0000000300)="0f", 0x1, 0xff}], 0x400, &(0x7f0000000380)='aead\x00') 03:01:34 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r2, r0, 0x0, 0xffffff38) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)={&(0x7f0000000000)='./file1\x00', r2}, 0x10) r3 = open(&(0x7f0000000100)='./file1\x00', 0x420500, 0x0) r4 = open$dir(&(0x7f0000000080)='./file1\x00', 0x0, 0x0) write(r3, &(0x7f0000000600)="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", 0x200) sendfile(r3, r4, 0x0, 0x7fffffff) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r5, r3, 0x0, 0xffffff38) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') setsockopt$CAIFSO_LINK_SELECT(r3, 0x116, 0x7f, &(0x7f0000000340)=0x3, 0x4) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x68, r6, 0x8b8e0eb13081c495, 0x0, 0x0, {{}, {0x0, 0x4109}, {0x4c, 0x18, {0x114, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r6, 0x800, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x40090) write$P9_RLINK(r5, &(0x7f0000000180)={0x7, 0x47, 0x1}, 0x7) 03:01:34 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, 0x0) sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'essiv(gcm(twofish-generic),blake2s-160-x86)\x00'}, 0x58) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000340)=[{&(0x7f00000002c0)="84a4cadec83582e6d9321b47a05ef7b741ae24a9473f249e5fb21de600c30ac3", 0x20, 0x7}, {&(0x7f0000000300)="0f", 0x1, 0xff}], 0x400, &(0x7f0000000380)='aead\x00') 03:01:34 executing program 3: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r2, r0, 0x0, 0xffffff38) ioctl$TIOCSCTTY(r0, 0x540e, 0x80000001) r3 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r3, &(0x7f0000000600)="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", 0x200) sendto(r3, &(0x7f0000000000)="e42ab83ae4b5a1bc07345713ab5567ef4a2650f3d40397650c6888cd1acee859cf7512a27fff4f58f769360b6aa7", 0x2e, 0x80, &(0x7f0000000180)=@x25={0x9, @remote={[], 0x1}}, 0x80) sendfile(r3, r4, 0x0, 0x7fffffff) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r5, r3, 0x0, 0xffffff38) [ 1893.062362][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 1893.062379][ T27] audit: type=1800 audit(1586660494.898:4029): pid=20121 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16945 res=0 [ 1893.153594][ T27] audit: type=1800 audit(1586660494.928:4030): pid=20125 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16977 res=0 [ 1893.153618][ T27] audit: type=1804 audit(1586660494.928:4031): pid=20127 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir209219610/syzkaller.nCjs6O/660/file0" dev="sda1" ino=16945 res=1 [ 1893.153641][ T27] audit: type=1804 audit(1586660494.948:4032): pid=20125 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir932491758/syzkaller.D6Mno2/499/file0" dev="sda1" ino=16977 res=1 [ 1893.199675][ T27] audit: type=1804 audit(1586660495.038:4033): pid=20127 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir209219610/syzkaller.nCjs6O/660/file0" dev="sda1" ino=16945 res=1 [ 1893.264267][ T27] audit: type=1804 audit(1586660495.038:4034): pid=20131 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir932491758/syzkaller.D6Mno2/499/file0" dev="sda1" ino=16977 res=1 03:01:35 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) [ 1893.294131][ T27] audit: type=1804 audit(1586660495.128:4035): pid=20133 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir932491758/syzkaller.D6Mno2/499/file0" dev="sda1" ino=16977 res=1 [ 1893.300835][ T27] audit: type=1804 audit(1586660495.138:4036): pid=20132 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir209219610/syzkaller.nCjs6O/660/file0" dev="sda1" ino=16945 res=1 03:01:35 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x4042, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r2, r0, 0x0, 0xffffff38) [ 1893.345277][ T27] audit: type=1804 audit(1586660495.178:4037): pid=20132 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir209219610/syzkaller.nCjs6O/660/file0" dev="sda1" ino=16945 res=1 [ 1893.595538][ T27] audit: type=1800 audit(1586660495.428:4038): pid=20143 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=16993 res=0 03:01:35 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') r2 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, 0x0) write(r2, &(0x7f0000000600)="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", 0x200) sendfile(r2, r3, 0x0, 0x7fffffff) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r4, r2, 0x0, 0xffffff38) ioctl$PIO_FONTX(r4, 0x4b6c, &(0x7f0000000000)={0x32, 0x15, &(0x7f0000000800)="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"}) sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f00000000c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x3) bind$alg(0xffffffffffffffff, 0x0, 0x0) 03:01:35 executing program 0: set_mempolicy(0x40000000004003, &(0x7f00000000c0)=0x8, 0xc2) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000280)="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", 0x20f) sendfile(r1, r2, 0x0, 0x7fffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={r3, 0x6, 0x0, 0xb5}, 0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e24, 0x3, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x800000}}, 0xb, 0x2}, &(0x7f0000000240)=0x47) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000140)={0x5, 0x4, 0x8, 0x101, 0x687, 0x1daa, 0x9, 0x1, r3}, &(0x7f0000000180)=0x20) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffff38) munmap(&(0x7f0000003000/0x13000)=nil, 0x13000) ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000100)) 03:01:35 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004110) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f00000000c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) bind$alg(0xffffffffffffffff, 0x0, 0x0) 03:01:35 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000000000)) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r2, r0, 0x0, 0xffffff38) 03:01:44 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, 0x0) sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'essiv(gcm(twofish-generic),blake2s-160-x86)\x00'}, 0x58) syz_mount_image$nfs4(0x0, 0x0, 0x2, 0x2, &(0x7f0000000340)=[{&(0x7f00000002c0)="84a4cadec83582e6d9321b47a05ef7b741ae24a9473f249e5fb21de6", 0x1c, 0x7}, {&(0x7f0000000300)="0f", 0x1, 0xff}], 0x400, &(0x7f0000000380)='aead\x00') 03:01:44 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r2, r0, 0x0, 0xffffff38) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)={&(0x7f0000000000)='./file1\x00', r2}, 0x10) r3 = open(&(0x7f0000000100)='./file1\x00', 0x420500, 0x0) r4 = open$dir(&(0x7f0000000080)='./file1\x00', 0x0, 0x0) write(r3, &(0x7f0000000600)="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", 0x200) sendfile(r3, r4, 0x0, 0x7fffffff) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r5, r3, 0x0, 0xffffff38) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') setsockopt$CAIFSO_LINK_SELECT(r3, 0x116, 0x7f, &(0x7f0000000340)=0x3, 0x4) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x68, r6, 0x8b8e0eb13081c495, 0x0, 0x0, {{}, {0x0, 0x4109}, {0x4c, 0x18, {0x114, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r6, 0x800, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x40090) write$P9_RLINK(r5, &(0x7f0000000180)={0x7, 0x47, 0x1}, 0x7) 03:01:44 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004110) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f00000000c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) bind$alg(0xffffffffffffffff, 0x0, 0x0) 03:01:44 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f00000000c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) 03:01:44 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r2, r0, 0x0, 0xffffff38) ioctl$VIDIOC_SUBDEV_G_CROP(r0, 0xc038563b, &(0x7f0000000000)={0x0, 0x0, {0x80, 0x81, 0x9, 0x5}}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004103) ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f00000000c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) bind$alg(0xffffffffffffffff, 0x0, 0x0) 03:01:44 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x80) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) bind$bt_hci(r3, &(0x7f00000000c0)={0x1f, 0x0, 0x4}, 0x6) sendfile(r2, r0, 0x0, 0xffffff38) [ 1902.301334][ T27] kauditd_printk_skb: 18 callbacks suppressed [ 1902.301352][ T27] audit: type=1800 audit(1586660504.138:4057): pid=20178 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=16702 res=0 03:01:44 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f00000000c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) [ 1902.380574][ T27] audit: type=1800 audit(1586660504.138:4058): pid=20180 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=16703 res=0 [ 1902.445365][ T27] audit: type=1800 audit(1586660504.138:4059): pid=20181 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16701 res=0 [ 1902.445454][ T27] audit: type=1804 audit(1586660504.148:4060): pid=20181 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir932491758/syzkaller.D6Mno2/501/file0" dev="sda1" ino=16701 res=1 [ 1902.445477][ T27] audit: type=1804 audit(1586660504.148:4061): pid=20178 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir057656323/syzkaller.yzn8jn/418/file0" dev="sda1" ino=16702 res=1 [ 1902.445499][ T27] audit: type=1804 audit(1586660504.178:4062): pid=20180 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir888993330/syzkaller.9XPLg2/556/file0" dev="sda1" ino=16703 res=1 [ 1902.445521][ T27] audit: type=1804 audit(1586660504.198:4063): pid=20184 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir932491758/syzkaller.D6Mno2/501/file0" dev="sda1" ino=16701 res=1 03:01:44 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f00000000c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) [ 1902.445544][ T27] audit: type=1804 audit(1586660504.208:4064): pid=20185 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir057656323/syzkaller.yzn8jn/418/file0" dev="sda1" ino=16702 res=1 [ 1902.445566][ T27] audit: type=1804 audit(1586660504.248:4065): pid=20186 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir888993330/syzkaller.9XPLg2/556/file0" dev="sda1" ino=16703 res=1 [ 1902.537046][ T27] audit: type=1804 audit(1586660504.368:4066): pid=20191 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir888993330/syzkaller.9XPLg2/556/file0" dev="sda1" ino=16703 res=1 03:01:44 executing program 3: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000000000)) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r2, r0, 0x0, 0xffffff38) 03:01:44 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f00000000c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) 03:01:44 executing program 2 (fault-call:4 fault-nth:0): r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) 03:01:45 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, 0x0) write(r2, &(0x7f0000000600)="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", 0x200) sendfile(r2, r3, 0x0, 0x7fffffff) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r4, r2, 0x0, 0xffffff38) sendfile(r2, r1, 0x0, 0x7ffffff9) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r5, r0, 0x0, 0xffffff38) 03:01:50 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, 0x0) sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'essiv(gcm(twofish-generic),blake2s-160-x86)\x00'}, 0x58) syz_mount_image$nfs4(0x0, 0x0, 0x2, 0x2, &(0x7f0000000340)=[{&(0x7f00000002c0)="84a4cadec83582e6d9321b47a05ef7b741ae24a9473f249e5fb21de6", 0x1c, 0x7}, {&(0x7f0000000300)="0f", 0x1, 0xff}], 0x400, &(0x7f0000000380)='aead\x00') 03:01:50 executing program 0 (fault-call:2 fault-nth:0): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 03:01:50 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f00000000c0)) socket$netlink(0x10, 0x3, 0xc) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_open_procfs(r2, &(0x7f0000000000)='net/ip_tables_matches\x00') bind$alg(0xffffffffffffffff, 0x0, 0x0) 03:01:50 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e2, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = open(&(0x7f0000000100)='./file0\x00', 0x61e1c3, 0x139) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_AUDIO(r2, 0x80345621, &(0x7f0000000180)) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r4 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, 0x0) write(r4, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r4, r5, 0x0, 0x7fffffff) r6 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r6, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r6, r4, 0x0, 0xffffff38) ioctl$DRM_IOCTL_SET_VERSION(r4, 0xc0106407, &(0x7f0000000000)={0x48b, 0x2, 0x4, 0x9}) sendfile(r3, r0, 0x0, 0xffffff38) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000a890e87db09dfdeb552de687922c947d3820e96e6598c795a106a20ec127d12355398e1b05454ad27191d8d49007ec64a69c9e6032d0967fc1a7485d54d86b9f8dce732ce756a666f66be201bd83c379206e64bdc0601640dba1bea841b0526d9a151d8c67944998a35a6fe68da9e88a6309653160e77ae13d8fe1927174103fc13283a2259babe64fd6ebea69c13f90cf8513e49192ed7316bf4ac7fc4e8a329b698e425a07f7ee1ec0015ba7a37bc8c8dc0775e97ab4ac9df2b2667c4c76e6af232800000000", @ANYRES16=0x0, @ANYBLOB="010000000000fddbdf251b00000800000000000000"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x1, 0x70bd25, 0x9, {}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x40001) 03:01:50 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) 03:01:50 executing program 3: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000000000)) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r2, r0, 0x0, 0xffffff38) [ 1908.767607][T20221] FAULT_INJECTION: forcing a failure. [ 1908.767607][T20221] name failslab, interval 1, probability 0, space 0, times 0 [ 1908.787262][ T27] kauditd_printk_skb: 14 callbacks suppressed [ 1908.787279][ T27] audit: type=1800 audit(1586660510.618:4081): pid=20226 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16817 res=0 03:01:50 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) write$FUSE_NOTIFY_POLL(r2, &(0x7f0000000000)={0x18, 0x1, 0x0, {0x7fffffff}}, 0x18) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$EVIOCRMFF(r3, 0x40044581, &(0x7f00000000c0)=0x5) [ 1908.833476][T20221] CPU: 1 PID: 20221 Comm: syz-executor.0 Not tainted 5.6.0-rc1-syzkaller #0 [ 1908.842199][T20221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1908.842204][T20221] Call Trace: [ 1908.842233][T20221] dump_stack+0x11d/0x187 03:01:50 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4088, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x2000, 0x0) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000180)={0x240, 0x0, 0x0, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0xbc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @local}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth0_to_team\x00'}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}, @TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}]}, @TIPC_NLA_SOCK={0xd0, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xbe}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x800}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x100}]}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xda7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3d}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x200}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9500}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8e}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x20}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffff7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffff}]}, @TIPC_NLA_MEDIA={0x54, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffaa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}]}, 0x240}, 0x1, 0x0, 0x0, 0x20000810}, 0x82) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r2, r0, 0x0, 0xffffff38) [ 1908.842256][T20221] should_fail.cold+0x5/0xf [ 1908.842285][T20221] __should_failslab+0x82/0xb0 [ 1908.842303][T20221] should_failslab+0x5/0xf [ 1908.842324][T20221] kmem_cache_alloc_trace+0x26/0x5f0 [ 1908.842352][T20221] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1908.842373][T20221] alloc_pipe_info+0xf3/0x3d0 [ 1908.842494][T20221] splice_direct_to_actor+0x4b8/0x540 [ 1908.842518][T20221] ? apparmor_file_permission+0x35/0x40 [ 1908.842539][T20221] ? security_file_permission+0x86/0x270 [ 1908.842557][T20221] ? generic_pipe_buf_nosteal+0x20/0x20 [ 1908.842579][T20221] do_splice_direct+0x152/0x1d0 [ 1908.842607][T20221] do_sendfile+0x396/0x810 [ 1908.842647][T20221] __x64_sys_sendfile64+0x121/0x140 [ 1908.842673][T20221] do_syscall_64+0xc7/0x390 [ 1908.842700][T20221] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1908.842712][T20221] RIP: 0033:0x45c889 03:01:50 executing program 0 (fault-call:2 fault-nth:1): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) [ 1908.842741][T20221] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1908.842751][T20221] RSP: 002b:00007f151c1e1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1908.842770][T20221] RAX: ffffffffffffffda RBX: 00007f151c1e26d4 RCX: 000000000045c889 [ 1908.842781][T20221] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 1908.842791][T20221] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1908.842802][T20221] R10: 0800000080004103 R11: 0000000000000246 R12: 0000000000000005 [ 1908.842811][T20221] R13: 00000000000008d4 R14: 00000000004cb7c6 R15: 0000000000000000 [ 1908.898916][ T27] audit: type=1804 audit(1586660510.628:4082): pid=20226 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir209219610/syzkaller.nCjs6O/664/file0" dev="sda1" ino=16817 res=1 03:01:50 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4400) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, 0x0) write(r2, &(0x7f0000000600)="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", 0x200) sendfile(r2, r3, 0x0, 0x7fffffff) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r4, r2, 0x0, 0xffffff38) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={r6, 0x6, 0x0, 0xb5}, 0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000140)={r6, @in6={{0xa, 0x0, 0x1ff, @loopback}}, 0x2, 0x2}, &(0x7f0000000240)=0x90) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f00000000c0)={r6, @in6={{0xa, 0x4e20, 0x4, @rand_addr="00e01683a1fb71f08d2d64e75bd76fed", 0x6}}, 0x7, 0xc9}, &(0x7f0000000040)=0x90) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000180)={r7, 0x9}, 0x8) [ 1909.114276][T20243] FAULT_INJECTION: forcing a failure. [ 1909.114276][T20243] name failslab, interval 1, probability 0, space 0, times 0 [ 1909.114298][T20243] CPU: 1 PID: 20243 Comm: syz-executor.0 Not tainted 5.6.0-rc1-syzkaller #0 03:01:51 executing program 4: r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000180)={0x4000000, 0x9}) sendfile(r2, r0, 0x0, 0xffffff38) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000000)=[0xed2, 0x7f]) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x448040, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000280)={0x0, 0x1, "1369720fbabe85a96c21c07b86c582a24b8899ac7761506a1b45ecc908f36779a4f06be2cb2bef1af3ccd74aa5d0945aba3cd7188673a7d6be2e5ff7d8b73f94baf025a9feb87e739337520f2254fd221de7770e32333413cbf94685bc8faab64e61e592b5aaaa588a807bd387b854879f197522f7f6379d72399f43e855473efb6ad7411a057adb047faf7bec1c7c1a9f281ca930621fd6e4a5cafc88bc67aa9401aadcc3fbc2003c1a60abd681b6d7bb608d7715e54aa7f40fd55d31c09608d42f626fa4f534276fbcc96065ddc763b0cba125d4e8e9fed1c61bcb9b831da460b0b831d3e3f4aef758ab12013aba9b0f4c308fc924dd0600429b4944c5f8d6"}) r4 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r4, &(0x7f0000000600)="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", 0x200) sendfile(r4, r5, 0x0, 0x7fffffff) r6 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r6, r4, 0x0, 0xffffff38) 03:01:51 executing program 0 (fault-call:2 fault-nth:2): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) [ 1909.114309][T20243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1909.114313][T20243] Call Trace: [ 1909.114409][T20243] dump_stack+0x11d/0x187 [ 1909.114489][T20243] should_fail.cold+0x5/0xf [ 1909.114519][T20243] __should_failslab+0x82/0xb0 [ 1909.114537][T20243] should_failslab+0x5/0xf [ 1909.114554][T20243] __kmalloc+0x54/0x640 [ 1909.114573][T20243] ? kmem_cache_alloc_trace+0x1e1/0x5f0 [ 1909.114593][T20243] ? alloc_pipe_info+0x205/0x3d0 [ 1909.114621][T20243] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1909.114645][T20243] alloc_pipe_info+0x205/0x3d0 [ 1909.114712][T20243] splice_direct_to_actor+0x4b8/0x540 [ 1909.114736][T20243] ? apparmor_file_permission+0x35/0x40 [ 1909.114759][T20243] ? security_file_permission+0x86/0x270 [ 1909.114779][T20243] ? generic_pipe_buf_nosteal+0x20/0x20 [ 1909.114813][T20243] do_splice_direct+0x152/0x1d0 [ 1909.114838][T20243] do_sendfile+0x396/0x810 [ 1909.114871][T20243] __x64_sys_sendfile64+0x121/0x140 [ 1909.114896][T20243] do_syscall_64+0xc7/0x390 [ 1909.114922][T20243] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1909.114934][T20243] RIP: 0033:0x45c889 [ 1909.114986][T20243] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1909.115058][T20243] RSP: 002b:00007f151c1e1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1909.115075][T20243] RAX: ffffffffffffffda RBX: 00007f151c1e26d4 RCX: 000000000045c889 [ 1909.115083][T20243] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 1909.115093][T20243] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1909.115124][T20243] R10: 0800000080004103 R11: 0000000000000246 R12: 0000000000000005 [ 1909.115135][T20243] R13: 00000000000008d4 R14: 00000000004cb7c6 R15: 0000000000000001 [ 1909.297295][T20251] FAULT_INJECTION: forcing a failure. [ 1909.297295][T20251] name failslab, interval 1, probability 0, space 0, times 0 [ 1909.297317][T20251] CPU: 1 PID: 20251 Comm: syz-executor.0 Not tainted 5.6.0-rc1-syzkaller #0 [ 1909.297393][T20251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1909.297398][T20251] Call Trace: [ 1909.297486][T20251] dump_stack+0x11d/0x187 [ 1909.297511][T20251] should_fail.cold+0x5/0xf [ 1909.297540][T20251] __should_failslab+0x82/0xb0 [ 1909.297559][T20251] should_failslab+0x5/0xf [ 1909.297580][T20251] kmem_cache_alloc_node_trace+0x37/0x610 [ 1909.297661][T20251] kvmalloc_node+0x6b/0x100 [ 1909.297686][T20251] iov_iter_get_pages_alloc+0x466/0xaa0 [ 1909.297738][T20251] default_file_splice_read+0xd5/0x590 [ 1909.297757][T20251] ? aa_file_perm+0x401/0xb20 [ 1909.297790][T20251] ? fsnotify+0x6ab/0x7d0 [ 1909.297822][T20251] ? security_file_permission+0x86/0x270 [ 1909.297845][T20251] ? rw_verify_area+0xe5/0x230 [ 1909.297865][T20251] ? iter_file_splice_write+0x830/0x830 [ 1909.297892][T20251] do_splice_to+0xc7/0x100 [ 1909.297913][T20251] splice_direct_to_actor+0x1b9/0x540 [ 1909.297938][T20251] ? generic_pipe_buf_nosteal+0x20/0x20 [ 1909.297960][T20251] do_splice_direct+0x152/0x1d0 [ 1909.297987][T20251] do_sendfile+0x396/0x810 [ 1909.298020][T20251] __x64_sys_sendfile64+0x121/0x140 [ 1909.298115][T20251] do_syscall_64+0xc7/0x390 [ 1909.298140][T20251] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1909.298152][T20251] RIP: 0033:0x45c889 [ 1909.298219][T20251] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1909.298229][T20251] RSP: 002b:00007f151c1e1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1909.298248][T20251] RAX: ffffffffffffffda RBX: 00007f151c1e26d4 RCX: 000000000045c889 [ 1909.298259][T20251] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 1909.298269][T20251] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1909.298279][T20251] R10: 0800000080004103 R11: 0000000000000246 R12: 0000000000000005 [ 1909.298290][T20251] R13: 00000000000008d4 R14: 00000000004cb7c6 R15: 0000000000000002 [ 1909.347735][ T27] audit: type=1804 audit(1586660510.658:4083): pid=20228 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir932491758/syzkaller.D6Mno2/503/file0" dev="sda1" ino=16833 res=1 [ 1909.718141][ T27] audit: type=1804 audit(1586660510.668:4084): pid=20228 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir932491758/syzkaller.D6Mno2/503/file0" dev="sda1" ino=16833 res=1 [ 1909.718161][ T27] audit: type=1804 audit(1586660510.698:4085): pid=20228 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir932491758/syzkaller.D6Mno2/503/file0" dev="sda1" ino=16833 res=1 [ 1909.718198][ T27] audit: type=1804 audit(1586660510.698:4086): pid=20228 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir932491758/syzkaller.D6Mno2/503/file0" dev="sda1" ino=16833 res=1 [ 1909.795461][ T27] audit: type=1804 audit(1586660510.698:4087): pid=20228 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir932491758/syzkaller.D6Mno2/503/file0" dev="sda1" ino=16833 res=1 [ 1909.823413][ T27] audit: type=1804 audit(1586660510.708:4088): pid=20232 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir209219610/syzkaller.nCjs6O/664/file0" dev="sda1" ino=16817 res=1 [ 1909.847995][ T27] audit: type=1804 audit(1586660510.838:4089): pid=20239 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir932491758/syzkaller.D6Mno2/504/file0" dev="sda1" ino=16833 res=1 [ 1909.872436][ T27] audit: type=1804 audit(1586660511.078:4090): pid=20247 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="file0" dev="sda1" ino=16537 res=1 03:01:59 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, 0x0) sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'essiv(gcm(twofish-generic),blake2s-160-x86)\x00'}, 0x58) syz_mount_image$nfs4(0x0, 0x0, 0x2, 0x2, &(0x7f0000000340)=[{&(0x7f00000002c0)="84a4cadec83582e6d9321b47a05ef7b741ae24a9473f249e5fb21de6", 0x1c, 0x7}, {&(0x7f0000000300)="0f", 0x1, 0xff}], 0x400, &(0x7f0000000380)='aead\x00') 03:01:59 executing program 0 (fault-call:2 fault-nth:3): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 03:01:59 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) r3 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) ioctl$SG_SET_DEBUG(r2, 0x227e, &(0x7f0000000140)) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, 0x0) write(r3, &(0x7f0000000600)="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", 0x200) sendfile(r3, r4, 0x0, 0x7fffffff) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r5, r3, 0x0, 0xffffff38) sendmsg$AUDIT_LIST_RULES(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x3f5, 0x400, 0x70bd29, 0x25dfdbfe, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000040)=0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x6, 0x4, 0x96, 0x1, 0x0, 0x9eed, 0x0, 0xa, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x4cac, 0xfffffffffffffff8, 0x1, 0x9, 0x5, 0x3ff, 0x5}, r6, 0x6, r0, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) 03:01:59 executing program 3: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000000000)) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r2, r0, 0x0, 0xffffff38) 03:01:59 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f00000000c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) bind$alg(0xffffffffffffffff, 0x0, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, 0x0) write(r2, &(0x7f0000000600)="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", 0x200) sendfile(r2, r3, 0x0, 0x7fffffff) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r4, r2, 0x0, 0xffffff38) ioctl$RTC_AIE_OFF(r2, 0x7002) 03:01:59 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r2, r0, 0x0, 0xffffff38) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{@fixed}]}) [ 1917.389787][T20273] FAULT_INJECTION: forcing a failure. [ 1917.389787][T20273] name failslab, interval 1, probability 0, space 0, times 0 [ 1917.426936][ T27] kauditd_printk_skb: 13 callbacks suppressed [ 1917.426953][ T27] audit: type=1800 audit(1586660519.258:4104): pid=20277 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16850 res=0 [ 1917.429732][ T27] audit: type=1804 audit(1586660519.258:4105): pid=20277 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir932491758/syzkaller.D6Mno2/506/file0" dev="sda1" ino=16850 res=1 [ 1917.435161][T20273] CPU: 0 PID: 20273 Comm: syz-executor.0 Not tainted 5.6.0-rc1-syzkaller #0 [ 1917.487131][T20273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1917.497176][T20273] Call Trace: [ 1917.500508][T20273] dump_stack+0x11d/0x187 [ 1917.504866][T20273] should_fail.cold+0x5/0xf [ 1917.509373][T20273] __should_failslab+0x82/0xb0 [ 1917.514130][T20273] should_failslab+0x5/0xf [ 1917.518631][T20273] kmem_cache_alloc_node_trace+0x37/0x610 [ 1917.524359][T20273] ? preempt_count_add+0x44/0x90 [ 1917.529302][T20273] ? kernel_init_free_pages+0x72/0xa0 [ 1917.534683][T20273] kvmalloc_node+0x6b/0x100 [ 1917.539184][T20273] iov_iter_get_pages_alloc+0x466/0xaa0 [ 1917.544744][T20273] default_file_splice_read+0xd5/0x590 [ 1917.550258][T20273] ? aa_file_perm+0x401/0xb20 [ 1917.555058][T20273] ? __this_cpu_preempt_check+0x3c/0x130 [ 1917.560700][T20273] ? fsnotify+0x6ab/0x7d0 [ 1917.565060][T20273] ? security_file_permission+0x86/0x270 [ 1917.570698][T20273] ? rw_verify_area+0xe5/0x230 [ 1917.575456][T20273] ? iter_file_splice_write+0x830/0x830 [ 1917.581005][T20273] do_splice_to+0xc7/0x100 [ 1917.585461][T20273] splice_direct_to_actor+0x1b9/0x540 [ 1917.590833][T20273] ? generic_pipe_buf_nosteal+0x20/0x20 [ 1917.596378][T20273] do_splice_direct+0x152/0x1d0 [ 1917.601231][T20273] do_sendfile+0x396/0x810 [ 1917.605689][T20273] __x64_sys_sendfile64+0x121/0x140 [ 1917.610909][T20273] do_syscall_64+0xc7/0x390 [ 1917.615436][T20273] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1917.621327][T20273] RIP: 0033:0x45c889 [ 1917.625234][T20273] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1917.644842][T20273] RSP: 002b:00007f151c1e1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1917.653290][T20273] RAX: ffffffffffffffda RBX: 00007f151c1e26d4 RCX: 000000000045c889 [ 1917.661260][T20273] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 1917.669225][T20273] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1917.677223][T20273] R10: 0800000080004103 R11: 0000000000000246 R12: 0000000000000005 [ 1917.685192][T20273] R13: 00000000000008d4 R14: 00000000004cb7c6 R15: 0000000000000003 03:01:59 executing program 3 (fault-call:4 fault-nth:0): r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f00000000c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) [ 1917.712809][ T27] audit: type=1804 audit(1586660519.538:4106): pid=20281 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir932491758/syzkaller.D6Mno2/506/file0" dev="sda1" ino=16850 res=1 [ 1917.746500][ T27] audit: type=1800 audit(1586660519.578:4107): pid=20283 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=16537 res=0 [ 1917.754780][ T27] audit: type=1804 audit(1586660519.588:4108): pid=20283 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir057656323/syzkaller.yzn8jn/420/file0" dev="sda1" ino=16537 res=1 03:01:59 executing program 0 (fault-call:2 fault-nth:4): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) [ 1917.814910][ T27] audit: type=1804 audit(1586660519.648:4109): pid=20287 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir057656323/syzkaller.yzn8jn/420/file0" dev="sda1" ino=16537 res=1 [ 1917.875846][ T27] audit: type=1804 audit(1586660519.708:4110): pid=20279 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="file0" dev="sda1" ino=16851 res=1 03:01:59 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0xe1724, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, 0x0) write(r2, &(0x7f0000000600)="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", 0x200) sendfile(r2, r3, 0x0, 0x7fffffff) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r4, r2, 0x0, 0xffffff38) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x7a56842272f62ff1) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r6, 0x8982, &(0x7f0000000000)={0x6, 'geneve1\x00', {0x3f}, 0x7}) sendfile(r5, r6, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) 03:01:59 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f00000000c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) [ 1918.046956][T20296] FAULT_INJECTION: forcing a failure. [ 1918.046956][T20296] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1918.061934][T20296] CPU: 0 PID: 20296 Comm: syz-executor.0 Not tainted 5.6.0-rc1-syzkaller #0 [ 1918.070619][T20296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1918.080669][T20296] Call Trace: [ 1918.083975][T20296] dump_stack+0x11d/0x187 [ 1918.088342][T20296] should_fail.cold+0x5/0xf [ 1918.092908][T20296] __alloc_pages_nodemask+0xcf/0x310 [ 1918.098211][T20296] alloc_pages_current+0xca/0x170 [ 1918.103250][T20296] push_pipe+0x18b/0x340 [ 1918.107521][T20296] iov_iter_get_pages_alloc+0x4c0/0xaa0 [ 1918.113092][T20296] default_file_splice_read+0xd5/0x590 [ 1918.118563][T20296] ? aa_file_perm+0x401/0xb20 [ 1918.123354][T20296] ? fsnotify+0x6ab/0x7d0 [ 1918.127705][T20296] ? security_file_permission+0x86/0x270 [ 1918.133354][T20296] ? rw_verify_area+0xe5/0x230 [ 1918.138124][T20296] ? iter_file_splice_write+0x830/0x830 [ 1918.143686][T20296] do_splice_to+0xc7/0x100 [ 1918.148117][T20296] splice_direct_to_actor+0x1b9/0x540 [ 1918.153505][T20296] ? generic_pipe_buf_nosteal+0x20/0x20 [ 1918.159063][T20296] do_splice_direct+0x152/0x1d0 [ 1918.163943][T20296] do_sendfile+0x396/0x810 [ 1918.168389][T20296] __x64_sys_sendfile64+0x121/0x140 [ 1918.173604][T20296] do_syscall_64+0xc7/0x390 [ 1918.178123][T20296] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1918.184017][T20296] RIP: 0033:0x45c889 [ 1918.187921][T20296] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1918.207531][T20296] RSP: 002b:00007f151c1e1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1918.215952][T20296] RAX: ffffffffffffffda RBX: 00007f151c1e26d4 RCX: 000000000045c889 [ 1918.223917][T20296] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 1918.231889][T20296] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1918.239863][T20296] R10: 0800000080004103 R11: 0000000000000246 R12: 0000000000000005 [ 1918.247824][T20296] R13: 00000000000008d4 R14: 00000000004cb7c6 R15: 0000000000000004 [ 1918.257799][ T27] audit: type=1800 audit(1586660519.898:4111): pid=20298 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=16723 res=0 [ 1918.325707][ T27] audit: type=1804 audit(1586660519.898:4112): pid=20298 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="file0" dev="sda1" ino=16723 res=1 [ 1918.346464][ T27] audit: type=1804 audit(1586660519.898:4113): pid=20301 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="file0" dev="sda1" ino=16723 res=1 03:02:00 executing program 0 (fault-call:2 fault-nth:5): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 03:02:00 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x100000000, 0x22001) recvfrom$unix(r1, &(0x7f0000000100)=""/151, 0x97, 0x0, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r2, 0x0, 0x800000080004103) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f00000000c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) bind$alg(0xffffffffffffffff, 0x0, 0x0) [ 1918.482681][T20310] FAULT_INJECTION: forcing a failure. [ 1918.482681][T20310] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1918.514497][T20310] CPU: 1 PID: 20310 Comm: syz-executor.0 Not tainted 5.6.0-rc1-syzkaller #0 [ 1918.523225][T20310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1918.533282][T20310] Call Trace: [ 1918.536728][T20310] dump_stack+0x11d/0x187 [ 1918.541119][T20310] should_fail.cold+0x5/0xf [ 1918.545643][T20310] __alloc_pages_nodemask+0xcf/0x310 [ 1918.551141][T20310] alloc_pages_current+0xca/0x170 [ 1918.556288][T20310] push_pipe+0x18b/0x340 [ 1918.560551][T20310] iov_iter_get_pages_alloc+0x4c0/0xaa0 [ 1918.566116][T20310] default_file_splice_read+0xd5/0x590 [ 1918.571665][T20310] ? aa_file_perm+0x401/0xb20 [ 1918.576541][T20310] ? fsnotify+0x6ab/0x7d0 [ 1918.581053][T20310] ? security_file_permission+0x86/0x270 [ 1918.586756][T20310] ? rw_verify_area+0xe5/0x230 [ 1918.591550][T20310] ? iter_file_splice_write+0x830/0x830 [ 1918.598244][T20310] do_splice_to+0xc7/0x100 [ 1918.602733][T20310] splice_direct_to_actor+0x1b9/0x540 [ 1918.608262][T20310] ? generic_pipe_buf_nosteal+0x20/0x20 [ 1918.613849][T20310] do_splice_direct+0x152/0x1d0 [ 1918.618761][T20310] do_sendfile+0x396/0x810 [ 1918.623426][T20310] __x64_sys_sendfile64+0x121/0x140 [ 1918.628771][T20310] do_syscall_64+0xc7/0x390 [ 1918.633305][T20310] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1918.639219][T20310] RIP: 0033:0x45c889 [ 1918.643217][T20310] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1918.643227][T20310] RSP: 002b:00007f151c1e1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1918.643286][T20310] RAX: ffffffffffffffda RBX: 00007f151c1e26d4 RCX: 000000000045c889 [ 1918.643295][T20310] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 1918.643304][T20310] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1918.643314][T20310] R10: 0800000080004103 R11: 0000000000000246 R12: 0000000000000005 [ 1918.643325][T20310] R13: 00000000000008d4 R14: 00000000004cb7c6 R15: 0000000000000005 03:02:08 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, 0x0) sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'essiv(gcm(twofish-generic),blake2s-160-x86)\x00'}, 0x58) syz_mount_image$nfs4(0x0, 0x0, 0x2, 0x2, &(0x7f0000000340)=[{&(0x7f00000002c0)="84a4cadec83582e6d9321b47a05ef7b741ae24a9473f249e5fb21de600c3", 0x1e, 0x7}, {&(0x7f0000000300)="0f", 0x1, 0xff}], 0x400, &(0x7f0000000380)='aead\x00') 03:02:08 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) write(r0, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r2, r0, 0x0, 0xffffff38) 03:02:08 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r3, r1, 0x0, 0xffffff38) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffff38) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='\a\x00J\x00', @ANYRES16=r4, @ANYBLOB="000129bd7000fedbdf25030000002700070073797374656d5f753a6f626a6563745f723a6175646973705f657865635f743a733000001400060069703667726574617030000000000000140006006e7230000000000000000000000000002200070073797374656d5f753a6f626a6563745f723a6465766c6f675f743a7330000000"], 0x88}, 0x1, 0x0, 0x0, 0x48c0}, 0x40005) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r4, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x4000896) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x1) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004103) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f00000000c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) 03:02:08 executing program 0 (fault-call:2 fault-nth:6): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 03:02:08 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) r2 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, 0x0) write(r2, &(0x7f0000000600)="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", 0x200) sendfile(r2, r3, 0x0, 0x7fffffff) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r4, r2, 0x0, 0xffffff38) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffff38) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@dev, @in6=@mcast1}}, {{}, 0x0, @in6=@empty}}, &(0x7f0000000380)=0xe8) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000000200)={0x5, &(0x7f00000001c0)=[{0x7, 0x8}, {0x9}, {0xfffa, 0x8}, {0x1, 0x1f}, {0x8001, 0x5}]}) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000bd7000fddbdf25080001000100000008000100020000000e0001000000000008000100020000000800010000000000080001000200"/65], 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x2841) syz_open_dev$tty1(0xc, 0x4, 0x1) bind$alg(0xffffffffffffffff, 0x0, 0x0) 03:02:08 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x1852, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x4, @perf_bp={&(0x7f0000000000), 0x6}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) [ 1926.587840][T20329] FAULT_INJECTION: forcing a failure. [ 1926.587840][T20329] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1926.606226][T20329] CPU: 0 PID: 20329 Comm: syz-executor.0 Not tainted 5.6.0-rc1-syzkaller #0 [ 1926.615984][T20329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1926.626055][T20329] Call Trace: [ 1926.629364][T20329] dump_stack+0x11d/0x187 [ 1926.633710][T20329] should_fail.cold+0x5/0xf [ 1926.638259][T20329] __alloc_pages_nodemask+0xcf/0x310 [ 1926.643552][T20329] alloc_pages_current+0xca/0x170 [ 1926.648575][T20329] push_pipe+0x18b/0x340 [ 1926.652823][T20329] iov_iter_get_pages_alloc+0x4c0/0xaa0 [ 1926.658437][T20329] default_file_splice_read+0xd5/0x590 [ 1926.663895][T20329] ? aa_file_perm+0x401/0xb20 [ 1926.668587][T20329] ? fsnotify+0x6ab/0x7d0 [ 1926.672944][T20329] ? security_file_permission+0x86/0x270 [ 1926.678730][T20329] ? rw_verify_area+0xe5/0x230 [ 1926.683490][T20329] ? iter_file_splice_write+0x830/0x830 [ 1926.689037][T20329] do_splice_to+0xc7/0x100 [ 1926.693454][T20329] splice_direct_to_actor+0x1b9/0x540 [ 1926.698826][T20329] ? generic_pipe_buf_nosteal+0x20/0x20 [ 1926.704437][T20329] do_splice_direct+0x152/0x1d0 [ 1926.709325][T20329] do_sendfile+0x396/0x810 [ 1926.713747][T20329] __x64_sys_sendfile64+0x121/0x140 [ 1926.719234][T20329] do_syscall_64+0xc7/0x390 [ 1926.723737][T20329] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1926.729620][T20329] RIP: 0033:0x45c889 [ 1926.733515][T20329] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1926.753242][T20329] RSP: 002b:00007f151c1e1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1926.762081][T20329] RAX: ffffffffffffffda RBX: 00007f151c1e26d4 RCX: 000000000045c889 [ 1926.770071][T20329] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 1926.778094][T20329] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1926.786063][T20329] R10: 0800000080004103 R11: 0000000000000246 R12: 0000000000000005 [ 1926.794102][T20329] R13: 00000000000008d4 R14: 00000000004cb7c6 R15: 0000000000000006 [ 1926.824850][ T27] kauditd_printk_skb: 8 callbacks suppressed 03:02:08 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') dup(r0) sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) [ 1926.824888][ T27] audit: type=1800 audit(1586660528.658:4122): pid=20339 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16977 res=0 [ 1926.979606][ T27] audit: type=1804 audit(1586660528.658:4123): pid=20339 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir209219610/syzkaller.nCjs6O/668/file0" dev="sda1" ino=16977 res=1 03:02:08 executing program 0 (fault-call:2 fault-nth:7): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 03:02:08 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') r2 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, 0x0) write(r2, &(0x7f0000000600)="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", 0x200) sendfile(r2, r3, 0x0, 0x7fffffff) sendfile(r1, r3, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) [ 1927.099161][ T27] audit: type=1800 audit(1586660528.698:4124): pid=20340 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16526 res=0 [ 1927.210983][ T27] audit: type=1804 audit(1586660528.708:4125): pid=20340 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir932491758/syzkaller.D6Mno2/507/file0" dev="sda1" ino=16526 res=1 [ 1927.390096][ T27] audit: type=1804 audit(1586660528.758:4126): pid=20341 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir209219610/syzkaller.nCjs6O/668/file0" dev="sda1" ino=16977 res=1 [ 1927.575909][ T27] audit: type=1800 audit(1586660528.768:4127): pid=20337 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=16728 res=0 03:02:09 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000001, 0x80}, 0x10096, 0x0, 0x0, 0x0, 0x380000000000000, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffff38) ioctl$SIOCX25GCAUSEDIAG(0xffffffffffffffff, 0x89e6, &(0x7f0000000000)={0x9, 0x9}) write(0xffffffffffffffff, &(0x7f0000000600)="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", 0x200) sendfile(0xffffffffffffffff, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) r3 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, 0x0) write(r3, &(0x7f0000000600)="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", 0x200) sendfile(r3, r4, 0x0, 0x7fffffff) sendfile(r2, 0xffffffffffffffff, 0x0, 0xffffffffffffe6e0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x3) fcntl$setstatus(r0, 0x4, 0x2000) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004103) [ 1927.576009][ T27] audit: type=1804 audit(1586660528.778:4128): pid=20340 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir932491758/syzkaller.D6Mno2/507/file0" dev="sda1" ino=16526 res=1 03:02:09 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r2, r0, 0x0, 0xffffff38) r3 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, 0x0) write(r3, &(0x7f0000000600)="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", 0x200) sendfile(r3, r4, 0x0, 0x7fffffff) getdents(r4, &(0x7f0000000180)=""/107, 0x6b) 03:02:09 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$kcm(0x10, 0x2, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x68, r3, 0x8b8e0eb13081c495, 0x0, 0x0, {{}, {0x0, 0x4109}, {0x4c, 0x18, {0x114, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x34, r3, 0x0, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x1b, 0xe9, @udp='udp:syz0\x00'}}}, ["", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x20048080}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r4, 0x0, 0x800000080004103) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f00000000c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) get_mempolicy(&(0x7f00000001c0), &(0x7f0000000240), 0x1, &(0x7f0000ffd000/0x2000)=nil, 0x4) ioctl$VT_OPENQRY(r4, 0x5600, &(0x7f0000000180)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) write(0xffffffffffffffff, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7fffffff) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r5, 0xffffffffffffffff, 0x0, 0xffffff38) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000002c0)={0x4, &(0x7f0000000280)=[0x0, 0x3, 0x8000, 0x7]}) [ 1927.576058][ T27] audit: type=1804 audit(1586660528.788:4129): pid=20333 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir057656323/syzkaller.yzn8jn/422/file0" dev="sda1" ino=16728 res=1 [ 1927.576108][ T27] audit: type=1804 audit(1586660528.858:4130): pid=20337 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir057656323/syzkaller.yzn8jn/422/file0" dev="sda1" ino=16728 res=1 [ 1927.576156][ T27] audit: type=1804 audit(1586660529.338:4131): pid=20349 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="file0" dev="sda1" ino=17032 res=1 [ 1927.624300][T20355] FAULT_INJECTION: forcing a failure. [ 1927.624300][T20355] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1927.624323][T20355] CPU: 1 PID: 20355 Comm: syz-executor.0 Not tainted 5.6.0-rc1-syzkaller #0 [ 1927.624334][T20355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1927.624338][T20355] Call Trace: [ 1927.624367][T20355] dump_stack+0x11d/0x187 [ 1927.624393][T20355] should_fail.cold+0x5/0xf [ 1927.624426][T20355] __alloc_pages_nodemask+0xcf/0x310 [ 1927.624456][T20355] alloc_pages_current+0xca/0x170 [ 1927.624490][T20355] push_pipe+0x18b/0x340 [ 1927.624534][T20355] iov_iter_get_pages_alloc+0x4c0/0xaa0 [ 1927.624564][T20355] default_file_splice_read+0xd5/0x590 [ 1927.624584][T20355] ? aa_file_perm+0x401/0xb20 [ 1927.624610][T20355] ? delay_tsc+0x8a/0xb0 [ 1927.624627][T20355] ? fsnotify+0x6ab/0x7d0 [ 1927.624722][T20355] ? security_file_permission+0x86/0x270 [ 1927.624748][T20355] ? rw_verify_area+0xe5/0x230 [ 1927.624765][T20355] ? iter_file_splice_write+0x830/0x830 [ 1927.624785][T20355] do_splice_to+0xc7/0x100 [ 1927.624807][T20355] splice_direct_to_actor+0x1b9/0x540 [ 1927.624830][T20355] ? generic_pipe_buf_nosteal+0x20/0x20 [ 1927.624853][T20355] do_splice_direct+0x152/0x1d0 [ 1927.624893][T20355] do_sendfile+0x396/0x810 [ 1927.624925][T20355] __x64_sys_sendfile64+0x121/0x140 [ 1927.624950][T20355] do_syscall_64+0xc7/0x390 [ 1927.625022][T20355] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1927.625035][T20355] RIP: 0033:0x45c889 [ 1927.625057][T20355] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1927.625066][T20355] RSP: 002b:00007f151c1e1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1927.625083][T20355] RAX: ffffffffffffffda RBX: 00007f151c1e26d4 RCX: 000000000045c889 [ 1927.625093][T20355] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 1927.625102][T20355] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1927.625113][T20355] R10: 0800000080004103 R11: 0000000000000246 R12: 0000000000000005 [ 1927.625123][T20355] R13: 00000000000008d4 R14: 00000000004cb7c6 R15: 0000000000000007 03:02:16 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, 0x0) sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'essiv(gcm(twofish-generic),blake2s-160-x86)\x00'}, 0x58) syz_mount_image$nfs4(0x0, 0x0, 0x2, 0x2, &(0x7f0000000340)=[{&(0x7f00000002c0)="84a4cadec83582e6d9321b47a05ef7b741ae24a9473f249e5fb21de600c3", 0x1e, 0x7}, {&(0x7f0000000300)="0f", 0x1, 0xff}], 0x400, &(0x7f0000000380)='aead\x00') 03:02:16 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={r2, 0x6, 0x0, 0xb5}, 0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000140)={r2, @in6={{0xa, 0x0, 0x1ff, @loopback}}, 0x2, 0x2}, &(0x7f0000000240)=0x90) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={r2, 0x7c38}, 0x8) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffc9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xcb, 0x3000000}, 0x851a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x2000) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004103) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) io_submit(0x0, 0x2, &(0x7f0000000440)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000)="6fb29fad0ee144228e015bb6f2ea47f60800", 0x12}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x6, 0x5, 0xffffffffffffffff, &(0x7f0000000300)="30673c5a2be58fd9bb639aa492682e036bb2339b8704a7b77cb76965b34d6509b9764ab0f7302385d13a69dde4fe490117a346ad303394ad12d2596cb8cac2abb70c48ddc49a83e2e7cd8d2c59a0c47e25b86ebba2cbcf64db2c6a2a1d78e4631acf713167ebda921309320f0b367ee0e3ade8c58622e6be71a17a5455bc2d79644f74c7cfd4617b00e04aa98ffd2d2606d36b2a26df7eecc2f242d04941cd7c03ec067753553b0a6435e09b617146b1698f15fc51b3a569eea7c94f9f36e894aec57c3403176682d8e471d05b21a5cc300435a2eec71136bb3dc759a48244fcb1596fa75a0ef51e63b1647726451ed6dca4fbc4ab26c4662f", 0xf9, 0xffff, 0x0, 0x1}]) r6 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, 0x0) write(r6, &(0x7f0000000600)="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", 0x200) sendfile(r6, r7, 0x0, 0x7fffffff) io_cancel(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x6, r7, &(0x7f0000000200)="77e4d923fc884f7b0e6744d0c9ae0dbee512da04", 0x14, 0x4, 0x0, 0x2, r1}, &(0x7f00000002c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) 03:02:16 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1a) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000100)={0x80, 0x81, 0x0, 0x100}) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x79, 0x10040) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f00000000c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) 03:02:16 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r3, r1, 0x0, 0xffffff38) ioctl$DRM_IOCTL_MODE_GETGAMMA(r3, 0xc02064a4, &(0x7f0000000140)={0xa8c4, 0x5, &(0x7f0000000000)=[0xb962, 0x8000, 0x7, 0x1, 0x5], &(0x7f0000000040)=[0x3, 0x3ff, 0x401, 0x9, 0x8, 0x6, 0x0], &(0x7f0000000100)=[0x613d]}) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r4, 0x0, 0x800000080004103) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f00000000c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) bind$alg(0xffffffffffffffff, 0x0, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r5, 0xffffffffffffffff, 0x0, 0xffffff38) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000180)={0x28, 0x0, 0x2710, @hyper}, 0x10, 0x80800) 03:02:16 executing program 0 (fault-call:2 fault-nth:8): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 03:02:16 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0xd}, 0x0, 0x4630, 0x0, 0x9}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x200701, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x4e22, 0x0, @mcast2}, {0x2, 0x420, 0x0, @initdev={0xfe, 0x88, [], 0x5, 0x0}, 0x7ffffd}, r1}}, 0x48) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000180)={0x10, 0x30, 0xfa00, {&(0x7f00000000c0), 0x4, {0xa, 0x4e22, 0xf7, @mcast2, 0x5}, r1}}, 0x38) r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x42040, 0x0) write(r0, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r0, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x220042, 0xca) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r4, 0xffffffffffffffff, 0x0, 0xffffff3c) r5 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, 0x0) write(r5, &(0x7f0000000600)="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", 0x200) sendfile(r5, r6, 0x0, 0x7fffffff) pidfd_getfd(0xffffffffffffffff, r6, 0x0) sendfile(r3, r0, 0x0, 0xffffff38) [ 1935.187870][ T27] kauditd_printk_skb: 16 callbacks suppressed [ 1935.187888][ T27] audit: type=1800 audit(1586660537.018:4148): pid=20392 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=16738 res=0 [ 1935.240746][T20396] FAULT_INJECTION: forcing a failure. [ 1935.240746][T20396] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1935.279959][T20396] CPU: 1 PID: 20396 Comm: syz-executor.0 Not tainted 5.6.0-rc1-syzkaller #0 [ 1935.288664][T20396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1935.298715][T20396] Call Trace: [ 1935.302019][T20396] dump_stack+0x11d/0x187 [ 1935.306366][T20396] should_fail.cold+0x5/0xf [ 1935.307543][ T27] audit: type=1804 audit(1586660537.048:4149): pid=20392 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="file0" dev="sda1" ino=16738 res=1 [ 1935.310980][T20396] __alloc_pages_nodemask+0xcf/0x310 [ 1935.311010][T20396] alloc_pages_current+0xca/0x170 [ 1935.311038][T20396] push_pipe+0x18b/0x340 [ 1935.334697][ T27] audit: type=1800 audit(1586660537.068:4150): pid=20397 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16740 res=0 [ 1935.337141][T20396] iov_iter_get_pages_alloc+0x4c0/0xaa0 [ 1935.337255][T20396] default_file_splice_read+0xd5/0x590 [ 1935.342573][ T27] audit: type=1800 audit(1586660537.088:4151): pid=20393 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=16739 res=0 [ 1935.346433][T20396] ? aa_file_perm+0x401/0xb20 [ 1935.346462][T20396] ? fsnotify+0x6ab/0x7d0 [ 1935.391012][ T27] audit: type=1804 audit(1586660537.098:4152): pid=20399 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir057656323/syzkaller.yzn8jn/423/file0" dev="sda1" ino=16739 res=1 [ 1935.398473][T20396] ? security_file_permission+0x86/0x270 [ 1935.398540][T20396] ? rw_verify_area+0xe5/0x230 [ 1935.403606][ T27] audit: type=1804 audit(1586660537.098:4153): pid=20397 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir932491758/syzkaller.D6Mno2/509/file0" dev="sda1" ino=16740 res=1 [ 1935.407480][T20396] ? iter_file_splice_write+0x830/0x830 [ 1935.407510][T20396] do_splice_to+0xc7/0x100 [ 1935.477566][T20396] splice_direct_to_actor+0x1b9/0x540 [ 1935.477590][T20396] ? generic_pipe_buf_nosteal+0x20/0x20 [ 1935.477614][T20396] do_splice_direct+0x152/0x1d0 [ 1935.477709][T20396] do_sendfile+0x396/0x810 [ 1935.477761][T20396] __x64_sys_sendfile64+0x121/0x140 [ 1935.503042][T20396] do_syscall_64+0xc7/0x390 [ 1935.503067][T20396] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1935.503078][T20396] RIP: 0033:0x45c889 [ 1935.503098][T20396] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:02:17 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') socket(0x26, 0x4, 0x6a9d) sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f00000000c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) [ 1935.503106][T20396] RSP: 002b:00007f151c1e1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1935.503122][T20396] RAX: ffffffffffffffda RBX: 00007f151c1e26d4 RCX: 000000000045c889 [ 1935.503130][T20396] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 1935.503139][T20396] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1935.503147][T20396] R10: 0800000080004103 R11: 0000000000000246 R12: 0000000000000005 [ 1935.503157][T20396] R13: 00000000000008d4 R14: 00000000004cb7c6 R15: 0000000000000008 [ 1935.507716][ T27] audit: type=1804 audit(1586660537.338:4154): pid=20408 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir932491758/syzkaller.D6Mno2/509/file0" dev="sda1" ino=16740 res=1 [ 1935.509895][ T27] audit: type=1804 audit(1586660537.348:4155): pid=20408 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir932491758/syzkaller.D6Mno2/509/file0" dev="sda1" ino=16740 res=1 [ 1935.513459][ T27] audit: type=1804 audit(1586660537.348:4156): pid=20399 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir057656323/syzkaller.yzn8jn/423/file0" dev="sda1" ino=16739 res=1 03:02:17 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) r3 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, 0x0) write(r3, &(0x7f0000000600)="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", 0x200) sendfile(r3, r4, 0x0, 0x7fffffff) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r5, r3, 0x0, 0xffffff38) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f00000000c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) 03:02:17 executing program 0 (fault-call:2 fault-nth:9): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 03:02:17 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1000}, 0x0, 0x4, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f00000000c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) bind$alg(0xffffffffffffffff, 0x0, 0x0) [ 1935.815283][ T27] audit: type=1804 audit(1586660537.348:4157): pid=20405 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir057656323/syzkaller.yzn8jn/423/file0" dev="sda1" ino=16739 res=1 [ 1936.009582][T20427] FAULT_INJECTION: forcing a failure. [ 1936.009582][T20427] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1936.053684][T20427] CPU: 1 PID: 20427 Comm: syz-executor.0 Not tainted 5.6.0-rc1-syzkaller #0 [ 1936.062389][T20427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1936.072445][T20427] Call Trace: [ 1936.075754][T20427] dump_stack+0x11d/0x187 [ 1936.080111][T20427] should_fail.cold+0x5/0xf [ 1936.084708][T20427] __alloc_pages_nodemask+0xcf/0x310 [ 1936.090055][T20427] alloc_pages_current+0xca/0x170 [ 1936.095090][T20427] push_pipe+0x18b/0x340 [ 1936.099397][T20427] iov_iter_get_pages_alloc+0x4c0/0xaa0 [ 1936.104948][T20427] default_file_splice_read+0xd5/0x590 [ 1936.110405][T20427] ? aa_file_perm+0x401/0xb20 [ 1936.115084][T20427] ? fsnotify+0x6ab/0x7d0 [ 1936.119424][T20427] ? security_file_permission+0x86/0x270 [ 1936.125055][T20427] ? rw_verify_area+0xe5/0x230 [ 1936.129813][T20427] ? iter_file_splice_write+0x830/0x830 [ 1936.135357][T20427] do_splice_to+0xc7/0x100 [ 1936.139775][T20427] splice_direct_to_actor+0x1b9/0x540 [ 1936.145156][T20427] ? generic_pipe_buf_nosteal+0x20/0x20 [ 1936.150698][T20427] do_splice_direct+0x152/0x1d0 [ 1936.155547][T20427] do_sendfile+0x396/0x810 [ 1936.159967][T20427] __x64_sys_sendfile64+0x121/0x140 [ 1936.165167][T20427] do_syscall_64+0xc7/0x390 [ 1936.169806][T20427] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1936.175700][T20427] RIP: 0033:0x45c889 [ 1936.179706][T20427] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:02:18 executing program 1: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r0, 0x0, 0x800000080004101) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f00000000c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) bind$alg(0xffffffffffffffff, 0x0, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x1ff) [ 1936.199392][T20427] RSP: 002b:00007f151c1e1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1936.207795][T20427] RAX: ffffffffffffffda RBX: 00007f151c1e26d4 RCX: 000000000045c889 [ 1936.215759][T20427] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 1936.223720][T20427] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1936.231691][T20427] R10: 0800000080004103 R11: 0000000000000246 R12: 0000000000000005 [ 1936.239666][T20427] R13: 00000000000008d4 R14: 00000000004cb7c6 R15: 0000000000000009 03:02:18 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e2, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r3) ioprio_get$uid(0x3, r3) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f00000000c0)='./file0\x00', 0x4, 0x5, &(0x7f0000000440)=[{&(0x7f0000000180)="14501122ed2bef68003a1736180883", 0xf, 0xc000000000000}, {&(0x7f00000001c0)="a1faa6dd871d17f5bff1628461a9764417ed9ee6c428001d774933d083468d8f76a0935cda70939f638bde1dd454c831abe66b62e80c5685ef1e61cb3e1052613d95ce985fa9a2035c77a7d62577a1b86419bc6b53cd190ee1e16b9d60d41262ba326a5642efee5bbbd1502166c3ba93ff9bc311226550fb10b6694e01e6c5fccc2223", 0x83, 0x1f}, {&(0x7f0000000280)="dbfb4de20a36a40d7ea073f38c34e23f4cf3b33c4a9d239105bb6cb6e5c9112e201d7267b557a0193b1b0c11518a596e06ea2a02aed37ef143e171fd8296e7786bf2118ad03c25dc77f8ad71a0b6362df6d2b90ee130f6aaa89dfbde8cfb1e5eefbb5f034d29bba99697e870c340b52e24f491054678ba5b8e017793a08e1b1a0dfdb6aa91deadc3f4f1e742b41386d1bb35a2a35a619f41cd9d8b298c47193689b697d788a30cf00d4827ddad14b5b3138c9b33ad917d55e1d91afdc191b48c41b3e8425ab12c7981c4663892600283e0fddbc2dcb268308862142512589a", 0xdf, 0x967}, {&(0x7f0000000380)="9d9e0ef8d6", 0x5}, {&(0x7f00000003c0)="149a0c1eb5ab6c589cf60cf768c8ebdcec1eac1e2f2e3b6d0e42441581083faf6d2a2032747626e1720d1b118bb12f3f4155f39df1759fe21a7f0f941f840fd7f2b232317f7097c6062ebe618f3bbbd06c82f22a743e0b98626882583e13f07cedc10e73c7cfbf8d3c7cca0e7625a0b94ba945e5e1709414", 0x78, 0x9}], 0x95a20e5964760f0, &(0x7f0000000800)=ANY=[@ANYBLOB="626c6f636b3d3078303030303030303030303030306130302c6d728e9c989f2adc32752257441ca261703d72d0c36b0e04d19d1f066c6f636b2c756964966015172cace286676fe1a445354e782a6cf24f6c84515007c84bc4b5d7e760132f7ef789eb09f5825ac222f217e6193a5e119fdc00abd5675cd9835a543d", @ANYRESDEC=r3, @ANYBLOB=',\x00']) write(r0, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r4, r0, 0x0, 0xffffff38) 03:02:21 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, 0x0) sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'essiv(gcm(twofish-generic),blake2s-160-x86)\x00'}, 0x58) syz_mount_image$nfs4(0x0, 0x0, 0x2, 0x2, &(0x7f0000000340)=[{&(0x7f00000002c0)="84a4cadec83582e6d9321b47a05ef7b741ae24a9473f249e5fb21de600c3", 0x1e, 0x7}, {&(0x7f0000000300)="0f", 0x1, 0xff}], 0x400, &(0x7f0000000380)='aead\x00') 03:02:21 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bsg\x00', 0x40282, 0x0) ftruncate(r3, 0x7) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) getpeername$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000200)=0x14) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x48, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3f, 0x3b}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}]}, 0x48}}, 0x0) sendmsg$IPVS_CMD_ZERO(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="9a0a677d2dba0abeef1b49ac013f97", @ANYRES16=r5, @ANYBLOB="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"], 0x1ac}, 0x1, 0x0, 0x0, 0x4005}, 0x8080) 03:02:21 executing program 0 (fault-call:2 fault-nth:10): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 03:02:21 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44200, 0x0, 0x5, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7fffffff) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r0, 0xffffffffffffffff, 0x0, 0xffffff38) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, 0x0) write(r1, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r3, r1, 0x0, 0xffffff38) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000000)={r0, 0xffffd9f4, 0x7, r3}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') sendfile(r4, r5, 0x0, 0x800000080004103) ioctl$TIOCSPGRP(r4, 0x5410, &(0x7f00000000c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) bind$alg(0xffffffffffffffff, 0x0, 0x0) 03:02:21 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8001}, 0x0, 0xffffffffffffffef, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={r3, 0x6, 0x0, 0xb5}, 0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x9c9, 0x2}, &(0x7f0000000240)=0x90) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r3, 0x2, 0x9}, 0xc) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r4, r0, 0x0, 0xffffff38) fcntl$setstatus(r4, 0x4, 0x44000) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004103) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f00000000c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) 03:02:21 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, &(0x7f0000000000)) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x10200, 0x1b0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r2, r0, 0x0, 0xffffff38) [ 1939.710555][T20456] FAULT_INJECTION: forcing a failure. [ 1939.710555][T20456] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1939.743766][T20456] CPU: 1 PID: 20456 Comm: syz-executor.0 Not tainted 5.6.0-rc1-syzkaller #0 [ 1939.752463][T20456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1939.762608][T20456] Call Trace: [ 1939.762636][T20456] dump_stack+0x11d/0x187 [ 1939.762660][T20456] should_fail.cold+0x5/0xf [ 1939.762685][T20456] __alloc_pages_nodemask+0xcf/0x310 [ 1939.762762][T20456] alloc_pages_current+0xca/0x170 [ 1939.762783][T20456] push_pipe+0x18b/0x340 [ 1939.762813][T20456] iov_iter_get_pages_alloc+0x4c0/0xaa0 [ 1939.762895][T20456] default_file_splice_read+0xd5/0x590 [ 1939.762913][T20456] ? aa_file_perm+0x401/0xb20 [ 1939.762940][T20456] ? fsnotify+0x6ab/0x7d0 [ 1939.762976][T20456] ? security_file_permission+0x86/0x270 [ 1939.762999][T20456] ? rw_verify_area+0xe5/0x230 [ 1939.763016][T20456] ? iter_file_splice_write+0x830/0x830 [ 1939.763033][T20456] do_splice_to+0xc7/0x100 [ 1939.763054][T20456] splice_direct_to_actor+0x1b9/0x540 [ 1939.763111][T20456] ? generic_pipe_buf_nosteal+0x20/0x20 [ 1939.763140][T20456] do_splice_direct+0x152/0x1d0 [ 1939.763169][T20456] do_sendfile+0x396/0x810 [ 1939.763249][T20456] __x64_sys_sendfile64+0x121/0x140 [ 1939.763274][T20456] do_syscall_64+0xc7/0x390 [ 1939.763307][T20456] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1939.763319][T20456] RIP: 0033:0x45c889 [ 1939.763347][T20456] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1939.891533][T20456] RSP: 002b:00007f151c1e1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 03:02:21 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r2, r0, 0x0, 0xffffff38) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000000c0)={0x101, 0xc, 0x4, 0x0, 0x7, {r3, r4/1000+30000}, {0x1, 0x1, 0xff, 0x10, 0x1, 0x8c, "1e522f3c"}, 0x2, 0x3, @userptr=0x7, 0x8, 0x0, 0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r5, 0x8982, &(0x7f0000000040)) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x81, 0xfffffffffffffe01}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r6, 0x4, 0x2000) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x6, 0x0, 0xb5}, 0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x2, 0x2}, &(0x7f0000000240)=0x90) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x0, 0x20}, &(0x7f0000000180)=0xc) r8 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r7, r8, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) [ 1939.891550][T20456] RAX: ffffffffffffffda RBX: 00007f151c1e26d4 RCX: 000000000045c889 [ 1939.891564][T20456] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 1939.891573][T20456] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1939.891584][T20456] R10: 0800000080004103 R11: 0000000000000246 R12: 0000000000000005 [ 1939.891594][T20456] R13: 00000000000008d4 R14: 00000000004cb7c6 R15: 000000000000000a 03:02:21 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f00000000c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x84581ab4c6df0af8) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @loopback}, {0x2, 0x0, 0xffffffff, @ipv4={[], [], @loopback}}, r4}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f00000003c0)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000100)=[{0x1, 0x0, [0xfffffffe, 0x6, 0xffff35c7, 0xfffff001, 0x1000, 0x6, 0x9, 0x0, 0x0, 0xffffffe1, 0x0, 0xa, 0x10000, 0xec, 0x4, 0x2]}, {0x2a, 0x0, [0x5, 0xfff, 0x5, 0x4, 0x7, 0x9, 0xb0, 0x80000000, 0x101, 0xf5, 0x9, 0x44aa53cc, 0xfff, 0x401, 0xfffffae9, 0x242]}, {0x24, 0x0, [0x40000, 0x6, 0x4, 0x3ff, 0x3b, 0x3, 0x1000, 0x3, 0x8, 0x8000, 0x14d, 0xfff, 0x4, 0x5, 0x7, 0xa7ad]}, {0x20, 0x0, [0xb4, 0x1ff, 0x3, 0x1, 0x4, 0x8, 0x3f6872ae, 0x5, 0x4, 0x1, 0x800, 0x6, 0x800, 0x80, 0x0, 0x7]}, {0x21, 0x0, [0x49cd, 0x4, 0x3, 0x4, 0xffffe0e6, 0x4, 0x1, 0x1000, 0x7fff, 0x2, 0x80, 0x1, 0x80, 0x800, 0x3ff, 0x813e]}, {0x17, 0x0, [0x8, 0xa0f5, 0x80000000, 0x3, 0x4, 0x98d, 0x9, 0x1, 0x2, 0x7, 0x8, 0xc82, 0x3869c7c0, 0x8, 0x9, 0xffff]}, {0x2, 0x0, [0x8, 0x6, 0x4131, 0x7, 0x0, 0x5, 0x81, 0x7, 0x8b, 0x9, 0x3, 0xff, 0x8, 0x1, 0x9]}, {0xd, 0x0, [0x9, 0x1, 0x6e45a54a, 0x4, 0x800, 0x1f, 0x1, 0x800, 0x1f, 0x2, 0x7, 0x10000, 0x9a, 0x8, 0xffff, 0xaed]}, {0x2c, 0x0, [0x3, 0x5, 0xf3, 0x70faa2ac, 0x2e50, 0x1542, 0x8, 0x5, 0x1fc, 0x1ff, 0x7fbc3c1c, 0xff, 0x6, 0x6, 0x717, 0x3f]}], r4, 0x1, 0x1, 0x288}}, 0x20) bind$alg(0xffffffffffffffff, 0x0, 0x0) 03:02:21 executing program 0 (fault-call:2 fault-nth:11): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 03:02:21 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffff) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, 0x0) write(r2, &(0x7f0000000600)="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", 0x200) sendfile(r2, r3, 0x0, 0x7fffffff) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r4, r2, 0x0, 0xffffff38) r5 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r5, &(0x7f0000000600)="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", 0x200) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\t\x00', @ANYRES16=0x0, @ANYBLOB="00082bbd7000fbdbdf250100000014000100d690d8e9085ce16ab3563e09005f5a67"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) sendfile(r1, r6, 0x0, 0xffdfff7c) [ 1940.206395][ T27] kauditd_printk_skb: 33 callbacks suppressed [ 1940.206415][ T27] audit: type=1804 audit(1586660542.038:4191): pid=20479 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir932491758/syzkaller.D6Mno2/512/file0" dev="sda1" ino=16734 res=1 [ 1940.209868][T20478] FAULT_INJECTION: forcing a failure. [ 1940.209868][T20478] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1940.222806][ T27] audit: type=1804 audit(1586660542.048:4192): pid=20480 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir932491758/syzkaller.D6Mno2/512/file0" dev="sda1" ino=16734 res=1 [ 1940.239534][T20478] CPU: 1 PID: 20478 Comm: syz-executor.0 Not tainted 5.6.0-rc1-syzkaller #0 [ 1940.261362][ T27] audit: type=1804 audit(1586660542.078:4193): pid=20479 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir932491758/syzkaller.D6Mno2/512/file0" dev="sda1" ino=16734 res=1 [ 1940.275077][T20478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1940.275083][T20478] Call Trace: [ 1940.275153][T20478] dump_stack+0x11d/0x187 [ 1940.275183][T20478] should_fail.cold+0x5/0xf [ 1940.289040][ T27] audit: type=1804 audit(1586660542.078:4194): pid=20473 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir932491758/syzkaller.D6Mno2/512/file0" dev="sda1" ino=16734 res=1 [ 1940.308368][T20478] __alloc_pages_nodemask+0xcf/0x310 [ 1940.308400][T20478] alloc_pages_current+0xca/0x170 [ 1940.308549][T20478] push_pipe+0x18b/0x340 [ 1940.370066][T20478] iov_iter_get_pages_alloc+0x4c0/0xaa0 [ 1940.375653][T20478] default_file_splice_read+0xd5/0x590 [ 1940.381213][T20478] ? aa_file_perm+0x401/0xb20 [ 1940.385927][T20478] ? fsnotify+0x6ab/0x7d0 [ 1940.390317][T20478] ? security_file_permission+0x86/0x270 [ 1940.396000][T20478] ? rw_verify_area+0xe5/0x230 [ 1940.400764][T20478] ? iter_file_splice_write+0x830/0x830 [ 1940.406307][T20478] do_splice_to+0xc7/0x100 [ 1940.410722][T20478] splice_direct_to_actor+0x1b9/0x540 [ 1940.416201][T20478] ? generic_pipe_buf_nosteal+0x20/0x20 [ 1940.421789][T20478] do_splice_direct+0x152/0x1d0 [ 1940.426638][T20478] do_sendfile+0x396/0x810 [ 1940.431102][T20478] __x64_sys_sendfile64+0x121/0x140 [ 1940.436300][T20478] do_syscall_64+0xc7/0x390 [ 1940.440843][T20478] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1940.446731][T20478] RIP: 0033:0x45c889 [ 1940.450632][T20478] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1940.470289][T20478] RSP: 002b:00007f151c1e1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1940.478693][T20478] RAX: ffffffffffffffda RBX: 00007f151c1e26d4 RCX: 000000000045c889 [ 1940.486701][T20478] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 1940.494665][T20478] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1940.502636][T20478] R10: 0800000080004103 R11: 0000000000000246 R12: 0000000000000005 [ 1940.510620][T20478] R13: 00000000000008d4 R14: 00000000004cb7c6 R15: 000000000000000b [ 1940.529426][ T27] audit: type=1804 audit(1586660542.368:4195): pid=20463 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir209219610/syzkaller.nCjs6O/673/file0" dev="sda1" ino=16765 res=1 [ 1940.533760][ T27] audit: type=1804 audit(1586660542.368:4196): pid=20463 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir209219610/syzkaller.nCjs6O/673/file0" dev="sda1" ino=16765 res=1 03:02:22 executing program 1: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000100)) prctl$PR_GET_THP_DISABLE(0x2a) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') fsetxattr(r0, &(0x7f0000000000)=@known='system.advise\x00', &(0x7f0000000040)='mountinfo\x00', 0xa, 0x3) sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f00000000c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) bind$alg(0xffffffffffffffff, 0x0, 0x0) 03:02:22 executing program 0 (fault-call:2 fault-nth:12): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) [ 1940.781244][ T27] audit: type=1804 audit(1586660542.618:4197): pid=20469 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="file0" dev="sda1" ino=16766 res=1 [ 1940.844523][T20499] FAULT_INJECTION: forcing a failure. [ 1940.844523][T20499] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1940.861368][ T27] audit: type=1804 audit(1586660542.638:4198): pid=20490 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="file0" dev="sda1" ino=16766 res=1 [ 1940.883538][T20499] CPU: 0 PID: 20499 Comm: syz-executor.0 Not tainted 5.6.0-rc1-syzkaller #0 [ 1940.892336][T20499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1940.902524][T20499] Call Trace: [ 1940.905824][T20499] dump_stack+0x11d/0x187 [ 1940.910188][T20499] should_fail.cold+0x5/0xf [ 1940.914718][T20499] __alloc_pages_nodemask+0xcf/0x310 [ 1940.920074][T20499] alloc_pages_current+0xca/0x170 [ 1940.925112][T20499] push_pipe+0x18b/0x340 [ 1940.929378][T20499] iov_iter_get_pages_alloc+0x4c0/0xaa0 [ 1940.935082][T20499] default_file_splice_read+0xd5/0x590 [ 1940.940553][T20499] ? aa_file_perm+0x401/0xb20 [ 1940.945253][T20499] ? fsnotify+0x6ab/0x7d0 [ 1940.949731][T20499] ? security_file_permission+0x86/0x270 [ 1940.955378][T20499] ? rw_verify_area+0xe5/0x230 [ 1940.960138][T20499] ? iter_file_splice_write+0x830/0x830 [ 1940.965697][T20499] do_splice_to+0xc7/0x100 [ 1940.970157][T20499] splice_direct_to_actor+0x1b9/0x540 [ 1940.975559][T20499] ? generic_pipe_buf_nosteal+0x20/0x20 [ 1940.981220][T20499] do_splice_direct+0x152/0x1d0 [ 1940.986188][T20499] do_sendfile+0x396/0x810 [ 1940.990599][T20499] __x64_sys_sendfile64+0x121/0x140 [ 1940.995835][T20499] do_syscall_64+0xc7/0x390 [ 1941.000486][T20499] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1941.006415][T20499] RIP: 0033:0x45c889 [ 1941.010303][T20499] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1941.029907][T20499] RSP: 002b:00007f151c1e1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1941.038369][T20499] RAX: ffffffffffffffda RBX: 00007f151c1e26d4 RCX: 000000000045c889 [ 1941.046347][T20499] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 1941.054328][T20499] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1941.062437][T20499] R10: 0800000080004103 R11: 0000000000000246 R12: 0000000000000005 [ 1941.070392][T20499] R13: 00000000000008d4 R14: 00000000004cb7c6 R15: 000000000000000c 03:02:30 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, 0x0) sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'essiv(gcm(twofish-generic),blake2s-160-x86)\x00'}, 0x58) syz_mount_image$nfs4(0x0, 0x0, 0x2, 0x2, &(0x7f0000000340)=[{&(0x7f00000002c0)="84a4cadec83582e6d9321b47a05ef7b741ae24a9473f249e5fb21de600c30a", 0x1f, 0x7}, {&(0x7f0000000300)="0f", 0x1, 0xff}], 0x400, &(0x7f0000000380)='aead\x00') 03:02:30 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r2, r0, 0x0, 0x1) 03:02:30 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f00000000c0)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x2b, &(0x7f0000000000)='security#%#vboxnet0@securityem0\\-^cpuset{*\x00'}, 0x30) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r5 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, 0x0) write(r5, &(0x7f0000000600)="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", 0x200) sendfile(r5, r6, 0x0, 0x7fffffff) r7 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x121) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r7, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r7, r5, 0x0, 0xffffff38) r8 = socket$nl_route(0x10, 0x3, 0x0) kcmp(r3, r4, 0x5, r7, r8) syz_open_dev$tty1(0xc, 0x4, 0x1) 03:02:30 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getgid() r2 = socket$inet_udplite(0x2, 0x2, 0x88) fstat(r2, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) fstat(r4, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="020000000100000000000000040003000000000008000100", @ANYRES32=r1, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r3, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r5, @ANYBLOB="1000070000000000200000000000000d"], 0x3c, 0x0) r6 = getgid() r7 = socket$inet_udplite(0x2, 0x2, 0x88) fstat(r7, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) fstat(r9, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="020000000100000000000000040003000000000008000100", @ANYRES32=r6, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r8, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r10, @ANYBLOB="1000070000000000200000000000000d"], 0x3c, 0x0) setregid(r1, r8) fcntl$setstatus(r0, 0x4, 0x2000) r11 = syz_open_dev$tty1(0xc, 0x4, 0x1) r12 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r11, r12, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) 03:02:30 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000000)={0xff, 0x1, 0xffffd397}, 0xc) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f00000000c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) bind$alg(0xffffffffffffffff, 0x0, 0x0) 03:02:30 executing program 0 (fault-call:2 fault-nth:13): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) [ 1948.197959][ T27] audit: type=1800 audit(1586660550.028:4199): pid=20517 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16780 res=0 [ 1948.199688][T20515] FAULT_INJECTION: forcing a failure. [ 1948.199688][T20515] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1948.233536][T20515] CPU: 0 PID: 20515 Comm: syz-executor.0 Not tainted 5.6.0-rc1-syzkaller #0 [ 1948.242236][T20515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1948.252293][T20515] Call Trace: [ 1948.255597][T20515] dump_stack+0x11d/0x187 [ 1948.260021][T20515] should_fail.cold+0x5/0xf [ 1948.264538][T20515] __alloc_pages_nodemask+0xcf/0x310 [ 1948.269863][T20515] alloc_pages_current+0xca/0x170 [ 1948.274939][T20515] push_pipe+0x18b/0x340 [ 1948.274996][T20515] iov_iter_get_pages_alloc+0x4c0/0xaa0 [ 1948.275027][T20515] default_file_splice_read+0xd5/0x590 [ 1948.275048][T20515] ? aa_file_perm+0x401/0xb20 [ 1948.275074][T20515] ? fsnotify+0x6ab/0x7d0 [ 1948.275111][T20515] ? security_file_permission+0x86/0x270 03:02:30 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x80, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file1\x00', 0x484100, 0x86e24e19975b8b1f) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r3, r1, 0x0, 0xffffff38) pipe2$9p(&(0x7f0000000000), 0xc000) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x40500, 0x0) renameat(r2, &(0x7f0000000140)='./file0\x00', r4, &(0x7f00000001c0)='./file1\x00') ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205647, &(0x7f0000000100)={0xfffffff, 0xcf, 0x4, r2, 0x0, &(0x7f00000000c0)={0xa70a49, 0xffff, [], @p_u32=&(0x7f0000000400)=0x6e}}) getsockopt$bt_sco_SCO_CONNINFO(r5, 0x11, 0x2, &(0x7f0000000280)=""/247, &(0x7f0000000380)=0xf7) fcntl$setstatus(r0, 0x4, 0x2000) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r6, r7, 0x0, 0x800000080004103) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) [ 1948.275187][T20515] ? rw_verify_area+0xe5/0x230 [ 1948.275206][T20515] ? iter_file_splice_write+0x830/0x830 [ 1948.275227][T20515] do_splice_to+0xc7/0x100 [ 1948.275251][T20515] splice_direct_to_actor+0x1b9/0x540 [ 1948.275275][T20515] ? generic_pipe_buf_nosteal+0x20/0x20 [ 1948.275300][T20515] do_splice_direct+0x152/0x1d0 [ 1948.275377][T20515] do_sendfile+0x396/0x810 [ 1948.275440][T20515] __x64_sys_sendfile64+0x121/0x140 [ 1948.275465][T20515] do_syscall_64+0xc7/0x390 [ 1948.275490][T20515] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1948.275502][T20515] RIP: 0033:0x45c889 [ 1948.275524][T20515] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1948.275533][T20515] RSP: 002b:00007f151c1e1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1948.275551][T20515] RAX: ffffffffffffffda RBX: 00007f151c1e26d4 RCX: 000000000045c889 [ 1948.275561][T20515] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 1948.275572][T20515] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1948.275582][T20515] R10: 0800000080004103 R11: 0000000000000246 R12: 0000000000000005 [ 1948.275593][T20515] R13: 00000000000008d4 R14: 00000000004cb7c6 R15: 000000000000000d [ 1948.290575][ T27] audit: type=1804 audit(1586660550.068:4200): pid=20517 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir932491758/syzkaller.D6Mno2/513/file0" dev="sda1" ino=16780 res=1 [ 1948.302641][ T27] audit: type=1800 audit(1586660550.128:4201): pid=20521 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16793 res=0 [ 1948.329589][ T27] audit: type=1804 audit(1586660550.168:4202): pid=20525 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir932491758/syzkaller.D6Mno2/513/file0" dev="sda1" ino=16780 res=1 [ 1948.354921][ T27] audit: type=1804 audit(1586660550.188:4203): pid=20518 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir209219610/syzkaller.nCjs6O/674/file0" dev="sda1" ino=16793 res=1 [ 1948.416485][ T27] audit: type=1800 audit(1586660550.248:4204): pid=20528 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=16794 res=0 03:02:30 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r2, r0, 0x0, 0xffffff38) recvfrom$llc(r0, &(0x7f00000000c0)=""/83, 0x53, 0x180, &(0x7f0000000040)={0x1a, 0x205, 0x40, 0x89, 0x9, 0x7f, @remote}, 0x10) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7f, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xbb3f, 0xfffffffffffffeff}, 0x119ca, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x2000) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') setsockopt$netlink_NETLINK_CAP_ACK(r5, 0x10e, 0xa, &(0x7f0000000000)=0x30, 0x4) sendfile(r4, r5, 0x0, 0x800000080004103) r6 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r6, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r6, 0xffffffffffffffff, 0x0, 0xffffff38) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) 03:02:30 executing program 0 (fault-call:2 fault-nth:14): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) [ 1948.719503][ T27] audit: type=1804 audit(1586660550.468:4205): pid=20521 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir209219610/syzkaller.nCjs6O/674/file0" dev="sda1" ino=16793 res=1 [ 1948.747911][ T27] audit: type=1800 audit(1586660550.548:4206): pid=20533 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=16787 res=0 03:02:30 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f00000000c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) bind$alg(0xffffffffffffffff, 0x0, 0x0) [ 1948.803445][T20537] FAULT_INJECTION: forcing a failure. [ 1948.803445][T20537] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1948.823132][ T27] audit: type=1804 audit(1586660550.548:4207): pid=20533 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="file0" dev="sda1" ino=16787 res=1 [ 1948.853195][T20537] CPU: 0 PID: 20537 Comm: syz-executor.0 Not tainted 5.6.0-rc1-syzkaller #0 [ 1948.861899][T20537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1948.873855][T20537] Call Trace: [ 1948.877260][T20537] dump_stack+0x11d/0x187 [ 1948.881610][T20537] should_fail.cold+0x5/0xf [ 1948.886139][T20537] __alloc_pages_nodemask+0xcf/0x310 [ 1948.891459][T20537] alloc_pages_current+0xca/0x170 [ 1948.896615][T20537] push_pipe+0x18b/0x340 [ 1948.900884][T20537] iov_iter_get_pages_alloc+0x4c0/0xaa0 [ 1948.906495][T20537] default_file_splice_read+0xd5/0x590 [ 1948.911967][T20537] ? aa_file_perm+0x401/0xb20 [ 1948.916660][T20537] ? fsnotify+0x6ab/0x7d0 [ 1948.921053][T20537] ? security_file_permission+0x86/0x270 [ 1948.926716][T20537] ? rw_verify_area+0xe5/0x230 [ 1948.931490][T20537] ? iter_file_splice_write+0x830/0x830 [ 1948.937042][T20537] do_splice_to+0xc7/0x100 [ 1948.941473][T20537] splice_direct_to_actor+0x1b9/0x540 [ 1948.946971][T20537] ? generic_pipe_buf_nosteal+0x20/0x20 [ 1948.952541][T20537] do_splice_direct+0x152/0x1d0 [ 1948.957526][T20537] do_sendfile+0x396/0x810 [ 1948.962098][T20537] __x64_sys_sendfile64+0x121/0x140 [ 1948.967352][T20537] do_syscall_64+0xc7/0x390 [ 1948.971963][T20537] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1948.977890][T20537] RIP: 0033:0x45c889 [ 1948.981798][T20537] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1949.001780][T20537] RSP: 002b:00007f151c1e1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1949.010250][T20537] RAX: ffffffffffffffda RBX: 00007f151c1e26d4 RCX: 000000000045c889 [ 1949.018214][T20537] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 1949.026442][T20537] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1949.034406][T20537] R10: 0800000080004103 R11: 0000000000000246 R12: 0000000000000005 [ 1949.042370][T20537] R13: 00000000000008d4 R14: 00000000004cb7c6 R15: 000000000000000e [ 1949.076906][ T27] audit: type=1804 audit(1586660550.628:4208): pid=20536 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="file0" dev="sda1" ino=16787 res=1 03:02:31 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x36, 0x63, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') statx(r1, &(0x7f0000000040)='./file0\x00', 0x100, 0x2, &(0x7f0000000100)) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000000)={0x33, @local, 0xe1e, 0x1, 'sh\x00', 0x20, 0x1, 0x40}, 0x2c) sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f00000000c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) bind$alg(0xffffffffffffffff, 0x0, 0x0) 03:02:31 executing program 0 (fault-call:2 fault-nth:15): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) [ 1949.315341][T20553] FAULT_INJECTION: forcing a failure. [ 1949.315341][T20553] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1949.365782][T20553] CPU: 0 PID: 20553 Comm: syz-executor.0 Not tainted 5.6.0-rc1-syzkaller #0 [ 1949.374508][T20553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1949.384585][T20553] Call Trace: [ 1949.387903][T20553] dump_stack+0x11d/0x187 [ 1949.392255][T20553] should_fail.cold+0x5/0xf [ 1949.396861][T20553] __alloc_pages_nodemask+0xcf/0x310 [ 1949.402512][T20553] alloc_pages_current+0xca/0x170 [ 1949.407650][T20553] push_pipe+0x18b/0x340 [ 1949.412102][T20553] iov_iter_get_pages_alloc+0x4c0/0xaa0 [ 1949.417700][T20553] default_file_splice_read+0xd5/0x590 [ 1949.423163][T20553] ? aa_file_perm+0x401/0xb20 [ 1949.427942][T20553] ? fsnotify+0x6ab/0x7d0 [ 1949.432311][T20553] ? security_file_permission+0x86/0x270 [ 1949.437961][T20553] ? rw_verify_area+0xe5/0x230 [ 1949.442737][T20553] ? iter_file_splice_write+0x830/0x830 [ 1949.448291][T20553] do_splice_to+0xc7/0x100 [ 1949.452730][T20553] splice_direct_to_actor+0x1b9/0x540 [ 1949.458122][T20553] ? generic_pipe_buf_nosteal+0x20/0x20 [ 1949.463768][T20553] do_splice_direct+0x152/0x1d0 [ 1949.468630][T20553] do_sendfile+0x396/0x810 [ 1949.473067][T20553] __x64_sys_sendfile64+0x121/0x140 [ 1949.478287][T20553] do_syscall_64+0xc7/0x390 [ 1949.483002][T20553] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1949.488991][T20553] RIP: 0033:0x45c889 [ 1949.492896][T20553] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1949.512536][T20553] RSP: 002b:00007f151c1e1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1949.520951][T20553] RAX: ffffffffffffffda RBX: 00007f151c1e26d4 RCX: 000000000045c889 [ 1949.528938][T20553] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 1949.536914][T20553] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1949.544891][T20553] R10: 0800000080004103 R11: 0000000000000246 R12: 0000000000000005 [ 1949.552864][T20553] R13: 00000000000008d4 R14: 00000000004cb7c6 R15: 000000000000000f 03:02:38 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f00000000c0)) r2 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, 0x0) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffffffffffffffff}, 0x6) write(r2, &(0x7f0000000600)="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", 0x200) sendfile(r2, r3, 0x0, 0x7fffffff) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r4, r2, 0x0, 0xffffff38) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) syz_open_dev$tty1(0xc, 0x4, 0x1) bind$alg(0xffffffffffffffff, 0x0, 0x0) 03:02:38 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$GIO_CMAP(r2, 0x4b70, &(0x7f0000000000)) r3 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x34, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@bridge_newneigh={0x30, 0x1c, 0xb25, 0x0, 0x0, {0xa}, [@NDA_DST_IPV6={0x14, 0x1, @loopback}]}, 0x30}}, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000180)={0x0, 0x1, 0x6}, 0x10) write(r3, &(0x7f0000000600)="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", 0x200) sendfile(r3, r4, 0x0, 0x7fffffff) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r5, r3, 0x0, 0xffffff38) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000000c0)=0x2040, 0x4) sendfile(r2, r0, 0x0, 0xffffff38) 03:02:38 executing program 3: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20\x00', 0x4000, 0x0) ioctl$SIOCGIFMTU(r1, 0x8921, 0xfffffffffffffffd) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') ioctl$CAPI_REGISTER(r2, 0x400c4301, &(0x7f0000000040)={0x2, 0xffffffff}) sendfile(r0, r2, 0x0, 0x800000080004103) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@ccm_128={{0x303}, "93705d5500b78319", "c58cc8c82b60781d4e72d7253b70b225", "ddf5eb5a", "10c240be12bf1d4c"}, 0x28) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f00000000c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) 03:02:38 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, 0x0) sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'essiv(gcm(twofish-generic),blake2s-160-x86)\x00'}, 0x58) syz_mount_image$nfs4(0x0, 0x0, 0x2, 0x2, &(0x7f0000000340)=[{&(0x7f00000002c0)="84a4cadec83582e6d9321b47a05ef7b741ae24a9473f249e5fb21de600c30a", 0x1f, 0x7}, {&(0x7f0000000300)="0f", 0x1, 0xff}], 0x400, &(0x7f0000000380)='aead\x00') 03:02:38 executing program 0 (fault-call:2 fault-nth:16): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 03:02:38 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x9, 0x0, 0x1000000000}, 0x0) perf_event_open(&(0x7f0000000180)={0x4, 0x70, 0x40, 0x40, 0x20, 0xd1, 0x0, 0x0, 0x440, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000140), 0x1}, 0x1032, 0x3, 0x5, 0x8, 0x0, 0x1, 0x101}, r1, 0xa, r0, 0x8e91ef023255b9ef) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x5, 0xe6, 0xdb, 0x3f, 0x0, 0xfffffffffffffffa, 0x44020, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x80000000, 0x3, @perf_config_ext={0x5, 0x3}, 0x40802, 0x3, 0x5, 0x4, 0x3f, 0x800, 0x400}, 0x0, 0xffffffffffffffff, r0, 0x9) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x210000, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000100)=0x6, 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) write(0xffffffffffffffff, &(0x7f0000000600)="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", 0x200) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r3, 0xffffffffffffffff, 0x0, 0xffffff38) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000240)={0xa30000, 0x3, 0x3, 0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x980903, 0x3, [], @ptr=0x3}}) ioctl$NBD_SET_SIZE_BLOCKS(r4, 0xab07, 0x3) fcntl$setstatus(r0, 0x4, 0x2000) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) [ 1956.692531][T20578] FAULT_INJECTION: forcing a failure. [ 1956.692531][T20578] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1956.692552][T20578] CPU: 0 PID: 20578 Comm: syz-executor.0 Not tainted 5.6.0-rc1-syzkaller #0 [ 1956.692563][T20578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1956.692567][T20578] Call Trace: [ 1956.692595][T20578] dump_stack+0x11d/0x187 [ 1956.692636][T20578] should_fail.cold+0x5/0xf [ 1956.692665][T20578] __alloc_pages_nodemask+0xcf/0x310 [ 1956.692696][T20578] alloc_pages_current+0xca/0x170 [ 1956.692783][T20578] push_pipe+0x18b/0x340 [ 1956.692811][T20578] iov_iter_get_pages_alloc+0x4c0/0xaa0 [ 1956.692837][T20578] default_file_splice_read+0xd5/0x590 [ 1956.692854][T20578] ? aa_file_perm+0x401/0xb20 [ 1956.692879][T20578] ? fsnotify+0x6ab/0x7d0 [ 1956.692913][T20578] ? security_file_permission+0x86/0x270 [ 1956.693013][T20578] ? rw_verify_area+0xe5/0x230 [ 1956.693031][T20578] ? iter_file_splice_write+0x830/0x830 03:02:38 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) r3 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, 0x0) write(r3, &(0x7f0000000600)="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", 0x200) sendfile(r3, r4, 0x0, 0x7fffffff) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r5, r3, 0x0, 0xffffff38) r6 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, 0x0) write(r6, &(0x7f0000000600)="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", 0x200) sendfile(r6, r7, 0x0, 0x7fffffff) r8 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0xfe) [ 1956.693048][T20578] do_splice_to+0xc7/0x100 [ 1956.693068][T20578] splice_direct_to_actor+0x1b9/0x540 [ 1956.693092][T20578] ? generic_pipe_buf_nosteal+0x20/0x20 [ 1956.693117][T20578] do_splice_direct+0x152/0x1d0 [ 1956.693149][T20578] do_sendfile+0x396/0x810 [ 1956.693178][T20578] __x64_sys_sendfile64+0x121/0x140 [ 1956.693220][T20578] do_syscall_64+0xc7/0x390 [ 1956.693247][T20578] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1956.693258][T20578] RIP: 0033:0x45c889 [ 1956.693305][T20578] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1956.693313][T20578] RSP: 002b:00007f151c1e1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1956.693377][T20578] RAX: ffffffffffffffda RBX: 00007f151c1e26d4 RCX: 000000000045c889 [ 1956.693386][T20578] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 1956.693395][T20578] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1956.693404][T20578] R10: 0800000080004103 R11: 0000000000000246 R12: 0000000000000005 [ 1956.693414][T20578] R13: 00000000000008d4 R14: 00000000004cb7c6 R15: 0000000000000010 [ 1956.710285][ T27] kauditd_printk_skb: 6 callbacks suppressed [ 1956.710303][ T27] audit: type=1800 audit(1586660558.548:4215): pid=20577 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16913 res=0 [ 1956.939420][ T27] audit: type=1804 audit(1586660558.718:4216): pid=20577 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir932491758/syzkaller.D6Mno2/514/file0" dev="sda1" ino=16913 res=1 [ 1956.967476][ T27] audit: type=1800 audit(1586660558.738:4217): pid=20587 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=16945 res=0 [ 1956.967534][ T27] audit: type=1804 audit(1586660558.738:4218): pid=20587 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir057656323/syzkaller.yzn8jn/432/file0" dev="sda1" ino=16945 res=1 [ 1956.967553][ T27] audit: type=1804 audit(1586660558.748:4219): pid=20586 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="file0" dev="sda1" ino=16929 res=1 [ 1956.967573][ T27] audit: type=1804 audit(1586660558.748:4220): pid=20586 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="file0" dev="sda1" ino=16929 res=1 [ 1956.967599][ T27] audit: type=1804 audit(1586660558.748:4221): pid=20585 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="file0" dev="sda1" ino=16929 res=1 [ 1956.967619][ T27] audit: type=1804 audit(1586660558.748:4222): pid=20586 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="file0" dev="sda1" ino=16929 res=1 03:02:38 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000000c0)={0xa, 0x4e23, 0x2587, @empty, 0x3}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000440)="7acd28eee07bbff451b047ac835a0a83678b905c41b2bf7530132d2a3c375f3148360a35c978df7cc7fc5318e28eabcf46b4a6042a55d3bc5a35203094c500914956b29e733eed8e2432a429460d7fdb8e437181eed730627310b7d8d2d724f5b93fd0ca4619dc319126c3d77c7412364c691b82b010704dbba9d288a4149e55d133cf088a679360997f56e01aef6812d407299fa930fb0e28a49c229d8e3336af565fd2202c8f8c9a046cb27745f56288f2624d4799cc587c552201df20b31cffd365c8fe3c8213c8ec65b08b641430437fd9cfba", 0xd5}, {&(0x7f0000000200)="f24881eea7057ed70b8806127698d69be48788c34644b0f03a7ce35262eee5807313a0175a6580e771fa3382ec57b8b89bc58329db1b0cf891adb5d5ae74bc658c01b78d18a64faab18c90727b78305e1eca64c9cb65f08c968871ec44c07176f674385e3a71e6c50a4a81bdfa04db7e6344e05479ca3bd78c493dfb358f5bb47b799cab64b8e956cbd313e1c08efbc54eadb0192231eed04ac41ad377c22af38be7802cdee6930852e0e731dab2453bdba3c2", 0xb3}, {&(0x7f00000002c0)="a35799edc4c919e5d60157a050e4374534b847b8c2f9d657e0a50df434acd34621fc595aa6d50cc37965304b2e26dfc5fa0a7eb5110887779dbd72694240f855af1d9b8e8fcf989258dd44d1e071da4feb1767ea578ff740283a2794a40c11f37f8435b8bd91b86874071002489d5cb0bd66319fa19a1f503f549062816739681fc9550a4e0541504fe08feaa6b02e6919e9953fe966bbaf9d4495ff0a29f1ba07b62a9b43", 0xa5}, {&(0x7f0000000380)="ba10bbb761b3ac8096ce8e110bbfeba36f608f3e67ec2fc7f432dccc8231fe38f7803462a83cce98a0b6a5b4371d76f484ad65c2251f066f3c51e25b2f55947f042bd87cd7", 0xfffffffffffffef2}], 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="140000000000000029000000080000007f000000000000003800000000000000290000000000000000000000000000ffffac1414aaff010000000000000000000000000001280000000000000029000000040000002c0200000000000007086d820bef00020000000100000100600000000000000029000000370000002f08000000000000c2040000ce98071800000002043f050001000000000000000400000000000000c9100000000000000000000000000000000005020adc040109c2040000007004010104013f000000480000000000000029000000370000006205000000000000071000000002028101000100000000000000c204000004010502060101050000000000c2040000040100000000000000140000000000000029000000080000000600000000000000480000000000862225c1000029000000040000001d0500000000000007100000000302890800edd0000000000000c910ff020000000000000000000000000001040106040165000000000000300000000000000029000000370000002b02000000000000050248b10502fffd050200bbc2040000000100000000000076b1ab513a9d9b412375faa1c8dd1f5f23acf778dadc36680fb3dbbe92f416969e51712b8205f08933c333929987263c4b4c88aac2f33cb0c5bec7db6f4735c63eb5760a151acd3af18ff36a00ca909c3c9effdb1239a13094eebfb018057a5fb950e80e2f0bb70f184ce0ba6928479a1583f18a65713a621185d805384f88f7df77ff4b2b8727d129407b34eca12181b9ec0a44d70f35496e1153ebeb4334559d47dab7df708e9411a2237fe4a21d0cc7d36d000000000000002ac8d5fbb3274c9aec634225f328214fd3c9fbc1f2a69a617454743d2c6c9841c15c5b82ad41c162165ba6683b7e9f6a5084327bab69b00fb0c62d6b1ec8bb6505212c6a57463d0edbff650af0444815b112f6d645cdc4756b4445587743198dca3053afe3b9573126c456e03fa4c91f94aa85da9f4b067c976b736dc2628c78e931ee64543d5a0e1e70e0004e638406496b0f115efe2296cabdb30aabc041d3a04e35781eae57f04521762f18874deb6bd0623893342acb94ead94c7afe0149455c75e1fa00228f542e3a2f546a4049cbb5fa36f17ff380d44fce66339a9c1ad356b953ed4d7901111fb1707ad6203b6ef4cf63cf2a3d86b11c"], 0x35d}, 0x40) ioctl$TIOCSRS485(r1, 0x542f, &(0x7f0000000040)={0x0, 0xfffffff7}) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0x10, 0x1}) socket$inet6_tcp(0xa, 0x1, 0x0) sendfile(r0, r2, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) openat$ttyprintk(0xffffffffffffff9c, 0xfffffffffffffffd, 0x8000, 0x0) r3 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, 0x0) write(r3, &(0x7f0000000600)="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", 0x200) sendfile(r3, r4, 0x0, 0x7fffffff) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r5, r3, 0x0, 0xffffff38) ioctl$TIOCGDEV(r5, 0x80045432, &(0x7f0000000740)) [ 1956.971895][ T27] audit: type=1804 audit(1586660558.808:4223): pid=20585 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="file0" dev="sda1" ino=16929 res=1 [ 1957.115890][ T27] audit: type=1804 audit(1586660558.828:4224): pid=20588 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir932491758/syzkaller.D6Mno2/514/file0" dev="sda1" ino=16913 res=1 03:02:39 executing program 0 (fault-call:2 fault-nth:17): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 03:02:39 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r2, 0xffffffffffffffff, 0x0, 0xffffff38) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r2, 0x8982, &(0x7f0000000300)={0x7, 'syzkaller0\x00', {0x101}, 0xfff}) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x4600, 0x0) ioctl$BLKROGET(r4, 0x125e, &(0x7f00000002c0)) sendfile(r1, r3, 0x0, 0x800000080004103) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f00000000c0)) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000200)={r6, 0x6, 0x0, 0xb5}, 0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000140)={r6, @in6={{0xa, 0x0, 0x1ff, @local}}, 0x2, 0x202}, &(0x7f0000000240)=0x90) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000000)={r6, 0x7fffffff}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000100)={r6, @in={{0x2, 0x4e23, @rand_addr=0xfffffff9}}, 0x4, 0x9}, 0x90) syz_open_dev$tty1(0xc, 0x4, 0x1) [ 1957.336911][T20602] FAULT_INJECTION: forcing a failure. [ 1957.336911][T20602] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1957.337006][T20602] CPU: 0 PID: 20602 Comm: syz-executor.0 Not tainted 5.6.0-rc1-syzkaller #0 [ 1957.337015][T20602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1957.337019][T20602] Call Trace: [ 1957.337047][T20602] dump_stack+0x11d/0x187 [ 1957.337074][T20602] should_fail.cold+0x5/0xf [ 1957.337158][T20602] __alloc_pages_nodemask+0xcf/0x310 [ 1957.337244][T20602] alloc_pages_current+0xca/0x170 [ 1957.337263][T20602] push_pipe+0x18b/0x340 [ 1957.337289][T20602] iov_iter_get_pages_alloc+0x4c0/0xaa0 [ 1957.337381][T20602] default_file_splice_read+0xd5/0x590 [ 1957.337399][T20602] ? aa_file_perm+0x401/0xb20 [ 1957.337426][T20602] ? fsnotify+0x6ab/0x7d0 [ 1957.337461][T20602] ? security_file_permission+0x86/0x270 [ 1957.337483][T20602] ? rw_verify_area+0xe5/0x230 [ 1957.337502][T20602] ? iter_file_splice_write+0x830/0x830 [ 1957.337522][T20602] do_splice_to+0xc7/0x100 [ 1957.337544][T20602] splice_direct_to_actor+0x1b9/0x540 [ 1957.337606][T20602] ? generic_pipe_buf_nosteal+0x20/0x20 [ 1957.337654][T20602] do_splice_direct+0x152/0x1d0 [ 1957.337678][T20602] do_sendfile+0x396/0x810 [ 1957.337712][T20602] __x64_sys_sendfile64+0x121/0x140 [ 1957.337738][T20602] do_syscall_64+0xc7/0x390 [ 1957.337833][T20602] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1957.337847][T20602] RIP: 0033:0x45c889 [ 1957.337867][T20602] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1957.337875][T20602] RSP: 002b:00007f151c1e1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 03:02:39 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x0, 0xffffffffffff8000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r2, r0, 0x0, 0xffffff38) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x10}, 0xc) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3}, 0xb) ftruncate(r5, 0x200004) [ 1957.337890][T20602] RAX: ffffffffffffffda RBX: 00007f151c1e26d4 RCX: 000000000045c889 [ 1957.337899][T20602] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 1957.337908][T20602] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1957.337917][T20602] R10: 0800000080004103 R11: 0000000000000246 R12: 0000000000000005 [ 1957.337926][T20602] R13: 00000000000008d4 R14: 00000000004cb7c6 R15: 0000000000000011 03:02:39 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) setsockopt$TIPC_MCAST_BROADCAST(r0, 0x10f, 0x85) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00dfff", @ANYRES16=r2, @ANYBLOB="00012abd7000fcdbdf25010000000500220000000000050021000100000005000d000000000006000e000300000005008000000008001900e000000108000c0002000000"], 0x4c}, 0x1, 0x0, 0x0, 0x841}, 0x41010) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r3, r0, 0x0, 0xffffff38) 03:02:39 executing program 0 (fault-call:2 fault-nth:18): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 03:02:39 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, 0x0) write(r1, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r3, r1, 0x0, 0xffffff38) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100084}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, r4, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKSTATE_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000000}, 0x20008000) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004103) lseek(r0, 0x0, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f00000000c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) [ 1957.898237][T20622] FAULT_INJECTION: forcing a failure. [ 1957.898237][T20622] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1957.927685][T20622] CPU: 0 PID: 20622 Comm: syz-executor.0 Not tainted 5.6.0-rc1-syzkaller #0 [ 1957.936384][T20622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1957.946447][T20622] Call Trace: [ 1957.949739][T20622] dump_stack+0x11d/0x187 [ 1957.954070][T20622] should_fail.cold+0x5/0xf [ 1957.958601][T20622] __alloc_pages_nodemask+0xcf/0x310 [ 1957.963954][T20622] alloc_pages_current+0xca/0x170 [ 1957.969006][T20622] push_pipe+0x18b/0x340 [ 1957.973275][T20622] iov_iter_get_pages_alloc+0x4c0/0xaa0 [ 1957.978845][T20622] default_file_splice_read+0xd5/0x590 [ 1957.984371][T20622] ? aa_file_perm+0x401/0xb20 [ 1957.989164][T20622] ? fsnotify+0x6ab/0x7d0 [ 1957.993621][T20622] ? security_file_permission+0x86/0x270 [ 1957.999287][T20622] ? rw_verify_area+0xe5/0x230 [ 1958.004156][T20622] ? iter_file_splice_write+0x830/0x830 [ 1958.009722][T20622] do_splice_to+0xc7/0x100 [ 1958.014159][T20622] splice_direct_to_actor+0x1b9/0x540 [ 1958.019600][T20622] ? generic_pipe_buf_nosteal+0x20/0x20 [ 1958.025163][T20622] do_splice_direct+0x152/0x1d0 [ 1958.030232][T20622] do_sendfile+0x396/0x810 [ 1958.034677][T20622] __x64_sys_sendfile64+0x121/0x140 [ 1958.039971][T20622] do_syscall_64+0xc7/0x390 [ 1958.044498][T20622] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1958.050539][T20622] RIP: 0033:0x45c889 [ 1958.054443][T20622] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1958.074151][T20622] RSP: 002b:00007f151c1e1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1958.082651][T20622] RAX: ffffffffffffffda RBX: 00007f151c1e26d4 RCX: 000000000045c889 [ 1958.090625][T20622] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 1958.099126][T20622] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1958.107198][T20622] R10: 0800000080004103 R11: 0000000000000246 R12: 0000000000000005 [ 1958.115269][T20622] R13: 00000000000008d4 R14: 00000000004cb7c6 R15: 0000000000000012 03:02:40 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x800, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r3, r1, 0x0, 0xffffff38) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000800)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x72c}, 0x1, 0x0, 0x0, 0x24008000}, 0x20000010) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7fffffff) r6 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r6, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r6, 0xffffffffffffffff, 0x0, 0xffffff38) ioctl$EVIOCGID(0xffffffffffffffff, 0x80084502, &(0x7f0000000840)=""/143) sendfile(r4, r5, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) 03:02:40 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r3, r1, 0x0, 0xffffff38) ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000000)) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004103) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f00000000c0)) r6 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r6, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r6, 0xffffffffffffffff, 0x0, 0xffffff38) dup3(r6, r2, 0x0) 03:02:42 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, 0x0) sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'essiv(gcm(twofish-generic),blake2s-160-x86)\x00'}, 0x58) syz_mount_image$nfs4(0x0, 0x0, 0x2, 0x2, &(0x7f0000000340)=[{&(0x7f00000002c0)="84a4cadec83582e6d9321b47a05ef7b741ae24a9473f249e5fb21de600c30a", 0x1f, 0x7}, {&(0x7f0000000300)="0f", 0x1, 0xff}], 0x400, &(0x7f0000000380)='aead\x00') 03:02:42 executing program 0 (fault-call:2 fault-nth:19): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 03:02:42 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) 03:02:42 executing program 1: r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video36\x00', 0x2, 0x0) dup2(r3, r2) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r2, r0, 0x0, 0xffffff38) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000040)={0xff, 0xfff, 0x6, 0x48, 0xffff8001}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004103) ioctl$TIOCSPGRP(r5, 0x5410, &(0x7f00000000c0)) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMODE(r6, 0x4b44, &(0x7f0000000000)) bind$alg(0xffffffffffffffff, 0x0, 0x0) 03:02:42 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) r3 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, 0x0) write(r3, &(0x7f0000000600)="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", 0x200) sendfile(r3, r4, 0x0, 0x7fffffff) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r5, r3, 0x0, 0xffffff38) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r1) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f00000000c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_G_MODULATOR(r6, 0xc0445636, &(0x7f0000000100)={0x7, "6a75ff85f795b0b500b769a2c81cc1c380436387183f916eaf5efea3f832a49e", 0x1000, 0x7f, 0x1, 0x1, 0x3}) 03:02:42 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r3, 0xffffffffffffffff, 0x0, 0xffffff38) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="2a00000029020008000000010000000000000000020000008100002607002e2f696c653000"], 0x2a) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, 0x0) write(r2, &(0x7f0000000600)="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", 0x200) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r4, r2, 0x0, 0xffffff38) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0x9, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000100000000000000ce0a0000957a5000fcffffff18290000", @ANYRES32=r0, @ANYBLOB="00000000000001001f8105003d0f000018230000", @ANYRES32=r4, @ANYBLOB="00000002010000f9ffffffffffffff00"], &(0x7f0000000000)='GPL\x00', 0x7e, 0xc3, &(0x7f0000000200)=""/195, 0x40f00, 0x0, [], 0x0, 0x6, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x4, 0x3, 0xff, 0x7}, 0x10, 0x0, r0}, 0x78) sendfile(r5, r0, 0x0, 0xffffff3f) [ 1961.173155][T20655] FAULT_INJECTION: forcing a failure. [ 1961.173155][T20655] name failslab, interval 1, probability 0, space 0, times 0 [ 1961.201400][T20655] CPU: 0 PID: 20655 Comm: syz-executor.0 Not tainted 5.6.0-rc1-syzkaller #0 [ 1961.210118][T20655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1961.220265][T20655] Call Trace: 03:02:43 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r3 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, 0x0) write(r3, &(0x7f0000000600)="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", 0x200) sendfile(r3, r4, 0x0, 0x7fffffff) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7fffffff) r6 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r6, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r6, 0xffffffffffffffff, 0x0, 0xffffff38) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x4, 0x81, 0x0, 0x5f, 0x0, 0x1, 0x8860, 0x6, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x5, @perf_bp={&(0x7f00000000c0), 0xc}, 0x40000, 0x4, 0x3, 0x5, 0xd4e, 0xf7a, 0xab1}, 0x0, 0x2, r6, 0x12) sendfile(r5, r3, 0x0, 0xffffff38) ioctl$RTC_ALM_SET(r5, 0x40247007, &(0x7f0000000000)={0x3, 0x2, 0xf, 0x5, 0x3, 0x1, 0x1, 0x13c, 0xfffffffffffffffe}) [ 1961.223572][T20655] dump_stack+0x11d/0x187 [ 1961.227922][T20655] should_fail.cold+0x5/0xf [ 1961.232461][T20655] __should_failslab+0x82/0xb0 [ 1961.237234][T20655] should_failslab+0x5/0xf [ 1961.241660][T20655] __kmalloc+0x54/0x640 [ 1961.245843][T20655] ? rw_copy_check_uvector+0x259/0x280 03:02:43 executing program 0 (fault-call:2 fault-nth:20): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) [ 1961.251432][T20655] rw_copy_check_uvector+0x259/0x280 [ 1961.251465][T20655] import_iovec+0x61/0x220 [ 1961.251487][T20655] vfs_readv+0x72/0xf0 [ 1961.251574][T20655] ? push_pipe+0x24f/0x340 [ 1961.251600][T20655] ? __read_once_size.constprop.0+0xd/0x20 [ 1961.251623][T20655] ? iov_iter_get_pages_alloc+0x260/0xaa0 [ 1961.251654][T20655] default_file_splice_read+0x361/0x590 [ 1961.251762][T20655] ? rw_verify_area+0xe5/0x230 [ 1961.251781][T20655] ? iter_file_splice_write+0x830/0x830 [ 1961.251803][T20655] do_splice_to+0xc7/0x100 [ 1961.251828][T20655] splice_direct_to_actor+0x1b9/0x540 [ 1961.251853][T20655] ? generic_pipe_buf_nosteal+0x20/0x20 [ 1961.251879][T20655] do_splice_direct+0x152/0x1d0 [ 1961.251914][T20655] do_sendfile+0x396/0x810 [ 1961.251944][T20655] __x64_sys_sendfile64+0x121/0x140 [ 1961.251968][T20655] do_syscall_64+0xc7/0x390 [ 1961.252063][T20655] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1961.252077][T20655] RIP: 0033:0x45c889 [ 1961.252109][T20655] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1961.252119][T20655] RSP: 002b:00007f151c1e1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1961.252138][T20655] RAX: ffffffffffffffda RBX: 00007f151c1e26d4 RCX: 000000000045c889 [ 1961.252148][T20655] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 1961.252160][T20655] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1961.252171][T20655] R10: 0800000080004103 R11: 0000000000000246 R12: 0000000000000005 [ 1961.252182][T20655] R13: 00000000000008d4 R14: 00000000004cb7c6 R15: 0000000000000013 [ 1961.421326][T20674] FAULT_INJECTION: forcing a failure. [ 1961.421326][T20674] name failslab, interval 1, probability 0, space 0, times 0 [ 1961.677848][T20674] CPU: 0 PID: 20674 Comm: syz-executor.0 Not tainted 5.6.0-rc1-syzkaller #0 [ 1961.686679][T20674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1961.696849][T20674] Call Trace: [ 1961.700161][T20674] dump_stack+0x11d/0x187 [ 1961.704624][T20674] should_fail.cold+0x5/0xf [ 1961.709161][T20674] __should_failslab+0x82/0xb0 [ 1961.714254][T20674] should_failslab+0x5/0xf [ 1961.718699][T20674] kmem_cache_alloc_node_trace+0x37/0x610 [ 1961.725568][T20674] ? should_fail+0x7c/0x2fd [ 1961.730094][T20674] ? fsnotify+0x6ab/0x7d0 [ 1961.734443][T20674] kvmalloc_node+0x6b/0x100 [ 1961.739000][T20674] seq_read+0x5e8/0x9d0 [ 1961.743184][T20674] ? rw_verify_area+0xe5/0x230 [ 1961.748052][T20674] do_iter_read+0x33d/0x3a0 [ 1961.752569][T20674] vfs_readv+0x9c/0xf0 [ 1961.756753][T20674] ? __read_once_size.constprop.0+0xd/0x20 [ 1961.762596][T20674] ? iov_iter_get_pages_alloc+0x260/0xaa0 [ 1961.768710][T20674] default_file_splice_read+0x361/0x590 [ 1961.774305][T20674] ? rw_verify_area+0xe5/0x230 [ 1961.779081][T20674] ? iter_file_splice_write+0x830/0x830 [ 1961.784639][T20674] do_splice_to+0xc7/0x100 [ 1961.789426][T20674] splice_direct_to_actor+0x1b9/0x540 [ 1961.794821][T20674] ? generic_pipe_buf_nosteal+0x20/0x20 [ 1961.800377][T20674] do_splice_direct+0x152/0x1d0 [ 1961.805250][T20674] do_sendfile+0x396/0x810 [ 1961.809717][T20674] __x64_sys_sendfile64+0x121/0x140 [ 1961.814935][T20674] do_syscall_64+0xc7/0x390 [ 1961.819488][T20674] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1961.825868][T20674] RIP: 0033:0x45c889 [ 1961.829775][T20674] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1961.849389][T20674] RSP: 002b:00007f151c1e1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1961.857832][T20674] RAX: ffffffffffffffda RBX: 00007f151c1e26d4 RCX: 000000000045c889 [ 1961.865823][T20674] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 03:02:43 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r3, r1, 0x0, 0xffffff38) sendmsg$RDMA_NLDEV_CMD_GET(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x1401, 0x400, 0x70bd2d, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x20}}, 0x40040) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) [ 1961.873811][T20674] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1961.881874][T20674] R10: 0800000080004103 R11: 0000000000000246 R12: 0000000000000005 [ 1961.889854][T20674] R13: 00000000000008d4 R14: 00000000004cb7c6 R15: 0000000000000014 03:02:43 executing program 0 (fault-call:2 fault-nth:21): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) [ 1961.992656][ T27] kauditd_printk_skb: 50 callbacks suppressed [ 1961.992673][ T27] audit: type=1804 audit(1586660563.828:4275): pid=20680 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="file0" dev="sda1" ino=16800 res=1 03:02:44 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f00000000c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) bind$alg(0xffffffffffffffff, 0x0, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, 0x0) write(r2, &(0x7f0000000600)="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", 0x200) sendfile(r2, r3, 0x0, 0x7fffffff) ioctl$int_out(r3, 0x2, &(0x7f0000000000)) [ 1962.101254][ T27] audit: type=1804 audit(1586660563.868:4276): pid=20664 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir057656323/syzkaller.yzn8jn/434/file0" dev="sda1" ino=16816 res=1 [ 1962.133152][T20685] FAULT_INJECTION: forcing a failure. [ 1962.133152][T20685] name failslab, interval 1, probability 0, space 0, times 0 03:02:44 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r2, r0, 0x0, 0xffffff38) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='mand\x00', 0x0, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x9, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x18000}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x2000) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00') r6 = open(&(0x7f0000000040)='./file0\x00', 0x149c00, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r6, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r6, 0xffffffffffffffff, 0x0, 0xffffff38) ioctl$PIO_FONTX(r6, 0x4b6c, &(0x7f0000000140)={0x1a4, 0x17, &(0x7f0000000800)="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"}) ioctl$SOUND_MIXER_READ_DEVMASK(r5, 0x80044dfe, &(0x7f00000000c0)) sendfile(r4, r5, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) [ 1962.237889][T20685] CPU: 0 PID: 20685 Comm: syz-executor.0 Not tainted 5.6.0-rc1-syzkaller #0 [ 1962.246600][T20685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1962.248870][ T27] audit: type=1804 audit(1586660563.868:4277): pid=20664 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir057656323/syzkaller.yzn8jn/434/file0" dev="sda1" ino=16816 res=1 [ 1962.256664][T20685] Call Trace: [ 1962.284591][T20685] dump_stack+0x11d/0x187 [ 1962.288936][T20685] should_fail.cold+0x5/0xf [ 1962.293522][T20685] __should_failslab+0x82/0xb0 [ 1962.298281][T20685] should_failslab+0x5/0xf [ 1962.302694][T20685] kmem_cache_alloc_trace+0x26/0x5f0 [ 1962.307977][T20685] ? seq_vprintf+0xe6/0xf0 [ 1962.312480][T20685] cgroup_show_path+0x74/0x260 [ 1962.317277][T20685] ? cgroup_kn_set_ugid+0x130/0x130 [ 1962.322477][T20685] kernfs_sop_show_path+0xb1/0xf0 [ 1962.327585][T20685] ? kernfs_test_super+0xa0/0xa0 [ 1962.332518][T20685] show_mountinfo+0x11e/0x510 [ 1962.337251][T20685] m_show+0x3c/0x50 [ 1962.341110][T20685] seq_read+0x7b3/0x9d0 [ 1962.345277][T20685] do_iter_read+0x33d/0x3a0 [ 1962.349783][T20685] vfs_readv+0x9c/0xf0 [ 1962.353874][T20685] ? __read_once_size.constprop.0+0xd/0x20 [ 1962.359870][T20685] ? iov_iter_get_pages_alloc+0x260/0xaa0 [ 1962.365619][T20685] default_file_splice_read+0x361/0x590 [ 1962.371562][T20685] ? rw_verify_area+0xe5/0x230 [ 1962.376783][T20685] ? iter_file_splice_write+0x830/0x830 [ 1962.382361][T20685] do_splice_to+0xc7/0x100 [ 1962.386776][T20685] splice_direct_to_actor+0x1b9/0x540 [ 1962.392150][T20685] ? generic_pipe_buf_nosteal+0x20/0x20 [ 1962.397948][T20685] do_splice_direct+0x152/0x1d0 [ 1962.402802][T20685] do_sendfile+0x396/0x810 [ 1962.407227][T20685] __x64_sys_sendfile64+0x121/0x140 [ 1962.412433][T20685] do_syscall_64+0xc7/0x390 [ 1962.416939][T20685] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1962.422829][T20685] RIP: 0033:0x45c889 [ 1962.426724][T20685] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1962.447049][T20685] RSP: 002b:00007f151c1e1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1962.455491][T20685] RAX: ffffffffffffffda RBX: 00007f151c1e26d4 RCX: 000000000045c889 [ 1962.463569][T20685] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 1962.471574][T20685] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1962.479540][T20685] R10: 0800000080004103 R11: 0000000000000246 R12: 0000000000000005 [ 1962.488460][T20685] R13: 00000000000008d4 R14: 00000000004cb7c6 R15: 0000000000000015 [ 1962.498182][ T27] audit: type=1804 audit(1586660563.878:4278): pid=20663 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir932491758/syzkaller.D6Mno2/516/file0" dev="sda1" ino=16815 res=1 [ 1962.565798][ T27] audit: type=1804 audit(1586660563.878:4279): pid=20663 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir932491758/syzkaller.D6Mno2/516/file0" dev="sda1" ino=16815 res=1 [ 1962.565821][ T27] audit: type=1804 audit(1586660563.878:4280): pid=20663 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir932491758/syzkaller.D6Mno2/516/file0" dev="sda1" ino=16815 res=1 [ 1962.565897][ T27] audit: type=1804 audit(1586660563.878:4281): pid=20682 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir932491758/syzkaller.D6Mno2/516/file0" dev="sda1" ino=16815 res=1 [ 1962.565918][ T27] audit: type=1804 audit(1586660563.898:4282): pid=20682 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir932491758/syzkaller.D6Mno2/516/file0" dev="sda1" ino=16815 res=1 [ 1962.565937][ T27] audit: type=1804 audit(1586660563.928:4283): pid=20673 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir209219610/syzkaller.nCjs6O/679/file0" dev="sda1" ino=16819 res=1 [ 1962.565957][ T27] audit: type=1804 audit(1586660563.928:4284): pid=20673 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir209219610/syzkaller.nCjs6O/679/file0" dev="sda1" ino=16819 res=1 03:02:50 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, 0x0) sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'essiv(gcm(twofish-generic),blake2s-160-x86)\x00'}, 0x58) syz_mount_image$nfs4(0x0, 0x0, 0x2, 0x2, &(0x7f0000000340)=[{&(0x7f00000002c0)="84a4cadec83582e6d9321b47a05ef7b741ae24a9473f249e5fb21de600c30ac3", 0x20}, {&(0x7f0000000300)="0f", 0x1, 0xff}], 0x400, &(0x7f0000000380)='aead\x00') 03:02:50 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, 0x0) write(r2, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r2, r3, 0x0, 0x7fffffff) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r4, r2, 0x0, 0xffffff38) sendmsg$inet(r2, &(0x7f0000000300)={&(0x7f0000000000)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="c9798dadd8ec723f5f83b02583fa5431e0c1f208997c3e036a856a0137ec78c0eece2e49838d64aa0f9d4b62f892f87aebf1dfbd01fcff41ea9f87042c690ea3117f4c21fbaacb5ed154e68490799933cf17209ba0b90ac55b42b887bef637f48140f1a874c0563500ab14ef5611745f0321e244c44a464c5e72c9a5a823a457ab9b5a00f4089dbf48d65b84718bddddf2df7611d01e46bb1f5d7c822588728134f563b7", 0xa4}], 0x1, &(0x7f0000000240)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x800}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@timestamp={0x44, 0x14, 0x8a, 0x0, 0x5, [0x4, 0x1, 0x9, 0x80000000]}, @ra={0x94, 0x4, 0x1}, @noop, @noop, @end]}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@noop]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x20}}], 0x90}, 0x8c0) write(r0, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) r5 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, 0x0) write(r5, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(0xffffffffffffffff, r1, 0x0, 0x7fffffff) r6 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r6, r0, 0x0, 0xffffff38) 03:02:50 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='io.stat\x00', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, r5, 0x400, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7f, 0x4}}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffffe4}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}]}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x401}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x34}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0x1}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x80}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000040}, 0x2000c0c1) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f00000000c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) 03:02:50 executing program 0 (fault-call:2 fault-nth:22): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 03:02:50 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f00000000c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}, &(0x7f0000000100)=0x10) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000000)={0x5, 0x40, 0xdee}) bind$alg(0xffffffffffffffff, 0x0, 0x0) 03:02:50 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x161001, 0x0) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x410000, 0x0) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x10) r6 = getpid() sched_setattr(r6, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) fcntl$lock(r5, 0x5, &(0x7f00000001c0)={0x0, 0x2, 0x4, 0x7381, r6}) ioctl$VIDIOC_QUERYSTD(r4, 0x8008563f, &(0x7f0000000100)) ioctl$PPPIOCSMRU1(r3, 0x40047452, &(0x7f0000000040)=0x2) write(0xffffffffffffffff, &(0x7f0000000600)="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", 0x200) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7fffffff) r7 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r7, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r7, 0xffffffffffffffff, 0x0, 0xffffff38) sendmsg$NFT_MSG_GETOBJ(r7, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000130a010100000000000000000300000108000340000000030900020000080000000000000900010073797a3000000000"], 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x200480c0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) [ 1968.360450][T20708] FAULT_INJECTION: forcing a failure. [ 1968.360450][T20708] name failslab, interval 1, probability 0, space 0, times 0 [ 1968.393700][ T27] kauditd_printk_skb: 11 callbacks suppressed [ 1968.393717][ T27] audit: type=1800 audit(1586660570.228:4296): pid=20712 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=17044 res=0 03:02:50 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r2, r0, 0x0, 0xffffff38) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, r3, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr="b46d17b5936175b35111efb715dfe64b"}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x18a}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x2000) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) [ 1968.452553][T20708] CPU: 0 PID: 20708 Comm: syz-executor.0 Not tainted 5.6.0-rc1-syzkaller #0 [ 1968.452564][T20708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1968.452572][T20708] Call Trace: [ 1968.452612][T20708] dump_stack+0x11d/0x187 [ 1968.452634][T20708] should_fail.cold+0x5/0xf [ 1968.452659][T20708] __should_failslab+0x82/0xb0 [ 1968.452675][T20708] should_failslab+0x5/0xf [ 1968.452694][T20708] kmem_cache_alloc_trace+0x26/0x5f0 [ 1968.452714][T20708] ? seq_vprintf+0xe6/0xf0 [ 1968.452737][T20708] cgroup_show_path+0x74/0x260 [ 1968.452758][T20708] ? cgroup_kn_set_ugid+0x130/0x130 [ 1968.452843][T20708] kernfs_sop_show_path+0xb1/0xf0 [ 1968.452862][T20708] ? kernfs_test_super+0xa0/0xa0 [ 1968.452877][T20708] show_mountinfo+0x11e/0x510 [ 1968.452944][T20708] m_show+0x3c/0x50 [ 1968.452960][T20708] seq_read+0x7b3/0x9d0 03:02:50 executing program 4: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r2, r0, 0x0, 0xffffff38) [ 1968.452989][T20708] do_iter_read+0x33d/0x3a0 [ 1968.453015][T20708] vfs_readv+0x9c/0xf0 [ 1968.453042][T20708] ? __read_once_size.constprop.0+0xd/0x20 [ 1968.453062][T20708] ? iov_iter_get_pages_alloc+0x260/0xaa0 [ 1968.453127][T20708] default_file_splice_read+0x361/0x590 [ 1968.453177][T20708] ? rw_verify_area+0xe5/0x230 [ 1968.453194][T20708] ? iter_file_splice_write+0x830/0x830 [ 1968.453213][T20708] do_splice_to+0xc7/0x100 [ 1968.453234][T20708] splice_direct_to_actor+0x1b9/0x540 [ 1968.453257][T20708] ? generic_pipe_buf_nosteal+0x20/0x20 [ 1968.453279][T20708] do_splice_direct+0x152/0x1d0 [ 1968.453383][T20708] do_sendfile+0x396/0x810 [ 1968.453425][T20708] __x64_sys_sendfile64+0x121/0x140 [ 1968.453450][T20708] do_syscall_64+0xc7/0x390 [ 1968.453473][T20708] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1968.453492][T20708] RIP: 0033:0x45c889 [ 1968.453513][T20708] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1968.453521][T20708] RSP: 002b:00007f151c1e1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1968.453537][T20708] RAX: ffffffffffffffda RBX: 00007f151c1e26d4 RCX: 000000000045c889 [ 1968.453545][T20708] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 1968.453554][T20708] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1968.453563][T20708] R10: 0800000080004103 R11: 0000000000000246 R12: 0000000000000005 [ 1968.453572][T20708] R13: 00000000000008d4 R14: 00000000004cb7c6 R15: 0000000000000016 [ 1968.472027][ T27] audit: type=1804 audit(1586660570.228:4297): pid=20712 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir932491758/syzkaller.D6Mno2/517/file0" dev="sda1" ino=17044 res=1 [ 1968.472051][ T27] audit: type=1804 audit(1586660570.238:4298): pid=20712 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir932491758/syzkaller.D6Mno2/517/file0" dev="sda1" ino=17044 res=1 [ 1968.472074][ T27] audit: type=1804 audit(1586660570.238:4299): pid=20712 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir932491758/syzkaller.D6Mno2/517/file0" dev="sda1" ino=17044 res=1 [ 1968.472096][ T27] audit: type=1804 audit(1586660570.268:4300): pid=20712 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir932491758/syzkaller.D6Mno2/517/file0" dev="sda1" ino=17044 res=1 [ 1968.472137][ T27] audit: type=1804 audit(1586660570.278:4301): pid=20712 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir932491758/syzkaller.D6Mno2/517/file0" dev="sda1" ino=17044 res=1 [ 1968.527116][ T27] audit: type=1804 audit(1586660570.358:4302): pid=20720 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir932491758/syzkaller.D6Mno2/517/file0" dev="sda1" ino=17044 res=1 [ 1968.533774][ T27] audit: type=1804 audit(1586660570.358:4303): pid=20719 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir932491758/syzkaller.D6Mno2/517/file0" dev="sda1" ino=17044 res=1 [ 1968.538677][ T27] audit: type=1804 audit(1586660570.368:4304): pid=20719 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir932491758/syzkaller.D6Mno2/517/file0" dev="sda1" ino=17044 res=1 [ 1968.573683][ T27] audit: type=1800 audit(1586660570.408:4305): pid=20722 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=17045 res=0 03:02:50 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f00000000c0)) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x4, 0x10040) ioctl$SNDRV_PCM_IOCTL_XRUN(r2, 0x4148, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bind$alg(0xffffffffffffffff, 0x0, 0x0) 03:02:51 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 03:02:51 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm-control\x00', 0x2000, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r3, r1, 0x0, 0xffffff38) ioctl$USBDEVFS_RESETEP(r3, 0x80045503, &(0x7f0000000280)={0x2}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) lsetxattr$trusted_overlay_upper(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='trusted.overlay.upper\x00', &(0x7f0000000340)={0x0, 0xfb, 0x103, 0x1, 0x45, "5854d277c090dd7203bdb05d683d92d4", "da2ce7525248998a26c248406de5638e6f08f1d883e90ca488ead4bcd4c53a90d21fb4b0ce967db66a63549fe0e1a23b8e93edc4fc1a8ea13e612cd738eea769254fe2e96e0691e77bf1a97379fe3994a05e7d1f7b642d9f61d843ded765d91461422f19bf60ab27068eac0d34b843d21462f832bdd6e6dd462a14f8e19adc34800eb31a27578a0dcca2a1651669a1ce5ce61c9d7aac3428f3fae080eebb14c53f69a865922b49c8206a45d3409bc823eb1e4426fcdc19cae3248515a7f432dc4c30c2b9cd031a62bf4c01ba90315b9822306f2a2bd6d326005cab8f2b7a977374007c7eaa5821d4ff16b193467a"}, 0x103, 0x2) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004103) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000100)={{{@in=@loopback}}, {{@in6=@mcast2}, 0x0, @in=@empty}}, &(0x7f0000000040)=0x139) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f00000000c0)) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000000)={0xfffffff8, 0xfffffff9, 0x5, 0x92, 0x10, "0d064dffbc35ec1b22d88eb8aac4b529cfed87"}) syz_open_dev$tty1(0xc, 0x4, 0x1) 03:02:51 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f00000000c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) bind$alg(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x100000001, 0x10000) 03:03:00 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, 0x0) sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'essiv(gcm(twofish-generic),blake2s-160-x86)\x00'}, 0x58) syz_mount_image$nfs4(0x0, 0x0, 0x2, 0x2, &(0x7f0000000340)=[{&(0x7f00000002c0)="84a4cadec83582e6d9321b47a05ef7b741ae24a9473f249e5fb21de600c30ac3", 0x20}, {&(0x7f0000000300)="0f", 0x1, 0xff}], 0x400, &(0x7f0000000380)='aead\x00') 03:03:00 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004102) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 03:03:00 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, 0x0) write(r2, &(0x7f0000000600)="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", 0x200) sendfile(r2, r3, 0x0, 0x7fffffff) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r4, r2, 0x0, 0xffffff38) ioctl$VIDIOC_TRY_ENCODER_CMD(r4, 0xc028564e, &(0x7f0000000000)={0x1, 0x0, [0x400, 0x2, 0x1, 0x3ff, 0x5, 0x334a, 0x30f, 0x9]}) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r5, r0, 0x0, 0xffffff38) 03:03:00 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) r3 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, 0x0) write(r3, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r3, r4, 0x0, 0x7fffffff) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(0xffffffffffffffff, r3, 0x0, 0xffffff38) r5 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, 0x0) write(r5, &(0x7f0000000600)="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", 0x200) sendfile(r5, r6, 0x0, 0x7fffffff) sendfile(r3, r6, 0x0, 0xe81d) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) 03:03:00 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f00000000c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) bind$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000000)) 03:03:00 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) socket$kcm(0x29, 0x7, 0x0) clone(0xdc228400, &(0x7f0000000140)="cdf05bc40cd0691d75f607110cb15ae9a0a8174251b8f3b6f3ab760c5d12bba6a5e9384082660767301ee1697c5f58a439f04153a7aae15cce3ee23bbb41eb89f8bcd4b7ee8b36be7c7bcc6088eb1ce4e12ce2cdd8c7dc231b5ff12f2cf2d9164f7f576030997677e0241ca6529bc705d462397e25b4c974dcede1597d490f1c1681d5ea3b19b17ae28633449507add6648f76a0ae9de136a087f6615361239d3459c541700139e8bbb58a3320edeb555cc933c12738be166f0627de9be7ddce0de28806fa95fafa0f2d4eb6c4cfad69bfd875d64c5ef354e9abd539be944ffc94971139f71c1514f1a906474c0ca415e261d08f7ecbef0000", &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="0c200af2effb8a631736584c00f306c3fba6ce89c521ff9ca389d225c59e8ec21bbd3d3f88f8e48d4686a3b8a8919bfe501dd27d2127e8ec8c5749198de7fa63da") socketpair(0x4, 0x800, 0x1f, &(0x7f0000000040)={0xffffffffffffffff}) r3 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, 0x0) write(r3, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r3, r4, 0x0, 0x7fffffff) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r5, r3, 0x0, 0xffffff38) getsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000340)=0x4d, &(0x7f0000000380)=0x4) ioctl$sock_inet_SIOCSIFBRDADDR(r2, 0x891a, &(0x7f0000000100)={'bridge0\x00', {0x2, 0x4e20, @broadcast}}) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f00000000c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000000)="7eb278473b9061d401d605c4d6b5e0b7", 0x10) [ 1978.937845][ T27] kauditd_printk_skb: 13 callbacks suppressed [ 1978.937862][ T27] audit: type=1800 audit(1586660580.768:4319): pid=20769 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16833 res=0 03:03:00 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$TCSETXW(r0, 0x5435, &(0x7f0000000000)={0x6, 0x5, [0x3, 0x5, 0x3f, 0xfffb], 0x8}) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f00000000c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) bind$alg(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) [ 1979.014889][T20774] IPVS: ftp: loaded support on port[0] = 21 [ 1979.024272][ T27] audit: type=1804 audit(1586660580.788:4320): pid=20769 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir932491758/syzkaller.D6Mno2/519/file0" dev="sda1" ino=16833 res=1 [ 1979.088928][ T27] audit: type=1804 audit(1586660580.808:4321): pid=20769 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir932491758/syzkaller.D6Mno2/519/file0" dev="sda1" ino=16833 res=1 03:03:01 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004104) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 03:03:01 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000080, 0x22080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x0, 0x40}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) [ 1979.225270][ T27] audit: type=1804 audit(1586660580.808:4322): pid=20769 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir932491758/syzkaller.D6Mno2/519/file0" dev="sda1" ino=16833 res=1 [ 1979.347549][ T27] audit: type=1804 audit(1586660580.888:4323): pid=20781 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir932491758/syzkaller.D6Mno2/519/file0" dev="sda1" ino=16833 res=1 03:03:01 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) r3 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) write(0xffffffffffffffff, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(0xffffffffffffffff, r5, 0x0, 0x7fffffff) sendfile(r1, r5, &(0x7f0000000000)=0x23be9a1d, 0x43e3) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, 0x0) write(r3, &(0x7f0000000600)="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", 0x200) sendfile(r3, r4, 0x0, 0x7fffffff) r6 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r6, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r6, r3, 0x0, 0xffffff38) ioctl$VIDIOC_DV_TIMINGS_CAP(r3, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, [], @bt={0xbfffff01, 0x3, 0x88c8, 0xabf4, 0x100000000, 0x2, 0x3, 0x7}}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) [ 1979.347647][ T27] audit: type=1800 audit(1586660580.918:4325): pid=20782 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16838 res=0 [ 1979.347668][ T27] audit: type=1804 audit(1586660580.918:4326): pid=20782 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir209219610/syzkaller.nCjs6O/682/file0" dev="sda1" ino=16838 res=1 [ 1979.347687][ T27] audit: type=1804 audit(1586660580.908:4324): pid=20770 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="file0" dev="sda1" ino=16837 res=1 [ 1979.347709][ T27] audit: type=1804 audit(1586660580.988:4327): pid=20782 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir209219610/syzkaller.nCjs6O/682/file0" dev="sda1" ino=16838 res=1 03:03:01 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004109) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 03:03:01 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r3, r1, 0x0, 0xffffff38) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffff38) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f0000000000)=0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7fffffff, 0x200}, 0x800, 0x6, 0x1, 0x0, 0x0, 0x0, 0x1}, r0, 0x0, r1, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004103) ioctl$TIOCSPGRP(r4, 0x5410, &(0x7f00000000c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) bind$alg(0xffffffffffffffff, 0x0, 0x0) [ 1979.678877][ T2662] tipc: TX() has been purged, node left! [ 1979.745670][ T27] audit: type=1804 audit(1586660581.578:4328): pid=20804 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="file0" dev="sda1" ino=16837 res=1 [ 1979.836477][T20787] IPVS: ftp: loaded support on port[0] = 21 [ 1981.238962][ T2662] tipc: TX() has been purged, node left! 03:03:09 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, 0x0) sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'essiv(gcm(twofish-generic),blake2s-160-x86)\x00'}, 0x58) syz_mount_image$nfs4(0x0, 0x0, 0x2, 0x2, &(0x7f0000000340)=[{&(0x7f00000002c0)="84a4cadec83582e6d9321b47a05ef7b741ae24a9473f249e5fb21de600c30ac3", 0x20}, {&(0x7f0000000300)="0f", 0x1, 0xff}], 0x400, &(0x7f0000000380)='aead\x00') 03:03:09 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r3 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, 0x0) write(r4, &(0x7f0000000600)="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", 0x200) sendfile(r3, r4, 0x0, 0x7fffffff) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r5, r3, 0x0, 0xffffff38) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r5, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x114, 0x3, 0x1, 0x0, 0x0, 0x0, {0x1, 0x0, 0x8}, [@CTA_ID={0x8}, @CTA_SEQ_ADJ_REPLY={0x2c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1ff}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xad7}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x402}, @CTA_SEQ_ADJ_REPLY={0x2c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x95}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xfff}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5}]}, @CTA_TUPLE_REPLY={0x64, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @empty}}}]}, @CTA_NAT_DST={0x34, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast2}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V4_MINIP={0x8, 0x1, @broadcast}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x4040}, 0x894) 03:03:09 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x80000008000410d) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 03:03:09 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)="8552f054e7ba3b4cd46e03e79c4a7cea3ea8b8cad9db3fe42dd8c6e188585303e404c6374aa70824c8756beb5944391bb9fe4804ff697fb6c9396b0eac0cbada6cada373454c87ca714864f37a2a1da36ee89a9d45163a94875b981342aa3ee9ad82912ad4c4a7cc4922b778de0956560991a50218d87e2b5b22052f69fcc00de643aa122e927c44d20387d716de083dce7aedd473fc8245505f15b9c406eb03ea895b58bcfde8ce408b78fb98f3dc34bb6c3a765f9500d2114617334f944639470548bf17679b33adbdcbab85e533c4e47c45f5537acbb514407c1421578b5e12000a6e5dc2c235d932ac3cd6", 0xed}, {&(0x7f0000000280)="11b5eb9a9f2acdcf7b81695a722062a7942e0af139c5e2bf3354668523890332e8c65a7e6e7e7879ab6fc4e6460e7aecfd1a99e288aceffecd7caba7fd13db19e0578adcedb2fb45b1d0ebdddd9bca70fdf6fbc0bc62fe245a3e1166f3d32dcbbfec74b9d2fecb0cc4df8534657f7714ca1a5f5e6a15928d45f79af54ea0517a7e46f4974f3b5ea015bdaaaad0ece22f756ea54974c30bbbe05d8dd452dab02bdfc0af3834a93038f2215a5990b8349751b819b489f2f7f049e50aa6921986c04f786d1b06fb4543", 0xc8}], 0x2, 0x3) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r3 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, 0x0) write(r3, &(0x7f0000000600)="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", 0x200) sendfile(r3, r4, 0x0, 0x7fffffff) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r5, r3, 0x0, 0xffffff38) ioctl$TIOCSIG(r3, 0x40045436, 0x3e) sendfile(r2, r0, 0x0, 0xffffff34) 03:03:09 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='timers\x00') sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x140e, 0x20, 0x70bd2d, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x8081}, 0x1) sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f00000000c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) 03:03:09 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0xe48, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x10001}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') setuid(0x0) ioprio_get$uid(0x3, 0x0) r2 = getgid() r3 = socket$inet_udplite(0x2, 0x2, 0x88) fstat(r3, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) fstat(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="020000000100000000000000040003000000000008000100", @ANYRES32=r2, @ANYBLOB='?\x00\a@', @ANYRES32=r4, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r6, @ANYBLOB="100000000d00"/16], 0x7, 0x3) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r7) ioprio_get$uid(0x3, r7) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x2080021, &(0x7f0000000100)=ANY=[@ANYRESOCT=r0]) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000180)={0x20, 0x0, 0x4, {0xfffffffc, 0x0, 0xfff, 0x3}}, 0x20) sendfile(r0, r1, 0x0, 0x800000080004107) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f00000000c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) bind$alg(0xffffffffffffffff, 0x0, 0x0) [ 1987.412075][ T27] kauditd_printk_skb: 11 callbacks suppressed [ 1987.412094][ T27] audit: type=1800 audit(1586660589.248:4340): pid=20843 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16945 res=0 [ 1987.432781][ T27] audit: type=1804 audit(1586660589.268:4341): pid=20843 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir932491758/syzkaller.D6Mno2/520/file0" dev="sda1" ino=16945 res=1 [ 1987.508480][ T27] audit: type=1804 audit(1586660589.348:4342): pid=20847 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir932491758/syzkaller.D6Mno2/520/file0" dev="sda1" ino=16945 res=1 [ 1987.512078][ T27] audit: type=1804 audit(1586660589.348:4343): pid=20847 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir932491758/syzkaller.D6Mno2/520/file0" dev="sda1" ino=16945 res=1 03:03:09 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) write(0xffffffffffffffff, &(0x7f0000000600)="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", 0x200) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r3, 0xffffffffffffffff, 0x0, 0xffffff38) r4 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, 0x0) write(r4, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r4, r5, 0x0, 0x7fffffff) r6 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r6, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r6, r4, 0x0, 0xffffff38) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)={0xffffffffffffffff, r4}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) [ 1987.549338][ T27] audit: type=1804 audit(1586660589.378:4344): pid=20847 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir932491758/syzkaller.D6Mno2/520/file0" dev="sda1" ino=16945 res=1 03:03:09 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f00000000c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) bind$alg(0xffffffffffffffff, 0x0, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, 0x0) write(r2, &(0x7f0000000600)="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", 0x200) sendfile(r2, r3, 0x0, 0x7fffffff) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r4, r2, 0x0, 0xffffff38) sendmsg$NFNL_MSG_COMPAT_GET(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x40, 0x0, 0xb, 0x0, 0x0, 0x0, {0x1}, [@NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_NAME={0x8, 0x1, '+#(\x00'}, @NFTA_COMPAT_NAME={0xe, 0x1, 'mountinfo\x00'}, @NFTA_COMPAT_NAME={0x9, 0x1, 'eth1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x192deb80be51c98a}, 0x508c1) 03:03:09 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004110) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 03:03:09 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r3, r1, 0x0, 0xffffff38) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @loopback}, {0x2, 0x0, 0xffffffff, @ipv4={[], [], @loopback}}, r4}}, 0x48) write$RDMA_USER_CM_CMD_CONNECT(r3, &(0x7f0000000100)={0x6, 0x118, 0xfa00, {{0x3, 0x5, "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", 0x2, 0x20, 0x9d, 0x80, 0x74, 0x81, 0x7}, r4}}, 0x120) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004103) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f00000000c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) 03:03:09 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r3 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(r1, 0xc0186419, &(0x7f00000000c0)={0x4, &(0x7f0000000140)=""/115, &(0x7f0000000540)=[{0x6, 0xac, 0x6, &(0x7f0000000280)=""/172}, {0x6, 0xe5, 0x0, &(0x7f0000000340)=""/229}, {0x4, 0xc1, 0x5, &(0x7f0000000440)=""/193}, {0x8000, 0x2c, 0x8, &(0x7f0000000000)=""/44}]}) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, 0x0) write(r3, &(0x7f0000000600)="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", 0x200) sendfile(r3, r4, 0x0, 0x7fffffff) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r5, r3, 0x0, 0xffffff38) ioctl$VFIO_CHECK_EXTENSION(r3, 0x3b65, 0x1) [ 1987.867529][ T27] audit: type=1804 audit(1586660589.698:4345): pid=20853 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="file0" dev="sda1" ino=16530 res=1 [ 1987.890579][ T27] audit: type=1804 audit(1586660589.728:4346): pid=20856 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="file0" dev="sda1" ino=16530 res=1 [ 1987.948407][ T27] audit: type=1800 audit(1586660589.778:4347): pid=20860 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=16843 res=0 [ 1987.957792][ T27] audit: type=1804 audit(1586660589.788:4348): pid=20860 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir057656323/syzkaller.yzn8jn/443/file0" dev="sda1" ino=16843 res=1 [ 1988.051975][ T27] audit: type=1804 audit(1586660589.888:4349): pid=20868 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir209219610/syzkaller.nCjs6O/684/file0" dev="sda1" ino=16641 res=1 03:03:10 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004119) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 03:03:16 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, 0x0) sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'essiv(gcm(twofish-generic),blake2s-160-x86)\x00'}, 0x58) syz_mount_image$nfs4(0x0, 0x0, 0x2, 0x2, &(0x7f0000000340)=[{&(0x7f00000002c0)="84a4cadec83582e6d9321b47a05ef7b741ae24a9473f249e5fb21de600c30ac3", 0x20, 0x7}, {&(0x7f0000000300)="0f", 0x1, 0xff}], 0x0, &(0x7f0000000380)='aead\x00') 03:03:16 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f00000000c0)=""/234) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, 0x0) write(r3, &(0x7f0000000600)="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", 0x200) sendfile(r3, r4, 0x0, 0x7fffffff) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r5, r3, 0x0, 0xffffff38) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000300)={0x101, 0x7, &(0x7f0000000200)=[0x8, 0x400, 0x1, 0x4, 0x7, 0x8000, 0xfffffffc], &(0x7f0000000240)=[0x9, 0x4, 0x10001, 0x472, 0x8000, 0x8, 0x8, 0xffff, 0x6], &(0x7f0000000280)=[0x6], &(0x7f00000002c0)=[0x3, 0x7f, 0x8, 0xfffffffe, 0xd5b9, 0x6, 0x0, 0x8], 0x0, 0xae78}) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r2, r6, 0x0, 0x800000080004103) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0)='batadv\x00') openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x25a281, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) 03:03:16 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@alg, &(0x7f0000000100)=0x80, 0xc00) recvfrom$llc(r1, &(0x7f0000000140)=""/238, 0xee, 0x10001, &(0x7f0000000240)={0x1a, 0x303, 0x7, 0x2f, 0x4, 0x4, @multicast}, 0x10) fcntl$setstatus(r0, 0x4, 0x2000) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004103) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f00000000c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) 03:03:16 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x80000008000412d) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 03:03:16 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000100)='./file0\x00', 0x2840c2, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, 0x0) write(r2, &(0x7f0000000600)="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", 0x200) sendfile(r2, r3, 0x0, 0x7fffffff) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r4, r2, 0x0, 0xffffff38) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={r6, 0x6, 0x0, 0xb5}, 0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000140)={r6, @in6={{0xa, 0x0, 0x1ff, @loopback}}, 0x2, 0x2}, &(0x7f0000000240)=0x90) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000280)=ANY=[@ANYRES32=r6, @ANYBLOB="9e000000f6f288b37c0dcc00cb3449527f0c89f01155d24389721eddff8dca4649f932c57fadcadb28bbcdd4589318d0e19fb16a44ae57a08bab52ce78998ad5a634d56298520d29d8403cfc47e981b503a570e756fb0ff17a32e5ed9cf4487c406f4f5aa4de729068640566a813adc4f64a9045393ad7306f15341f141025832c39c89850da1549f21854f21ecff185cd25e2fc00e932d3de2e43d8bb0a49f3d94b974c37fcfa5136932f163ea55c38af00b14640dcece95ae25427f141e0ee6793af724818a5"], &(0x7f0000000000)=0xa6) r7 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r7, r0, 0x0, 0xffffff38) 03:03:16 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f00000000c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) bind$alg(0xffffffffffffffff, 0x0, 0x0) [ 1994.611845][ T27] kauditd_printk_skb: 14 callbacks suppressed [ 1994.611862][ T27] audit: type=1800 audit(1586660596.448:4364): pid=20895 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16861 res=0 [ 1994.724175][ T27] audit: type=1804 audit(1586660596.448:4365): pid=20895 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir932491758/syzkaller.D6Mno2/521/file0" dev="sda1" ino=16861 res=1 [ 1994.724198][ T27] audit: type=1804 audit(1586660596.498:4366): pid=20901 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir932491758/syzkaller.D6Mno2/521/file0" dev="sda1" ino=16861 res=1 [ 1994.724220][ T27] audit: type=1804 audit(1586660596.528:4367): pid=20901 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir932491758/syzkaller.D6Mno2/521/file0" dev="sda1" ino=16861 res=1 03:03:16 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x80000008000414f) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 03:03:16 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) r3 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, 0x0) write(r3, &(0x7f0000000600)="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", 0x200) sendfile(r3, r4, 0x0, 0x7fffffff) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r5, r3, 0x0, 0xffffff38) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r3, 0xc1004111, &(0x7f00000000c0)={0x0, [0x4, 0x6, 0x6], [{0x100, 0x1, 0x1, 0x1, 0x1, 0x1}, {0x10000, 0x8000, 0x1, 0x1, 0x1}, {0x80000000, 0x6, 0x1, 0x1, 0x1}, {0x100000, 0x8, 0x1, 0x0, 0x0, 0x1}, {0x20, 0xaf50, 0x1, 0x1, 0x1, 0x1}, {0x2bd, 0x7ff, 0x1, 0x0, 0x1}, {0x3bed91e7, 0xffffffff, 0x0, 0x1, 0x1, 0x1}, {0x2, 0xffb, 0x1, 0x0, 0x0, 0x1}, {0x3, 0x40, 0x1, 0x1, 0x1}, {0x247, 0x9, 0x1, 0x1}, {0x1000, 0x9, 0x1, 0x0, 0x1}, {0x8001, 0x0, 0x0, 0x0, 0x0, 0x1}], 0x1000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) [ 1994.724242][ T27] audit: type=1804 audit(1586660596.548:4368): pid=20901 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir932491758/syzkaller.D6Mno2/521/file0" dev="sda1" ino=16861 res=1 [ 1994.841156][ T27] audit: type=1804 audit(1586660596.678:4369): pid=20903 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="file0" dev="sda1" ino=17050 res=1 03:03:16 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') fspick(r1, &(0x7f0000000000)='./file0\x00', 0x0) sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f00000000c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) bind$alg(0xffffffffffffffff, 0x0, 0x0) 03:03:16 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000000)='net/sockstat\x00') sendfile(r0, r2, 0x0, 0x800000080004103) r3 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, 0x0) write(r3, &(0x7f0000000600)="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", 0x200) sendfile(r3, r4, 0x0, 0x7fffffff) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r5, r3, 0x0, 0xffffff38) ioctl$RTC_WIE_OFF(r5, 0x7010) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$PPPIOCGIDLE(0xffffffffffffffff, 0x8010743f, &(0x7f00000000c0)) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) [ 1995.157944][ T27] audit: type=1804 audit(1586660596.988:4370): pid=20919 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="file0" dev="sda1" ino=16993 res=1 [ 1995.266731][ T27] audit: type=1800 audit(1586660597.098:4371): pid=20925 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=16858 res=0 03:03:17 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) [ 1995.322269][ T27] audit: type=1804 audit(1586660597.108:4372): pid=20925 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir888993330/syzkaller.9XPLg2/589/file0" dev="sda1" ino=16858 res=1 03:03:17 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000004040, 0x0) write$9p(r1, &(0x7f0000001400)="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", 0x600) sendfile(r1, r2, 0x0, 0x10000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0xc0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r3}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0x0, 0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000440)='em0:]\x00', r3}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, r1, 0x0, 0x2, &(0x7f0000000040)='}\x00', r3}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000380)='system/vmnet1\x00', r3}, 0x30) r5 = getpid() sched_setattr(r5, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) clone3(&(0x7f0000000440)={0x1340000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000100), {0x1e}, &(0x7f0000000140)=""/152, 0x98, &(0x7f0000000200)=""/217, &(0x7f0000000400)=[0x0, 0x0, 0x0, r4, 0xffffffffffffffff, 0xffffffffffffffff, r5], 0x7}, 0x50) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r6, r7, 0x0, 0x800000080004103) ioctl$RTC_IRQP_SET(r7, 0x4008700c, 0x1fb5) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f00000000c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) [ 1995.368668][ T27] audit: type=1804 audit(1586660597.198:4373): pid=20927 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir888993330/syzkaller.9XPLg2/589/file0" dev="sda1" ino=16858 res=1 03:03:22 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x40040, 0x0) ioctl$TCSETXW(r1, 0x5435, &(0x7f0000000040)={0x7, 0x1, [0x3, 0x9, 0x5, 0x1f, 0x4], 0xad1}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) 03:03:22 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x34, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@bridge_newneigh={0x30, 0x1c, 0xb25, 0x0, 0x0, {0xa, 0x0, 0x0, r3}, [@NDA_DST_IPV6={0x14, 0x1, @loopback}]}, 0x30}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000001000050700"/20, @ANYRES32=r7, @ANYBLOB="000000000000000014001280090001000263616e00001500267a7906853fb55126270d4ad7fc1a0a4a6811767b93a3122a8bce0dfe59d4cd282cb59c433ad01144779247ae8680f1c2236dc1"], 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@bridge_newneigh={0x30, 0x1c, 0xb25, 0x0, 0x0, {0xa, 0x0, 0x0, r7}, [@NDA_DST_IPV6={0x14, 0x1, @loopback}]}, 0x30}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000001bc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001b80)={&(0x7f0000000480)=ANY=[@ANYBLOB="c0050000", @ANYRES16=0x0, @ANYBLOB="08002abd7000fbdbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="c0000280400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400ff07000008000600", @ANYRES32=0x0, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000900000008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="dc0102803c0001002b35e024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008", @ANYRES32=0x0, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400020000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000700000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400080000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="700202803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400090000007c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000004c000400fdff210601000100fffe02050400000032bb0220080000001603017f0500000000000100ff030000ff017e0833df00000200016fff7f00007579050208000000090003510000008040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f61646361737400000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004001f0000004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e67000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400ff00000008000600", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="800002807c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000004c00040000000009ffffffffaa070104080000000300061f0700000009000003927d000003007802010000808000053f050000004d07271f04000000ffff0258010000008706ccab09000000"], 0x5c0}, 0x1, 0x0, 0x0, 0x40840}, 0x40801) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f00000000c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) bind$alg(0xffffffffffffffff, 0x0, 0x0) 03:03:22 executing program 4: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x482480, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = creat(&(0x7f0000000000)='./file1\x00', 0x8) connect(r2, &(0x7f0000000180)=@isdn={0x22, 0x1f, 0x4, 0x1, 0x9}, 0x80) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r3, r0, 0x0, 0xffffff38) 03:03:22 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, 0x0) sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'essiv(gcm(twofish-generic),blake2s-160-x86)\x00'}, 0x58) syz_mount_image$nfs4(0x0, 0x0, 0x2, 0x2, &(0x7f0000000340)=[{&(0x7f00000002c0)="84a4cadec83582e6d9321b47a05ef7b741ae24a9473f249e5fb21de600c30ac3", 0x20, 0x7}, {&(0x7f0000000300)="0f", 0x1, 0xff}], 0x0, &(0x7f0000000380)='aead\x00') 03:03:22 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x3, 0xfffffffffffffeb3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f00000000c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) 03:03:22 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) pidfd_send_signal(r1, 0x39, &(0x7f0000000000)={0x34, 0x6, 0x1000}, 0x0) [ 2001.024444][T20953] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2001.033741][ T27] kauditd_printk_skb: 9 callbacks suppressed [ 2001.033759][ T27] audit: type=1800 audit(1586660602.858:4383): pid=20956 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16786 res=0 03:03:22 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r3, r1, 0x0, 0xffffff38) dup(r3) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) [ 2001.105130][T20961] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 03:03:23 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0xf8600, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r3 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, 0x0) write(r3, &(0x7f0000000600)="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", 0x200) sendfile(r3, r4, 0x0, 0x7fffffff) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r5, r3, 0x0, 0xffffff38) signalfd(r3, &(0x7f0000000000)={[0x7fffffff]}, 0x8) sendfile(r2, r0, 0x0, 0xffffff38) r6 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r6, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r6, 0xffffffffffffffff, 0x0, 0xffffff38) setsockopt$inet_dccp_int(r6, 0x21, 0x6, &(0x7f00000000c0)=0x6, 0x4) 03:03:23 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x648dd0740e23996b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r2, 0xffffffffffffffff, 0x0, 0xffffff35) r3 = accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x0) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000180)={{r3}, 0x80000001, 0xf071, 0x1f}) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x200, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r5 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x1, 0x1) ftruncate(r5, 0x0) ioctl$FS_IOC_GETVERSION(r4, 0x80087601, &(0x7f0000000040)) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r6, r7, 0x0, 0x800000080004103) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f00000000c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) [ 2001.211369][ T27] audit: type=1800 audit(1586660603.048:4384): pid=20969 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=16769 res=0 03:03:23 executing program 1: r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r2, r0, 0x0, 0xffffff38) sendmsg$AUDIT_DEL_RULE(r0, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x484}, 0x1, 0x0, 0x0, 0x10}, 0x8801) perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004103) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r5, 0xffffffffffffffff, 0x0, 0xffffff38) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000580)={0xa, {0x0, 0x1f, 0x7}}, 0xa) ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f00000000c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) bind$alg(0xffffffffffffffff, 0x0, 0x0) [ 2001.278904][ T27] audit: type=1804 audit(1586660603.048:4385): pid=20969 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="file0" dev="sda1" ino=16769 res=1 03:03:23 executing program 0: syz_genetlink_get_family_id$l2tp(&(0x7f00000004c0)='l2tp\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0xbbc) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffff38) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000580)=0x3, 0x4) pipe(&(0x7f0000000500)={0xffffffffffffffff}) getsockopt$ARPT_SO_GET_ENTRIES(r3, 0x0, 0x61, &(0x7f0000000800)={'filter\x00', 0xa6, "f514d1ed1ba16d1b9d1e253715501b757285355b30e0353c33c3d230bab8982658f2e024fdc2c7a423b957c7877e80a4f8664f024748f80973bfa906d28739ca9422c88666429a8f5f60d515ba551d8cdd9fe91d8680f259dd9615c6f2ce0f93e51fb1c73a044fc4b4b19914a236ff6d3a410592ef481822c305985c01179478c965ebac849b7a1cafb078bd8af46737ef97bf4a0f2be9e67e0896e3e0fcf5c7b482f16af67b"}, &(0x7f0000000540)=0xca) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r4, r1, 0x0, 0xffffff38) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000000)={0x113, 0x19, &(0x7f00000000c0)="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"}) [ 2001.335866][ T27] audit: type=1804 audit(1586660603.138:4386): pid=20975 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="file0" dev="sda1" ino=16769 res=1 [ 2001.397419][ T27] audit: type=1804 audit(1586660603.158:4387): pid=20971 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir209219610/syzkaller.nCjs6O/688/file0" dev="sda1" ino=16830 res=1 03:03:23 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, 0xffffffffffffffff, 0x0, 0x800000080004103) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f00000000c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) [ 2001.454891][ T27] audit: type=1804 audit(1586660603.258:4388): pid=20974 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir932491758/syzkaller.D6Mno2/523/file0" dev="sda1" ino=16577 res=1 [ 2001.483548][ T27] audit: type=1804 audit(1586660603.268:4389): pid=20974 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir932491758/syzkaller.D6Mno2/523/file0" dev="sda1" ino=16577 res=1 [ 2001.599435][ T27] audit: type=1800 audit(1586660603.278:4390): pid=20982 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=16881 res=0 [ 2001.637754][ T27] audit: type=1804 audit(1586660603.288:4391): pid=20982 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir888993330/syzkaller.9XPLg2/591/file0" dev="sda1" ino=16881 res=1 03:03:23 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r0, 0x28}, 0x10) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x80202, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f00000002c0)={0x1, 0x3, 0x1000, 0x70, &(0x7f00000001c0)="b67d0b455fa6065cc9595bdd1242d2c2e2af93be98a0043c8cefaf794c670c4b21f6c78ebe523d779c34d4b28eaddd0e00fb979dd759a99f764ea839a63f4c865670b834c1d99735bc7342dcaa759b29218450b7a596da93aef4a2c625c5d1abc723e8acece81e5b504ccc4652a78c1b", 0x56, 0x0, &(0x7f0000000240)="39206fb064816b5a2ee7ac759ff97b3d0b698bde942e4deb10dea75bd553de3dd01547a76e1cdcc9a02af8af79b59bf0a0df270cd3e7443263d7a2e8953f1591284653b91924b0f2c9ab7e3b876132bb10dfe83580a1"}) sendfile(r0, r1, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r3, r0, 0x0, 0xffffff38) 03:03:23 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f00000000c0)) r3 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, 0x0) write(r3, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r3, r4, 0x0, 0x7fffffff) r5 = socket$netlink(0x10, 0x3, 0x15) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SET(r5, &(0x7f00000009c0)={0x0, 0xb, &(0x7f0000000980)={&(0x7f00000007c0)={0x14, r6, 0xffff}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00 \x00', @ANYRES16=r6, @ANYBLOB="000425bd7000fedbdf25050000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r7 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r7, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r7, r3, 0x0, 0xffffff38) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r3, 0xc0105303, &(0x7f0000000000)={0x3f, 0x3, 0x8}) syz_open_dev$tty1(0xc, 0x4, 0x1) [ 2001.667666][ T27] audit: type=1800 audit(1586660603.288:4392): pid=20980 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=16705 res=0 03:03:23 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000)="29bea17d8a8763ad74a1a0af46cbcec1a558f90011469ffd10c7ec4cc656b6b116ac66644ec7e3847953bf1cfee971720fb2a6247e5a4176c03c49ef1fd1bba3c45c8d5fbcb7cdd0faf288ffd303835bdd9950e3b0d9f0f703a0f17a55fd00b90601efececaf1dbd", 0x68, r0}, 0x68) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f00000000c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) 03:03:29 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r3, r1, 0x0, 0xffffff38) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffff38) fsync(0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f0000000100)={0x4, 0xfffffffd, 0x0, 'queue0\x00', 0xfffffffe}) fcntl$setstatus(r0, 0x4, 0x2000) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, 0xffffffffffffffff, 0x0, 0x800000080004103) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x10100, 0x0) ioctl$VIDIOC_G_SELECTION(r5, 0xc040565e, &(0x7f0000000040)={0x4, 0x101, 0x2, {0x1, 0x7, 0x5, 0x2}}) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f00000001c0)=0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) 03:03:29 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, 0x0) write(r2, &(0x7f0000000600)="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", 0x200) sendfile(r2, r3, 0x0, 0x7fffffff) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7fffffff) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r5, 0xffffffffffffffff, 0x0, 0xffffff38) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) sendfile(r4, r2, 0x0, 0xffffff38) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r4, 0xc0045540, &(0x7f0000000000)=0x1) 03:03:29 executing program 0: r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) openat(r0, &(0x7f0000000140)='./file0\x00', 0x400, 0xdb09bc1986578ee4) sendfile(r2, r0, 0x0, 0xffffff38) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x30, r4, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x9}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xd9a}]}, 0x10e}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x38, r4, 0x4, 0x70bd25, 0x25dfdbff, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7fff}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={[], [], @broadcast}}]}, 0x38}}, 0x20048054) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004102) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 03:03:29 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, 0x0) sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'essiv(gcm(twofish-generic),blake2s-160-x86)\x00'}, 0x58) syz_mount_image$nfs4(0x0, 0x0, 0x2, 0x2, &(0x7f0000000340)=[{&(0x7f00000002c0)="84a4cadec83582e6d9321b47a05ef7b741ae24a9473f249e5fb21de600c30ac3", 0x20, 0x7}, {&(0x7f0000000300)="0f", 0x1, 0xff}], 0x0, &(0x7f0000000380)='aead\x00') 03:03:29 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f00000000c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) bind$alg(0xffffffffffffffff, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x149020, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={r4, 0x5, 0x6, 0xb5}, 0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000140)={r4, @in6={{0xa, 0x0, 0x1ff, @loopback}}, 0x2, 0x2}, &(0x7f0000000240)=0x90) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) write(0xffffffffffffffff, &(0x7f0000000600)="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", 0x200) sendfile(0xffffffffffffffff, r5, 0x0, 0x7fffffff) r6 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r6, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r6, 0xffffffffffffffff, 0x0, 0xffffff38) ioctl$SNDCTL_DSP_RESET(r6, 0x5000, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000040)={r4, 0x8, 0x10}, &(0x7f0000000100)=0xb5) 03:03:29 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r3 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, 0x0) write(r3, &(0x7f0000000600)="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", 0x200) sendfile(r3, r4, 0x0, 0x7fffffff) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r5, r3, 0x0, 0xffffff38) setsockopt$RDS_RECVERR(r5, 0x114, 0x5, &(0x7f0000000000)=0x1, 0x4) sendfile(r2, r0, 0x0, 0xffffff38) [ 2007.363466][ T27] kauditd_printk_skb: 24 callbacks suppressed [ 2007.363485][ T27] audit: type=1800 audit(1586660609.198:4417): pid=21026 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16875 res=0 [ 2007.471509][ T27] audit: type=1804 audit(1586660609.198:4418): pid=21036 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir209219610/syzkaller.nCjs6O/692/file0" dev="sda1" ino=16875 res=1 [ 2007.508386][T21043] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2007.555588][T21043] netlink: 'syz-executor.0': attribute type 6 has an invalid length. 03:03:29 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f00000000c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VIDIOC_SUBDEV_G_SELECTION(r1, 0xc040563d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, {0x9, 0x6, 0x3, 0xff}}) bind$alg(0xffffffffffffffff, 0x0, 0x0) 03:03:29 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) clone(0x1000000, &(0x7f00000000c0)="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", &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000010c0)="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") 03:03:29 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r2, r0, 0x0, 0xffffff38) r3 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, 0x0) write(r3, &(0x7f0000000600)="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", 0x200) sendfile(r3, r4, 0x0, 0x7fffffff) fcntl$setstatus(r3, 0x4, 0x46c00) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004103) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f00000000c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) [ 2007.587244][ T27] audit: type=1800 audit(1586660609.228:4419): pid=21033 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=16993 res=0 [ 2007.705953][ T27] audit: type=1804 audit(1586660609.228:4420): pid=21033 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir888993330/syzkaller.9XPLg2/592/file0" dev="sda1" ino=16993 res=1 [ 2007.834767][ T27] audit: type=1804 audit(1586660609.258:4421): pid=21026 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir209219610/syzkaller.nCjs6O/692/file0" dev="sda1" ino=16875 res=1 [ 2007.834815][ T27] audit: type=1800 audit(1586660609.278:4422): pid=21038 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=17025 res=0 [ 2007.834842][ T27] audit: type=1804 audit(1586660609.288:4423): pid=21039 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir888993330/syzkaller.9XPLg2/592/file0" dev="sda1" ino=16993 res=1 [ 2007.834901][ T27] audit: type=1804 audit(1586660609.298:4424): pid=21038 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir932491758/syzkaller.D6Mno2/525/file0" dev="sda1" ino=17025 res=1 [ 2007.834921][ T27] audit: type=1804 audit(1586660609.338:4425): pid=21040 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="file0" dev="sda1" ino=17009 res=1 [ 2007.834942][ T27] audit: type=1804 audit(1586660609.358:4426): pid=21038 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir932491758/syzkaller.D6Mno2/525/file0" dev="sda1" ino=17025 res=1 03:03:30 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r0, &(0x7f0000000100)={0x8, {"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", 0x1000}}, 0x1006) perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f00000000c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) bind$alg(0xffffffffffffffff, 0x0, 0x0) [ 2008.216179][T21043] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2008.253468][T21043] netlink: 'syz-executor.0': attribute type 6 has an invalid length. 03:03:30 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42800) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f00000000c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) 03:03:30 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) getsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@initdev}, &(0x7f0000000040)=0x8) syz_open_dev$tty1(0xc, 0x4, 0x1) 03:03:30 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r2, r0, 0x0, 0xffffff38) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x400, 0x0) getsockname$netlink(r3, &(0x7f00000000c0), &(0x7f0000000180)=0xc) 03:03:30 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r3, r1, 0x0, 0xffffff38) ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f0000000000)) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r4, 0x0, 0x800000080004103) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f00000000c0)) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r5, 0xffffffffffffffff, 0x0, 0xffffff38) ioctl$sock_ifreq(r5, 0xf, &(0x7f0000000140)={'ipvlan1\x00', @ifru_hwaddr=@dev={[], 0x13}}) syz_open_dev$tty1(0xc, 0x4, 0x1) bind$alg(0xffffffffffffffff, 0x0, 0x0) 03:03:30 executing program 0: getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x4, 0x1, 0x3, 0x1f, 0x9}, &(0x7f00000000c0)=0x14) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000100)={r0, 0x68db}, &(0x7f0000000140)=0x8) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) clone3(&(0x7f0000000480)={0x201000, &(0x7f0000000080), &(0x7f00000001c0), &(0x7f0000000200), {0xf}, &(0x7f0000000240)=""/207, 0xcf, &(0x7f0000000340)=""/217, &(0x7f0000000440)=[r2, r2, 0xffffffffffffffff], 0x3}, 0x50) r3 = getpid() r4 = syz_open_procfs(r3, &(0x7f0000000180)='net/xfrm_stat\x00') sendfile(r1, r4, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) bind$rds(r4, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) write(0xffffffffffffffff, &(0x7f0000000600)="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", 0x200) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7fffffff) r5 = open(&(0x7f0000000580)='./file0\x00', 0x149042, 0x61) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r5, 0xffffffffffffffff, 0x0, 0xffffff38) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000540)={0x8001, &(0x7f0000000500)=[r4, 0xffffffffffffffff]}, 0x2) 03:03:37 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, 0x0) sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'essiv(gcm(twofish-generic),blake2s-160-x86)\x00'}, 0x58) syz_mount_image$nfs4(0x0, 0x0, 0x2, 0x2, &(0x7f0000000340)=[{&(0x7f00000002c0)="84a4cadec83582e6d9321b47a05ef7b741ae24a9473f249e5fb21de600c30ac3", 0x20, 0x7}, {&(0x7f0000000300)="0f", 0x1, 0xff}], 0x400, 0x0) 03:03:37 executing program 3: r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r2, r0, 0x0, 0xffffff38) r3 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xcdc, 0x6}}, 0x0, 0xffffffffffffffff, r2, 0x0) fcntl$setstatus(r3, 0x4, 0x2000) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffff38) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000280)) sendfile(r4, r5, 0x0, 0x800000080004103) r6 = socket$caif_stream(0x25, 0x1, 0x0) preadv(r6, &(0x7f0000000000)=[{&(0x7f0000000100)=""/149, 0x95}, {&(0x7f00000002c0)=""/58, 0x3a}, {&(0x7f0000000040)=""/35, 0x23}], 0x3, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f00000000c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) 03:03:37 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x2668dcb9, 0x4e6001) r3 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x48200, 0x0) ioctl$BINDER_THREAD_EXIT(r5, 0x40046208, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, 0x0) write(r3, &(0x7f0000000600)="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", 0x200) sendfile(r3, r4, 0x0, 0x7fffffff) r6 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r6, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r6, r3, 0x0, 0xffffff38) renameat2(r2, &(0x7f0000000040)='./file0\x00', r6, &(0x7f00000000c0)='./file0\x00', 0x3) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r7, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) 03:03:37 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0xc) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, 0x0) write(r1, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r1, r2, 0x0, 0x7ffffffe) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r3, r1, 0x0, 0xffffff38) r4 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, 0x0) write(r4, &(0x7f0000000600)="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", 0x200) sendfile(r4, r5, 0x0, 0x7fffffff) sendfile(r3, 0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) getpeername$netrom(r0, &(0x7f0000000000)={{0x3, @null}, [@netrom, @netrom, @bcast, @default, @rose, @remote, @rose]}, &(0x7f00000000c0)=0x48) 03:03:37 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f00000000c0)=ANY=[@ANYBLOB="0300120074ea041ee3e9117febc5aba384b006787c9b451eb79ac3d12d8dd1fde9fabb1f3f"]) sendfile(r2, r0, 0x0, 0xffffff38) r3 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, 0x0) write(r3, &(0x7f0000000600)="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", 0x200) sendfile(r3, r4, 0x0, 0x7fffffff) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r5, r3, 0x0, 0xffffff38) ioctl$FS_IOC_GETFLAGS(r5, 0x80086601, &(0x7f0000000000)) 03:03:37 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000004040, 0x0) write$9p(r1, &(0x7f0000001400)="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", 0x600) sendfile(r1, r2, 0x0, 0x10000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0xc0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r3}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0x0, 0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000440)='em0:]\x00', r3}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, r1, 0x0, 0x2, &(0x7f0000000040)='}\x00', r3}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000380)='system/vmnet1\x00', r3}, 0x30) r5 = getpid() sched_setattr(r5, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) clone3(&(0x7f0000000440)={0x1340000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000100), {0x1e}, &(0x7f0000000140)=""/152, 0x98, &(0x7f0000000200)=""/217, &(0x7f0000000400)=[0x0, 0x0, 0x0, r4, 0xffffffffffffffff, 0xffffffffffffffff, r5], 0x7}, 0x50) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r6, r7, 0x0, 0x800000080004103) ioctl$RTC_IRQP_SET(r7, 0x4008700c, 0x1fb5) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f00000000c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) [ 2015.883161][ T27] kauditd_printk_skb: 29 callbacks suppressed [ 2015.883178][ T27] audit: type=1800 audit(1586660617.718:4456): pid=21109 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16874 res=0 [ 2015.995343][ T27] audit: type=1800 audit(1586660617.768:4457): pid=21116 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=17099 res=0 [ 2016.108455][ T27] audit: type=1804 audit(1586660617.768:4458): pid=21117 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir932491758/syzkaller.D6Mno2/527/file0" dev="sda1" ino=16874 res=1 [ 2016.144352][ T27] audit: type=1804 audit(1586660617.798:4459): pid=21116 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir209219610/syzkaller.nCjs6O/695/file0" dev="sda1" ino=17099 res=1 [ 2016.173198][ T27] audit: type=1800 audit(1586660617.798:4460): pid=21113 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=17100 res=0 03:03:38 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r3, r1, 0x0, 0xffffff38) getsockopt$TIPC_NODE_RECVQ_DEPTH(r1, 0x10f, 0x83, &(0x7f0000000000), &(0x7f0000000040)=0x4) fcntl$setstatus(r0, 0x4, 0x2000) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) [ 2016.200260][ T27] audit: type=1804 audit(1586660617.808:4461): pid=21113 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir888993330/syzkaller.9XPLg2/595/file0" dev="sda1" ino=17100 res=1 [ 2016.233266][ T27] audit: type=1800 audit(1586660617.828:4462): pid=21118 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=17105 res=0 [ 2016.257987][ T27] audit: type=1804 audit(1586660617.858:4463): pid=21117 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir932491758/syzkaller.D6Mno2/527/file0" dev="sda1" ino=16874 res=1 [ 2016.258012][ T27] audit: type=1804 audit(1586660617.858:4464): pid=21119 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir209219610/syzkaller.nCjs6O/695/file0" dev="sda1" ino=17099 res=1 [ 2016.258554][ T27] audit: type=1804 audit(1586660617.868:4465): pid=21120 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir888993330/syzkaller.9XPLg2/595/file0" dev="sda1" ino=17100 res=1 03:03:38 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, 0x0) write(r2, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r2, r3, 0x0, 0x7fffffff) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r4, r2, 0x0, 0xffffff38) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f00000000c0)={0xfffffc00, 0x3, 0x4, 0x80000, 0x8, {}, {0x4, 0x8, 0x7, 0x1, 0x81, 0x4, "7bc0fbba"}, 0x2, 0x1, @planes=&(0x7f0000000000)={0x4, 0x9, @mem_offset=0x7ff, 0x7}, 0xfffffeff, 0x0, r4}) ioctl$KDGKBLED(r5, 0x4b64, &(0x7f0000000040)) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 03:03:38 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, 0x0) write(r1, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r3, r1, 0x0, 0xffffff38) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @loopback}, {0x2, 0x0, 0xffffffff, @ipv4={[], [], @loopback}}, r4}}, 0x48) write$RDMA_USER_CM_CMD_CONNECT(r3, &(0x7f0000000100)={0x6, 0x118, 0xfa00, {{0x3, 0x5, "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", 0x2, 0x20, 0x9d, 0x80, 0x74, 0x81, 0x7}, r4}}, 0x120) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004103) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f00000000c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) 03:03:38 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) getresuid(&(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)=0x0) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000000c0)='./file0\x00', 0x40, 0x2, &(0x7f0000000300)=[{&(0x7f0000000180)="000dfee4da39b784e628e06b8c84bbfd5412009c615fdb3a0de513a9a466eb2e33f84355019bbb21e11a02218fb5009a8025396f8b292dc7c68417f31f2537b60399c8b6a7049e23b9780d6c9994d5ddc61e364d", 0x54, 0x3f}, {&(0x7f0000000200)="f6e343ae2afa34ae9c6aeab25a645ec1e5ba5568fd9ae996a940ac3d142545d08c3fe860d37aafea609160dc6f51a92076bc2f5ccf81d2f01e2429ef14c4cb8efaa47ad9881a946b1f4a0bb27e73f1f55d06906559ce269747a7033ca65bab4947c0f0c81e0f5fb1106020c54165b667a07145afa221c234bfd024caa303bcd41c7b77c640b06605cab81aa39bc3ef931d83081ff0ab5f6496d954440a4f461987628f356a640b2ef1f83386077ea5df2efc938d80058a5e877a1dcf7aef2b257683e5670ccfdd390db33b176ea0e038a102eda61c7f52726e1cb857b3172326ee8a7ef4c2ee84ac16c3c7", 0xeb, 0x1}], 0x8, &(0x7f0000000400)={[{@nodots='nodots'}, {@dots='dots'}], [{@smackfsroot={'smackfsroot', 0x3d, 'vmnet0]'}}, {@uid_lt={'uid<', r2}}, {@subj_user={'subj_user', 0x3d, ',eth0-vmnet1bdeviem0system]keyringbdevvmnet1'}}]}) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x200000, 0x100) sendfile(r3, r0, 0x0, 0xffffff38) 03:03:38 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') r3 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, 0x0) write(r3, &(0x7f0000000600)="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", 0x200) sendfile(r3, r4, 0x0, 0x7fffffff) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r5, r3, 0x0, 0xffffff38) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffff38) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000280)={0x50, 0xfffffffffffffffe, 0x6, {0x7, 0x1f, 0x2, 0x2, 0xffe8, 0xfffc, 0x7, 0x80000001}}, 0x50) ioctl$PERF_EVENT_IOC_REFRESH(r5, 0x2402, 0x101) sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f00000000c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r3, 0x4, 0x0) setxattr$trusted_overlay_redirect(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='trusted.overlay.redirect\x00', &(0x7f00000001c0)='./file0\x00', 0x8, 0x1) [ 2017.131160][T21151] FAT-fs (loop4): Unrecognized mount option "smackfsroot=vmnet0]" or missing value 03:03:39 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r3 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, 0x0) write(r3, &(0x7f0000000600)="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", 0x200) sendfile(r3, r4, 0x0, 0x7fffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7fffffff) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r5, 0xffffffffffffffff, 0x0, 0xffffff38) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000000c0)='mountinfo\x00', 0x0, r1) r6 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r6, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r6, r3, 0x0, 0xffffff38) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000000)=0x832) [ 2017.934889][T21170] FAT-fs (loop4): Unrecognized mount option "smackfsroot=vmnet0]" or missing value 03:03:48 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, 0x0) sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'essiv(gcm(twofish-generic),blake2s-160-x86)\x00'}, 0x58) syz_mount_image$nfs4(0x0, 0x0, 0x2, 0x2, &(0x7f0000000340)=[{&(0x7f00000002c0)="84a4cadec83582e6d9321b47a05ef7b741ae24a9473f249e5fb21de600c30ac3", 0x20, 0x7}, {&(0x7f0000000300)="0f", 0x1, 0xff}], 0x400, 0x0) 03:03:48 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f00000000c0)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x2b, &(0x7f0000000000)='security#%#vboxnet0@securityem0\\-^cpuset{*\x00'}, 0x30) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r5 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, 0x0) write(r5, &(0x7f0000000600)="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", 0x200) sendfile(r5, r6, 0x0, 0x7fffffff) r7 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x121) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r7, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r7, r5, 0x0, 0xffffff38) r8 = socket$nl_route(0x10, 0x3, 0x0) kcmp(r3, r4, 0x5, r7, r8) syz_open_dev$tty1(0xc, 0x4, 0x1) 03:03:48 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, &(0x7f0000000000)) 03:03:48 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, 0x0) write(r2, &(0x7f0000000600)="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", 0x200) sendfile(r2, r3, 0x0, 0x7fffffff) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r4, r2, 0x0, 0xffffff38) bind$rds(r2, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 03:03:48 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) r2 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, 0x0) write(r2, &(0x7f0000000600)="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", 0x200) sendfile(r2, r3, 0x0, 0x7fffffff) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000140)) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000040)={'batadv0\x00'}) socket$inet6_sctp(0xa, 0x80000000000001, 0x84) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newlink={0x7c, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPOIB_MODE={0x6, 0x2, 0x1}, @IFLA_IPOIB_UMCAST={0x6}, @IFLA_IPOIB_UMCAST={0x6}, @IFLA_IPOIB_UMCAST={0x6}, @IFLA_IPOIB_PKEY={0x6, 0x1, 0x6}, @IFLA_IPOIB_UMCAST={0x6, 0x3, 0x1}, @IFLA_IPOIB_UMCAST={0x6}, @IFLA_IPOIB_MODE={0x6}, @IFLA_IPOIB_MODE={0x6}]}}}]}, 0x7c}}, 0x0) 03:03:48 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa51d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0xa0400, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r2, r0, 0x0, 0xffffff38) 03:03:48 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x6, 0x111200) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000000c0)={0xffffffffffffffff, 0xb29, 0x7, 0x1, 0x3, [{0x0, 0x2, 0x40000000000, [], 0x284}, {0x9, 0x100000000, 0x401}, {0x80, 0x4be, 0x40, [], 0x800}]}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) [ 2026.512450][ T27] kauditd_printk_skb: 36 callbacks suppressed [ 2026.512467][ T27] audit: type=1800 audit(1586660628.348:4502): pid=21192 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=17123 res=0 [ 2026.625691][ T27] audit: type=1800 audit(1586660628.348:4503): pid=21185 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=17124 res=0 [ 2026.748597][ T27] audit: type=1804 audit(1586660628.368:4504): pid=21192 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir932491758/syzkaller.D6Mno2/529/file0" dev="sda1" ino=17123 res=1 03:03:48 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) [ 2026.782795][ T27] audit: type=1804 audit(1586660628.368:4505): pid=21185 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir888993330/syzkaller.9XPLg2/597/file0" dev="sda1" ino=17124 res=1 [ 2026.811120][ T27] audit: type=1800 audit(1586660628.408:4506): pid=21194 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=17125 res=0 03:03:48 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xff, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r2) ioprio_get$uid(0x3, r2) quotactl(0x499e, &(0x7f0000000000)='./file0\x00', r2, &(0x7f0000000100)="abad5c90aab280645505402c65cb409b6e7ed3a849e70cdab9baee2a1adbd31c301f6f5539b09abea60c1d2b72d129d45415b1b7aec958c8888c42a66f891270d5de28f4caa628e67f5e45adccd2c785e95d442019fb0d5c8d578f0e7546a6628404d6431b68f33a31de4c487199111d5f9271c7281c79eb4f9ec7b9bad41fb61b3ff15b35052485865aa2ad059deeb8281913f875d54ce1a51dfbfababd0af055735cfcb25628271ea36af105e004b7f72213860d59113806850a7108afee706c7ec4f1fc88021e3fad42b98cb1bb9a533c71aa0d234b867dbaf90dfc0cf1366c6a0854043c9b9ed36c5402ed22") fcntl$setstatus(r0, 0x4, 0x2000) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004103) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f00000000c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) [ 2026.837101][ T27] audit: type=1804 audit(1586660628.428:4507): pid=21197 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir888993330/syzkaller.9XPLg2/597/file0" dev="sda1" ino=17124 res=1 [ 2026.864559][ T27] audit: type=1804 audit(1586660628.428:4508): pid=21196 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir932491758/syzkaller.D6Mno2/529/file0" dev="sda1" ino=17123 res=1 [ 2026.911161][ T27] audit: type=1804 audit(1586660628.448:4509): pid=21195 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir209219610/syzkaller.nCjs6O/697/file0" dev="sda1" ino=16547 res=1 03:03:48 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000001240)=[{&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/12, 0xc}, {&(0x7f00000011c0)=""/91, 0x5b}], 0x3, &(0x7f0000001280)=""/183, 0xb7}, 0x40002100) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000001380)) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) [ 2026.962944][ T27] audit: type=1804 audit(1586660628.448:4510): pid=21195 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir209219610/syzkaller.nCjs6O/697/file0" dev="sda1" ino=16547 res=1 03:03:48 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') r3 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x100, 0x205400) ioctl$RTC_VL_CLR(r3, 0x7014) sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f00000000c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, 0x0) write(r4, &(0x7f0000000600)="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", 0x200) sendfile(r4, r5, 0x0, 0x7fffffff) r6 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r6, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r6, r4, 0x0, 0xffffff38) ioctl$KVM_INTERRUPT(r4, 0x4004ae86, &(0x7f0000000100)=0xfffff12e) ioctl$USBDEVFS_SETINTERFACE(r2, 0x80085504, &(0x7f0000000000)={0x800, 0x200}) [ 2027.018887][ T27] audit: type=1804 audit(1586660628.488:4511): pid=21193 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir057656323/syzkaller.yzn8jn/454/file0" dev="sda1" ino=17125 res=1 03:03:49 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0xf8, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r0, 0x0, 0x800000080004104) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) 03:03:54 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, 0x0) sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'essiv(gcm(twofish-generic),blake2s-160-x86)\x00'}, 0x58) syz_mount_image$nfs4(0x0, 0x0, 0x2, 0x2, &(0x7f0000000340)=[{&(0x7f00000002c0)="84a4cadec83582e6d9321b47a05ef7b741ae24a9473f249e5fb21de600c30ac3", 0x20, 0x7}, {&(0x7f0000000300)="0f", 0x1, 0xff}], 0x400, 0x0) 03:03:54 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x30, 0x5, 0x1, 0x20, 0x800, 0x2, 0x3, 0x0, 0x313, 0x40, 0x191, 0xaf, 0x98, 0x38, 0x2, 0x4, 0x8, 0x6}, [{0x4, 0xf0, 0x0, 0x3, 0x2, 0x800, 0x5, 0x8}], "149dd95799b68f20d110416d177de0cae0a11ede17d40d2d58266e07af54ad35332cfa4b93b67dc8702e0d4fed545e5dbea8440ca1c1b7a4bbdc77afe4ab6464a6d718d3d9e448029ca11689b311f9cb2449b12a7f2359e18db5f0cf9399231ab286d984bbe02d1424810d5cf44e461d5802c9b6f830a3cfe0594a9ff20ad78528e7b59538adcf168ca971b7c91fafceb62213953d4b05b0cc577ac984ae9e955eff8a7e16caed", [[], [], [], [], [], [], [], [], [], []]}, 0xb1f) sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, 0x0) write(r2, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r2, r3, 0x0, 0x7fffffff) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r4, r2, 0x0, 0xffffff38) r5 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, 0x0) write(r5, &(0x7f0000000600)="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", 0x200) sendfile(r5, r6, 0x0, 0x7fffffff) ioctl$TIOCSPGRP(r2, 0x5410, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 03:03:54 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r3 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, 0x0) write(r3, &(0x7f0000000600)="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", 0x200) sendfile(r3, r4, 0x0, 0x7fffffff) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r5, r3, 0x0, 0xffffff38) r6 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r6, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r6, 0xffffffffffffffff, 0x0, 0xffffff38) ioctl$VHOST_SET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af13, &(0x7f00000000c0)={0x3, 0xa255}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r3, 0x402c5342, &(0x7f0000000000)={0x83, 0x800, 0x39, {0x1400000}, 0xfffffffb}) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0xfff, 0x8032) 03:03:54 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) r2 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000)={0x0, 0x1}, 0x2) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, 0x0) write(r2, &(0x7f0000000600)="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", 0x200) sendfile(r2, r3, 0x0, 0x7fffffff) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r4, r2, 0x0, 0xffffff38) ioctl$VIDIOC_QUERY_DV_TIMINGS(r2, 0x80845663, &(0x7f0000000200)) sendmsg$NL80211_CMD_GET_INTERFACE(r4, &(0x7f00000003c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000380)={&(0x7f0000000400)={0x5c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x2}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x4fb1, 0x4}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x87b8, 0x2}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x80}}, @NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40005}, 0x80) r5 = semget(0x1, 0x2, 0x200) semctl$SEM_STAT(r5, 0x3, 0x12, &(0x7f0000000180)=""/85) sendfile(r0, r1, 0x0, 0x7fffffff) r6 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r6, r0, 0x0, 0xffffff38) 03:03:54 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, 0x0) sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'essiv(gcm(twofish-generic),blake2s-160-x86)\x00'}, 0x58) syz_mount_image$nfs4(0x0, 0x0, 0x2, 0x2, &(0x7f0000000340)=[{&(0x7f00000002c0)="84a4cadec83582e6d9321b47a05ef7b741ae24a9473f249e5fb21de600c30ac3", 0x20, 0x7}, {&(0x7f0000000300)="0f", 0x1, 0xff}], 0x400, 0x0) 03:03:54 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, 0x0) write(r2, &(0x7f0000000600)="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", 0x200) sendfile(r2, r3, 0x0, 0x7fffffff) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x4201, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x20, 0x3f, 0xb2, 0x3, 0x0, 0x100000001, 0x10001, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000140), 0x1}, 0x2500, 0x3, 0x8000, 0x8, 0x78e5, 0xdd0d, 0x3ff}, 0xffffffffffffffff, 0x8, r5, 0x3) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r4, r2, 0x0, 0xffffff38) ioctl$SNDRV_PCM_IOCTL_PAUSE(r4, 0x40044145, &(0x7f0000000000)=0x9) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r6, 0x0, 0x800000080004103) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f00000000c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) [ 2032.994538][ T27] kauditd_printk_skb: 11 callbacks suppressed [ 2032.994555][ T27] audit: type=1800 audit(1586660634.828:4523): pid=21244 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=17142 res=0 [ 2033.102695][T21250] mmap: syz-executor.2 (21250) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. 03:03:55 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, 0x0) write(r2, &(0x7f0000000600)="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", 0x200) sendfile(r2, r3, 0x0, 0x7fffffff) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r4, r2, 0x0, 0xffffff38) r5 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x408002) sendfile(r2, r5, 0x0, 0x0) [ 2033.135422][ T27] audit: type=1804 audit(1586660634.868:4524): pid=21248 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir932491758/syzkaller.D6Mno2/530/file0" dev="sda1" ino=17142 res=1 [ 2033.197364][ T27] audit: type=1800 audit(1586660634.878:4525): pid=21246 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=17143 res=0 03:03:55 executing program 1 (fault-call:6 fault-nth:0): perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x151}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r2, r0, 0x0, 0xffffff38) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) [ 2033.305982][ T27] audit: type=1804 audit(1586660634.888:4526): pid=21244 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir932491758/syzkaller.D6Mno2/530/file0" dev="sda1" ino=17142 res=1 [ 2033.358742][ T27] audit: type=1804 audit(1586660634.898:4527): pid=21244 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir932491758/syzkaller.D6Mno2/530/file0" dev="sda1" ino=17142 res=1 [ 2033.358779][ T27] audit: type=1804 audit(1586660634.898:4528): pid=21237 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir888993330/syzkaller.9XPLg2/598/file0" dev="sda1" ino=17144 res=1 03:03:55 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40040, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) [ 2033.358802][ T27] audit: type=1804 audit(1586660634.918:4529): pid=21242 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir209219610/syzkaller.nCjs6O/700/file0" dev="sda1" ino=17143 res=1 [ 2033.358828][ T27] audit: type=1804 audit(1586660634.928:4530): pid=21247 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir888993330/syzkaller.9XPLg2/598/file0" dev="sda1" ino=17144 res=1 [ 2033.358879][ T27] audit: type=1804 audit(1586660634.938:4531): pid=21247 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir888993330/syzkaller.9XPLg2/598/file0" dev="sda1" ino=17144 res=1 [ 2033.358900][ T27] audit: type=1804 audit(1586660634.958:4532): pid=21248 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir932491758/syzkaller.D6Mno2/530/file0" dev="sda1" ino=17142 res=1 03:03:55 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, 0x0) write(r2, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r2, r3, 0x0, 0x7fffffff) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r4, r2, 0x0, 0xffffff38) ioctl$EVIOCGBITSND(r2, 0x80404532, &(0x7f00000000c0)=""/136) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r5, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) [ 2033.467488][T21266] FAULT_INJECTION: forcing a failure. [ 2033.467488][T21266] name failslab, interval 1, probability 0, space 0, times 0 [ 2033.467508][T21266] CPU: 0 PID: 21266 Comm: syz-executor.1 Not tainted 5.6.0-rc1-syzkaller #0 [ 2033.467518][T21266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2033.467522][T21266] Call Trace: [ 2033.467553][T21266] dump_stack+0x11d/0x187 [ 2033.467652][T21266] should_fail.cold+0x5/0xf [ 2033.467683][T21266] __should_failslab+0x82/0xb0 [ 2033.467701][T21266] should_failslab+0x5/0xf [ 2033.467722][T21266] kmem_cache_alloc_trace+0x26/0x5f0 [ 2033.467779][T21266] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 2033.467800][T21266] alloc_pipe_info+0xf3/0x3d0 [ 2033.467868][T21266] splice_direct_to_actor+0x4b8/0x540 [ 2033.467891][T21266] ? apparmor_file_permission+0x35/0x40 [ 2033.467914][T21266] ? security_file_permission+0x86/0x270 [ 2033.467934][T21266] ? generic_pipe_buf_nosteal+0x20/0x20 [ 2033.468005][T21266] do_splice_direct+0x152/0x1d0 [ 2033.468032][T21266] do_sendfile+0x396/0x810 03:03:55 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0x800000080004103) r2 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, 0x0) write(r2, &(0x7f0000000600)="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", 0x200) sendfile(r2, r3, 0x0, 0x7fffffff) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r4, r2, 0x0, 0xffffff38) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000006, 0x7c812, r4, 0x8000000) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) [ 2033.468070][T21266] __x64_sys_sendfile64+0x121/0x140 [ 2033.468094][T21266] do_syscall_64+0xc7/0x390 [ 2033.468116][T21266] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2033.468127][T21266] RIP: 0033:0x45c889 [ 2033.468146][T21266] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2033.468155][T21266] RSP: 002b:00007f58c541bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2033.468193][T21266] RAX: ffffffffffffffda RBX: 00007f58c541c6d4 RCX: 000000000045c889 [ 2033.468202][T21266] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000005 [ 2033.468211][T21266] RBP: 000000000076bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 2033.468222][T21266] R10: 00000000ffffff38 R11: 0000000000000246 R12: 0000000000000006 03:03:55 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f00000000c0)) ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f0000000000)=0x1) r3 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, 0x0) write(r3, &(0x7f0000000600)="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", 0x200) sendfile(r3, r4, 0x0, 0x7fffffff) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r5, r3, 0x0, 0xffffff38) ioctl$TIOCGPKT(r3, 0x80045438, &(0x7f0000000040)) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0x4000, 0x0) recvfrom$rxrpc(r6, &(0x7f0000000280)=""/188, 0xbc, 0x10000, &(0x7f0000000180)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @multicast2}}, 0x24) syz_open_dev$tty1(0xc, 0x4, 0x1) [ 2033.468232][T21266] R13: 00000000000008d4 R14: 00000000004cb7c6 R15: 0000000000000000 03:04:03 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x7f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = socket$inet_udplite(0x2, 0x2, 0x88) fstat(r1, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) fstat(r3, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="020000000100000000000000040003000000000008000100", @ANYRES32, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r2, @ANYBLOB="3112b189aaac450b72f15e62cbb3764c13976f9121114437c4f53927227088e0ac409bc7fc811ddcc97bc3a9997ec75c158ed47b85369d83c071788cdb5ed6436e7a940106b0e88b83d1277309e951c348e5fc2c5e083aedfcec21c7ff9cb220509df6ee8a36c70117d685433092b7c8f20b8dfa56b954668ec7013b24e09b10e85571975f6b0000000000", @ANYRES32=r4, @ANYBLOB="1000070000000000200000000000000d"], 0x3c, 0x0) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r6) ioprio_get$uid(0x3, r6) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r8) ioprio_get$uid(0x3, r8) mount$fuseblk(&(0x7f0000000000)='/dev/loop0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='fuseblk\x00', 0x1a10480, &(0x7f0000000100)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0xa00}}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}, {@max_read={'max_read', 0x3d, 0x1}}, {@default_permissions='default_permissions'}], [{@dont_measure='dont_measure'}, {@context={'context', 0x3d, 'sysadm_u'}}, {@appraise='appraise'}, {@uid_eq={'uid', 0x3d, r6}}, {@uid_gt={'uid>', r8}}, {@smackfsroot={'smackfsroot'}}]}}) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) r10 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r9, r10, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) 03:04:03 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) getgid() r3 = socket$inet_udplite(0x2, 0x2, 0x88) fstat(r3, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) fstat(r5, &(0x7f0000001b80)) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYPTR64], 0x1, 0x2) getresuid(&(0x7f00000001c0)=0x0, &(0x7f0000000200), &(0x7f0000000240)) mount$9p_xen(&(0x7f0000000000)='syz\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x242800, &(0x7f0000000280)={'trans=xen,', {[{@msize={'msize', 0x3d, 0xfa4}}, {@loose='loose'}, {@mmap='mmap'}, {@fscache='fscache'}, {@nodevmap='nodevmap'}, {@access_any='access=any'}, {@dfltgid={'dfltgid', 0x3d, r4}}, {@cache_none='cache=none'}], [{@appraise='appraise'}, {@smackfstransmute={'smackfstransmute'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@measure='measure'}, {@hash='hash'}, {@measure='measure'}, {@smackfsroot={'smackfsroot'}}, {@uid_lt={'uid<', r6}}]}}) sendfile(r2, r0, 0x0, 0xffffff38) 03:04:03 executing program 1 (fault-call:6 fault-nth:1): perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x151}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r2, r0, 0x0, 0xffffff38) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 03:04:03 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) accept$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast1}, &(0x7f0000000040)=0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r2, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 03:04:03 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x802, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, 0x0) write(r2, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r2, r3, 0x0, 0x7fffffff) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r4, r2, 0x0, 0xffffff38) sendfile(r1, r1, 0x0, 0x800001080004101) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f00000000c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) 03:04:03 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f00000000c0)) ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f0000000000)=0x1) r3 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, 0x0) write(r3, &(0x7f0000000600)="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", 0x200) sendfile(r3, r4, 0x0, 0x7fffffff) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r5, r3, 0x0, 0xffffff38) ioctl$TIOCGPKT(r3, 0x80045438, &(0x7f0000000040)) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0x4000, 0x0) recvfrom$rxrpc(r6, &(0x7f0000000280)=""/188, 0xbc, 0x10000, &(0x7f0000000180)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @multicast2}}, 0x24) syz_open_dev$tty1(0xc, 0x4, 0x1) 03:04:03 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x110a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffc01, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) [ 2041.408499][ T27] kauditd_printk_skb: 29 callbacks suppressed [ 2041.408520][ T27] audit: type=1800 audit(1586660643.238:4562): pid=21311 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=16801 res=0 [ 2041.485720][ T27] audit: type=1800 audit(1586660643.248:4563): pid=21310 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16818 res=0 [ 2041.493274][T21317] FAULT_INJECTION: forcing a failure. [ 2041.493274][T21317] name failslab, interval 1, probability 0, space 0, times 0 [ 2041.534871][T21317] CPU: 1 PID: 21317 Comm: syz-executor.1 Not tainted 5.6.0-rc1-syzkaller #0 [ 2041.543577][T21317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2041.553639][T21317] Call Trace: [ 2041.556943][T21317] dump_stack+0x11d/0x187 [ 2041.561892][T21317] should_fail.cold+0x5/0xf [ 2041.566418][T21317] __should_failslab+0x82/0xb0 [ 2041.571230][T21317] should_failslab+0x5/0xf [ 2041.571855][ T27] audit: type=1804 audit(1586660643.248:4564): pid=21311 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir057656323/syzkaller.yzn8jn/457/file0" dev="sda1" ino=16801 res=1 [ 2041.575647][T21317] __kmalloc+0x54/0x640 [ 2041.575678][T21317] ? kmem_cache_alloc_trace+0x1e1/0x5f0 [ 2041.610066][T21317] ? alloc_pipe_info+0x205/0x3d0 [ 2041.615019][T21317] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 2041.621011][T21317] alloc_pipe_info+0x205/0x3d0 [ 2041.625791][T21317] splice_direct_to_actor+0x4b8/0x540 [ 2041.631176][T21317] ? apparmor_file_permission+0x35/0x40 [ 2041.636732][T21317] ? security_file_permission+0x86/0x270 [ 2041.642420][T21317] ? generic_pipe_buf_nosteal+0x20/0x20 [ 2041.649015][T21317] do_splice_direct+0x152/0x1d0 [ 2041.654042][T21317] do_sendfile+0x396/0x810 [ 2041.658507][T21317] __x64_sys_sendfile64+0x121/0x140 [ 2041.663716][T21317] ? constant_test_bit+0xd/0x30 [ 2041.668585][T21317] do_syscall_64+0xc7/0x390 [ 2041.673141][T21317] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2041.679033][T21317] RIP: 0033:0x45c889 [ 2041.682946][T21317] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2041.688032][ T27] audit: type=1804 audit(1586660643.258:4565): pid=21310 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir932491758/syzkaller.D6Mno2/531/file0" dev="sda1" ino=16818 res=1 [ 2041.702551][T21317] RSP: 002b:00007f58c541bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 03:04:03 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x2) syz_open_procfs(0x0, &(0x7f0000000000)='net/udp\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 03:04:03 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r3 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000000c0), 0x4) write(r3, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r3, r4, 0x0, 0x7fffffff) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r5, r3, 0x0, 0xffffffff) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r5, 0x8982, &(0x7f0000000000)={0x6, 'ip_vti0\x00', {0x3}, 0x6}) 03:04:03 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') r2 = socket$rxrpc(0x21, 0x2, 0xa) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8982, &(0x7f0000000040)={0x6, 'macvlan0\x00', {0x10001}, 0x5}) sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) ioctl$VIDIOC_G_CROP(r1, 0xc014563b, &(0x7f0000000000)={0x5, {0x3, 0x800, 0x1, 0x10000}}) syz_open_dev$tty1(0xc, 0x4, 0x1) [ 2041.702567][T21317] RAX: ffffffffffffffda RBX: 00007f58c541c6d4 RCX: 000000000045c889 [ 2041.702576][T21317] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000005 [ 2041.702587][T21317] RBP: 000000000076bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 2041.702597][T21317] R10: 00000000ffffff38 R11: 0000000000000246 R12: 0000000000000006 [ 2041.702607][T21317] R13: 00000000000008d4 R14: 00000000004cb7c6 R15: 0000000000000001 [ 2041.882916][ T27] audit: type=1804 audit(1586660643.318:4566): pid=21318 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir932491758/syzkaller.D6Mno2/531/file0" dev="sda1" ino=16818 res=1 [ 2041.897351][ T27] audit: type=1804 audit(1586660643.318:4567): pid=21317 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir057656323/syzkaller.yzn8jn/457/file0" dev="sda1" ino=16801 res=1 03:04:03 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f00000000c0)) r3 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x60000, 0x1) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, 0x0) write(r3, &(0x7f0000000600)="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", 0x200) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r5, 0xffffffffffffffff, 0x0, 0xffffff38) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x48, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x840) sendfile(r3, r4, 0x0, 0x7fffffff) r6 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r6, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r6, r3, 0x0, 0xffffff38) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) syz_open_dev$tty1(0xc, 0x4, 0x1) [ 2041.898332][ T27] audit: type=1800 audit(1586660643.358:4568): pid=21315 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16563 res=0 [ 2041.898542][ T27] audit: type=1804 audit(1586660643.708:4569): pid=21312 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir209219610/syzkaller.nCjs6O/702/file0" dev="sda1" ino=16563 res=1 [ 2041.899192][ T27] audit: type=1800 audit(1586660643.728:4570): pid=21330 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=16545 res=0 [ 2041.899212][ T27] audit: type=1804 audit(1586660643.728:4571): pid=21334 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="file0" dev="sda1" ino=16545 res=1 03:04:04 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x6, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f00000000c0)={0x8, 0x120, 0xfa00, {0x1, {0x5, 0xfffffffa, "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", 0x1, 0x7, 0x6, 0xc1, 0x2, 0x5, 0x3f, 0x1}}}, 0x128) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000018c0)=0x7, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) recvmsg$can_j1939(r2, &(0x7f0000001880)={&(0x7f0000000200)=@generic, 0x80, &(0x7f0000001740)=[{&(0x7f0000000280)=""/197, 0xc5}, {&(0x7f0000000040)=""/41, 0x29}, {&(0x7f0000000380)=""/125, 0x7d}, {&(0x7f0000000400)=""/186, 0xba}, {&(0x7f00000004c0)=""/101, 0x65}, {&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/198, 0xc6}, {&(0x7f0000000740)=""/4096, 0x1000}], 0x8, &(0x7f00000017c0)=""/180, 0xb4}, 0x40) syz_open_dev$tty1(0xc, 0x4, 0x1) 03:04:04 executing program 1 (fault-call:6 fault-nth:2): perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x151}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r2, r0, 0x0, 0xffffff38) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 03:04:04 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x280080, 0x10) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24004040}, 0x8010) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000000000)) sendfile(r0, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r3, r0, 0x0, 0xffffff38) 03:04:04 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r3, r1, 0x0, 0xffffff38) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={r5, 0x6, 0x800, 0xb5}, 0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000140)={r5, @in6={{0xa, 0x0, 0x1ff, @loopback}}, 0x2, 0x2}, &(0x7f0000000240)=0x90) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000280)={r5, 0x4, 0x0, 0xffffffff, 0x6, 0x200}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={r6, 0x8}, &(0x7f0000000100)=0xc) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r7, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) [ 2042.559947][T21357] FAULT_INJECTION: forcing a failure. [ 2042.559947][T21357] name failslab, interval 1, probability 0, space 0, times 0 [ 2042.596790][T21357] CPU: 0 PID: 21357 Comm: syz-executor.1 Not tainted 5.6.0-rc1-syzkaller #0 [ 2042.605494][T21357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2042.615556][T21357] Call Trace: [ 2042.618863][T21357] dump_stack+0x11d/0x187 [ 2042.623262][T21357] should_fail.cold+0x5/0xf [ 2042.627773][T21357] __should_failslab+0x82/0xb0 [ 2042.632543][T21357] should_failslab+0x5/0xf [ 2042.636955][T21357] kmem_cache_alloc_trace+0x26/0x5f0 [ 2042.642240][T21357] ? apparmor_file_open+0xf1/0x770 [ 2042.647452][T21357] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 2042.653341][T21357] ? __rcu_read_unlock+0x66/0x2f0 [ 2042.658363][T21357] iomap_dio_rw+0x11f/0x9a0 [ 2042.662868][T21357] ? aa_file_perm+0x401/0xb20 [ 2042.667618][T21357] ? terminate_walk+0x1b8/0x240 [ 2042.672469][T21357] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 2042.678437][T21357] ? ext4_inode_journal_mode+0x8d/0x260 [ 2042.684751][T21357] ? ext4_file_read_iter+0x2b4/0x360 [ 2042.690032][T21357] ext4_file_read_iter+0x2b4/0x360 [ 2042.695185][T21357] generic_file_splice_read+0x2df/0x470 [ 2042.700729][T21357] ? add_to_pipe+0x1b0/0x1b0 [ 2042.705311][T21357] do_splice_to+0xc7/0x100 [ 2042.709866][T21357] splice_direct_to_actor+0x1b9/0x540 [ 2042.715243][T21357] ? generic_pipe_buf_nosteal+0x20/0x20 [ 2042.720863][T21357] do_splice_direct+0x152/0x1d0 [ 2042.725786][T21357] do_sendfile+0x396/0x810 [ 2042.730278][T21357] __x64_sys_sendfile64+0x121/0x140 [ 2042.735479][T21357] do_syscall_64+0xc7/0x390 [ 2042.740042][T21357] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2042.745923][T21357] RIP: 0033:0x45c889 [ 2042.749814][T21357] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2042.769412][T21357] RSP: 002b:00007f58c541bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2042.777815][T21357] RAX: ffffffffffffffda RBX: 00007f58c541c6d4 RCX: 000000000045c889 [ 2042.785776][T21357] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000005 [ 2042.793735][T21357] RBP: 000000000076bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 2042.801726][T21357] R10: 00000000ffffff38 R11: 0000000000000246 R12: 0000000000000006 [ 2042.809766][T21357] R13: 00000000000008d4 R14: 00000000004cb7c6 R15: 0000000000000002 03:04:04 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) 03:04:04 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, 0x0) write(r2, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r2, r3, 0x0, 0x7fffffff) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7fffffff) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r5, 0xffffffffffffffff, 0x0, 0xffffff38) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e22, @multicast1}], 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r4, r2, 0x0, 0xffffff38) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) [ 2047.676486][ T27] kauditd_printk_skb: 33 callbacks suppressed [ 2047.676504][ T27] audit: type=1800 audit(1586660649.508:4605): pid=21382 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16883 res=0 [ 2047.704566][ T27] audit: type=1804 audit(1586660649.518:4606): pid=21382 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir061524304/syzkaller.Juw9ej/245/file0" dev="sda1" ino=16883 res=1 [ 2047.742466][ T27] audit: type=1804 audit(1586660649.578:4607): pid=21383 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir061524304/syzkaller.Juw9ej/245/file0" dev="sda1" ino=16883 res=1 03:04:09 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x802, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, 0x0) write(r2, &(0x7f0000000600)="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", 0x200) sendfile(r2, r3, 0x0, 0x7fffffff) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r4, r2, 0x0, 0xffffff38) sendfile(r1, r1, 0x0, 0x800001080004101) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f00000000c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) 03:04:09 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f00000000c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) 03:04:09 executing program 1 (fault-call:6 fault-nth:3): perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x151}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r2, r0, 0x0, 0xffffff38) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 03:04:09 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) r2 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, 0x0) write(r2, &(0x7f0000000600)="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", 0x200) sendfile(r2, r3, 0x0, 0x7fffffff) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r4, r2, 0x0, 0xffffff38) ioctl$DRM_IOCTL_GET_MAGIC(r2, 0x80046402, &(0x7f0000000000)=0x8) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 03:04:09 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffff38) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000280)={0x3}) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0x7, 0x800}, {0x5, 0x1}, {0x6, 0x9}]}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, 0x0) sendfile(r4, r5, 0x0, 0x7fffffff) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/attr/exec\x00', 0x2, 0x0) r6 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r6, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r6, r4, 0x0, 0xffffff38) splice(r3, &(0x7f0000000180)=0x1fe00, r6, &(0x7f00000001c0)=0x101, 0x1, 0xc) sendfile(r2, r0, 0x0, 0xffffff38) 03:04:09 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, 0x0) write(r2, &(0x7f0000000600)="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", 0x200) sendfile(r2, r3, 0x0, 0x7fffffff) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r4, r2, 0x0, 0xffffff38) setsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, &(0x7f0000000000)=0x1, 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r5, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) [ 2048.021626][ T27] audit: type=1800 audit(1586660649.858:4608): pid=21390 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16905 res=0 [ 2048.097981][ T27] audit: type=1804 audit(1586660649.858:4609): pid=21390 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir932491758/syzkaller.D6Mno2/533/file0" dev="sda1" ino=16905 res=1 [ 2048.135370][ T27] audit: type=1800 audit(1586660649.908:4610): pid=21396 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=16910 res=0 03:04:10 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200}, 0x0, 0xfffffffffffffffa, 0xffffffffffffffff, 0xa) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r3, r1, 0x0, 0xffffff38) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000000)={0x2, 0xffffffff}) fcntl$setstatus(r0, 0x4, 0x2000) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004103) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7fffffff) r6 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r6, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r6, 0xffffffffffffffff, 0x0, 0xffffff38) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000700000001000000000000005200008000000000"]) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) [ 2048.182335][T21399] FAULT_INJECTION: forcing a failure. [ 2048.182335][T21399] name failslab, interval 1, probability 0, space 0, times 0 [ 2048.182511][T21399] CPU: 1 PID: 21399 Comm: syz-executor.1 Not tainted 5.6.0-rc1-syzkaller #0 [ 2048.182522][T21399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2048.182526][T21399] Call Trace: [ 2048.182563][T21399] dump_stack+0x11d/0x187 [ 2048.182589][T21399] should_fail.cold+0x5/0xf [ 2048.182613][T21399] ? mempool_free+0x190/0x190 [ 2048.182634][T21399] __should_failslab+0x82/0xb0 [ 2048.182708][T21399] should_failslab+0x5/0xf [ 2048.182728][T21399] kmem_cache_alloc+0x23/0x5e0 [ 2048.182755][T21399] ? __read_once_size.constprop.0+0xd/0x20 [ 2048.182772][T21399] ? xas_start+0xfb/0x220 [ 2048.182792][T21399] ? __this_cpu_preempt_check+0x3c/0x130 [ 2048.182811][T21399] ? mempool_free+0x190/0x190 [ 2048.182828][T21399] mempool_alloc_slab+0x21/0x30 [ 2048.182847][T21399] mempool_alloc+0x8d/0x280 [ 2048.182872][T21399] ? ext4_data_block_valid+0x7a/0xa0 [ 2048.182898][T21399] bio_alloc_bioset+0x217/0x3d0 [ 2048.182920][T21399] ? iov_iter_npages+0x18c/0x690 [ 2048.182943][T21399] iomap_dio_bio_actor+0x464/0x970 [ 2048.182992][T21399] iomap_dio_actor+0x83/0x390 [ 2048.183021][T21399] iomap_apply+0x1e6/0x660 [ 2048.183039][T21399] ? iomap_dio_bio_actor+0x970/0x970 [ 2048.183075][T21399] iomap_dio_rw+0x67e/0x9a0 [ 2048.183154][T21399] ? iomap_dio_bio_actor+0x970/0x970 [ 2048.183190][T21399] ? ext4_file_read_iter+0x2b4/0x360 [ 2048.183208][T21399] ext4_file_read_iter+0x2b4/0x360 [ 2048.183233][T21399] generic_file_splice_read+0x2df/0x470 [ 2048.183260][T21399] ? add_to_pipe+0x1b0/0x1b0 [ 2048.183323][T21399] do_splice_to+0xc7/0x100 [ 2048.183347][T21399] splice_direct_to_actor+0x1b9/0x540 03:04:10 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x151}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r2, r0, 0x0, 0xffffff38) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) [ 2048.183371][T21399] ? generic_pipe_buf_nosteal+0x20/0x20 [ 2048.183396][T21399] do_splice_direct+0x152/0x1d0 [ 2048.183421][T21399] do_sendfile+0x396/0x810 [ 2048.183453][T21399] __x64_sys_sendfile64+0x121/0x140 [ 2048.183479][T21399] do_syscall_64+0xc7/0x390 [ 2048.183517][T21399] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2048.183529][T21399] RIP: 0033:0x45c889 [ 2048.183559][T21399] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2048.183570][T21399] RSP: 002b:00007f58c541bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2048.183589][T21399] RAX: ffffffffffffffda RBX: 00007f58c541c6d4 RCX: 000000000045c889 [ 2048.183599][T21399] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000005 [ 2048.183609][T21399] RBP: 000000000076bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 2048.183618][T21399] R10: 00000000ffffff38 R11: 0000000000000246 R12: 0000000000000006 [ 2048.183627][T21399] R13: 00000000000008d4 R14: 00000000004cb7c6 R15: 0000000000000003 03:04:10 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r2, r0, 0x0, 0xffffff38) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x1218000, &(0x7f0000000180)={[{@mode={'mode', 0x3d, 0x3}}, {@mode={'mode', 0x3d, 0x7}}, {@mode={'mode', 0x3d, 0x7f}}, {@mode={'mode', 0x3d, 0x9}}], [{@mask={'mask', 0x3d, 'MAY_EXEC'}}]}) [ 2048.200586][ T27] audit: type=1804 audit(1586660649.918:4611): pid=21396 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir057656323/syzkaller.yzn8jn/459/file0" dev="sda1" ino=16910 res=1 [ 2048.200652][ T27] audit: type=1804 audit(1586660649.928:4612): pid=21397 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir932491758/syzkaller.D6Mno2/533/file0" dev="sda1" ino=16905 res=1 03:04:11 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) [ 2048.200674][ T27] audit: type=1804 audit(1586660649.958:4613): pid=21397 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir932491758/syzkaller.D6Mno2/533/file0" dev="sda1" ino=16905 res=1 03:04:11 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r3 = open$dir(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) write(0xffffffffffffffff, &(0x7f0000000600)="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", 0x200) sendfile(0xffffffffffffffff, r3, 0x0, 0x7fffffff) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r4, 0xffffffffffffffff, 0x0, 0xffffff38) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={r6, 0x6, 0x0, 0xb5}, 0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000140)={r6, @in6={{0xa, 0x0, 0x1ff, @loopback}}, 0x2, 0x2}, &(0x7f0000000240)=0x90) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000000c0)={r6, 0x8, 0x40}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000140)={r7, 0x8, 0x7, 0x7, 0x9, 0x3a}, &(0x7f0000000180)=0x14) accept4$llc(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x80800) [ 2048.200695][ T27] audit: type=1800 audit(1586660649.958:4614): pid=21394 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=16912 res=0 03:04:11 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x17, 0x0, 0x0, 0x0, 0x7f, 0x89401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x9, 0x4, 0x0, 0xfffffffe, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f00000000c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, 0x0) write(r3, &(0x7f0000000600)="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", 0x200) sendfile(r3, r4, 0x0, 0x7fffffff) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r5, r3, 0x0, 0xffffff38) ioctl$IMCLEAR_L2(r5, 0x80044946, &(0x7f0000000000)=0x3) 03:04:19 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x802, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, 0x0) write(r2, &(0x7f0000000600)="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", 0x200) sendfile(r2, r3, 0x0, 0x7fffffff) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r4, r2, 0x0, 0xffffff38) sendfile(r1, r1, 0x0, 0x800001080004101) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f00000000c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) 03:04:19 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x88400) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, &(0x7f0000000000)=0x4, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r3, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) 03:04:19 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x40140, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r3, r1, 0x0, 0xffffff38) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) r5 = syz_open_procfs(r4, &(0x7f00000000c0)='net/ipv6_route\x00') sendfile(r0, r5, 0x0, 0x800000080004103) ioctl$VIDIOC_ENUMOUTPUT(r5, 0xc0485630, &(0x7f0000000000)={0x80, "2e1d8d6c984fac18a9365b4d4c59b3a7f6961b94b204c27f2cffb4b688ef2b29", 0x2, 0x2, 0x8, 0xff, 0x2}) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r7) 03:04:19 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x151, 0x20, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000800)="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", 0x294) sendfile(0xffffffffffffffff, r0, 0x0, 0x7fffffff) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0xffffff38) r2 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, 0x0) write(r2, &(0x7f0000000600)="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", 0x200) sendfile(r2, r3, 0x0, 0x7fffffff) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(0xffffffffffffffff, r2, 0x0, 0xffffff38) sendto$inet(r2, &(0x7f00000000c0)="9c0d4bfe8cc7142a33c4624c7efb98f6fb2e891417ddc7593ad522faebed0400f7b50c7b8f2cc0a7ce9c", 0x2a, 0x4040, &(0x7f0000000380)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0xb01, 0x0) 03:04:19 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffff38) setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000bc0)={0x8001, 0x5, 0x0, 0x707f}, 0x8) ioprio_get$uid(0x3, r1) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f0000000280)='./file0\x00', 0x4, 0x6, &(0x7f0000000a80)=[{&(0x7f0000000480)="df4a7c00f7f22b8db3d365f8fb1d8b2a2bba33ca8a9cc7e42eb4f300aec445e5eec31ce74f2a008cf80de3ecf1d865a1f0d2eff8d1c888b680be7e35bdf04aa8c9e7e8cec4a50c13296183d6a1bae8b9839fb33ef178e9a62433e28e4f1327cc7b6498cf3891c31bed5aaae0e120af8d84425f5bd4a9827bf69a4acdf00cfc72d75e264c9ca02f71c21ea9a530b0bc1ef976b4dfff1372ff389730245e26e4d1701639bbf2019418bdbc39d604a729a721a42923f302f671db35217dd21c9d6814ce18661d580b9b66fd70c3dc9b8d996133d75d1ae72c5f2a5268d7dd53bdd52c1bf9e81d4ff23a1bb281d002811e2dbe71ca4f", 0xf4, 0xfffffffffffffffa}, {&(0x7f0000000580)="de0704af8b9c359a014e6db08cce72221e0d6ebe64c399b2ff65b453398447cf93e162b07133034e6c7c7cf329831a36133ae5cebc30dabfb7bb53cd5c5c1e9bb97a5c448f7fbc8e0c40990d53343602", 0x50, 0x10001}, {&(0x7f0000000800)="5aad2de0533048852935e8912a79734b0778a97af41b3a5220be76ac3a110d3b4d214bb920f8cafa860c616e68680e0bc074732fd8cee7b485922374652e2bec24f0385be99b0a656f3e7a8ed1ad5655c841fd95fd0a629ea2d0ee987e75e77166b2d0416c438eca902d8ef7b42c29cb7e49c71cfb54107036eb4b0b934ba0320c8d977217c6b6cd825260cb2df35f95cb7be8735ee67a261d63bfb063d792b7998c1f58324f81d7354396443c36f1bf070236c37f2cf487a4e5060a59fbda", 0xbf, 0x4}, {&(0x7f00000002c0)="89315750d45775b27453100c7ee07b6e8bd2982747740700ff341533eca5696d00e139b26e4bc563c756effeb4047b90924525278bb167b12d415b68c6a1", 0x3e, 0x5}, {&(0x7f00000008c0)="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", 0xfb, 0x7ff}, {&(0x7f00000009c0)="af608927376bbce999454ec85a3e1e3645497e8386d4e8bf7ff9c9e2a43e6cd0ac2776a8dc6880e1b8592622e54815df0dc8c2c694a514607f8c07142a78a50704e466c3dd1389d91d8c2737767738c664ffa3b77cefed6d7a70a1ca2968b095db11847f3e660edb4d7f26176dca2866305f0fc53cead5e04eb9d41fae4d27430e736e674ef41b10f81ac1a64fbfb86932bc3e8ae45f9a905f9c3f73ea658692e6d50c3348209ddaf39ef5643f9cdf9a78c2e02c", 0xb4, 0x40000000000000}], 0x80a008, &(0x7f0000000c00)={[{@compress_force_algo={'compress-force', 0x3d, 'zlib'}}], [{@fowner_gt={'fowner>', r1}}, {@smackfsroot={'smackfsroot', 0x3d, 'selinux'}}]}) r2 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r2, &(0x7f0000000600)="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", 0x200) sendfile(r2, r3, 0x0, 0x7fffffff) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="241e6640", @ANYRES16=r5, @ANYBLOB="000326bd7000fcdbdf250300000014000500fe80000000000000000000000000001f08000200070000000500010000000000"], 0x38}}, 0x40) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="0004a8bd7000ffdbdf250400010026100000dcb209900469613f9a9d3d7a599543aafbba0539be5881c2144888b033e3ab909b6ab13b6e4b2425c81a9a10b0e73d10934f87cf3c0c36e308437f9618e769f1e235d1c7353843234660c3cf3ebeee6a6d9e4a02dc418cd9c5acf37021efb1f74a7dbd9756ea8f34ebb5b4a0c3f03fa8faedf884328041368455a8b32a0afcdb28d589f08ca27661f4941171f83ff9d0e65f1e781e61d25c9cee075469e1b26cf8b40aa7ef32f08b5efe604b30c3505178a064b73456209a19c5f0ce4fe0c28356c00dbd7847f7e5d8a8708594657e7debe532832ba48e6e5298eaa259aa5b3f9e7d1f06fab90c2ecb804787"], 0x3}}, 0x48005) sendmsg$NLBL_MGMT_C_LISTDEF(r4, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r5, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x28}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004051}, 0x20000000) r6 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r6, r2, 0x0, 0xffffff38) 03:04:19 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3ff, 0x9}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f00000000c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) [ 2057.349346][ T27] kauditd_printk_skb: 31 callbacks suppressed [ 2057.349361][ T27] audit: type=1800 audit(1586660659.188:4646): pid=21453 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=16925 res=0 03:04:19 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x3}, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) [ 2057.436237][ T27] audit: type=1800 audit(1586660659.218:4647): pid=21452 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=16927 res=0 03:04:19 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x151}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7fffffff) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r1, 0xffffffffffffffff, 0x0, 0xffffff38) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000280)={0x9a0000, 0x0, 0x13, r0, 0x0, &(0x7f0000000200)={0x980914, 0x8, [], @value64}}) r2 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r2, &(0x7f0000000600)="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", 0x200) sendfile(r2, r3, 0x0, 0x7fffffff) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r4, r2, 0x0, 0xffffff38) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={r6, 0x6, 0x0, 0xb5}, 0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000140)={r6, @in6={{0xa, 0x0, 0x1ff, @loopback}}, 0x2, 0x2}, &(0x7f0000000240)=0x90) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000000)={r6, 0x1}, 0x8) 03:04:19 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000), 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r3, r1, 0x0, 0xffffff38) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000040)=0x2179b80d) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) [ 2057.528903][ T27] audit: type=1804 audit(1586660659.218:4648): pid=21457 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir057656323/syzkaller.yzn8jn/461/file0" dev="sda1" ino=16925 res=1 [ 2057.528978][ T27] audit: type=1804 audit(1586660659.228:4649): pid=21452 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir888993330/syzkaller.9XPLg2/607/file0" dev="sda1" ino=16927 res=1 [ 2057.529096][ T27] audit: type=1804 audit(1586660659.228:4650): pid=21453 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir057656323/syzkaller.yzn8jn/461/file0" dev="sda1" ino=16925 res=1 03:04:19 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x151}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0xc0, 0x20) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) r2 = socket(0x2000000000000010, 0x3, 0x0) write(r2, &(0x7f0000000000)="2400000052001f0014f9f407002c04021c002a100800010032fa6eba3f980e000000d795", 0x24) sendfile(r0, r1, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r3, r0, 0x0, 0xffffff38) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) [ 2057.529118][ T27] audit: type=1804 audit(1586660659.228:4651): pid=21453 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir057656323/syzkaller.yzn8jn/461/file0" dev="sda1" ino=16925 res=1 [ 2057.529139][ T27] audit: type=1804 audit(1586660659.238:4652): pid=21453 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir057656323/syzkaller.yzn8jn/461/file0" dev="sda1" ino=16925 res=1 [ 2057.529160][ T27] audit: type=1804 audit(1586660659.258:4653): pid=21457 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir057656323/syzkaller.yzn8jn/461/file0" dev="sda1" ino=16925 res=1 03:04:19 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000180)={'mangle\x00', 0x4f, "2e51dc30226c616192a486915e1ddd9de90a736707d97fda0f59e69142bb0893b5b4b8243923ff6518343ea88156ea6d3716f386b30c622e0cffcb059736935732a3c3852e36c07b9388f5a0e7235b"}, &(0x7f0000000000)=0x73) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r2, r0, 0x0, 0xffffff38) [ 2057.529182][ T27] audit: type=1804 audit(1586660659.258:4654): pid=21453 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir057656323/syzkaller.yzn8jn/461/file0" dev="sda1" ino=16925 res=1 [ 2057.529204][ T27] audit: type=1804 audit(1586660659.298:4655): pid=21461 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir888993330/syzkaller.9XPLg2/607/file0" dev="sda1" ino=16927 res=1 [ 2057.829964][T21482] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2057.854171][T21482] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 03:04:19 executing program 1: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x2c0, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x151}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0xc5) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r2, r0, 0x0, 0xffffff38) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 03:04:28 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x802, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, 0x0) write(r2, &(0x7f0000000600)="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", 0x200) sendfile(r2, r3, 0x0, 0x7fffffff) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r4, r2, 0x0, 0xffffff38) sendfile(r1, r1, 0x0, 0x800001080004101) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f00000000c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) 03:04:28 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0xff, 0x0, 0x0, 0x0, 0x7f, 0x28042, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0x3}, 0x4000, 0x200, 0x0, 0x0, 0x1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r3, r1, 0x0, 0xffffff38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000280)={&(0x7f0000000040)="3e84dc9c6aceb307e3f9937c69c8ed44cc384b1ecacb0ab030e997e8a4f2af8bbcc21f45c8cf751398e7703b40b820f8caca92629ded623ea9283612563c6ef4514528aeef85510c19f82bf238b6a9c8d197cae2df5cef07f7310b1544122ebe4e03edbc929ff28b8d62f082bdf9cf668f269982f0fc8d", &(0x7f0000000100)=""/129, &(0x7f00000001c0)="ce46be3401e63cdbe5bcf4971b95bd89a012e1501a2bb6d48f8fb1f47d70f30befb90a8c6d204a4b2e4ff81c264388b4695704ed9e6faeb90005e7ff4367bd4234fa86bdec59eeadd0", &(0x7f0000000240)="19fd04537d2668a39521d6a461571dc58cec5d598164ccc79bbe5f7ce90215e917106e", 0x2, r1}, 0x38) fcntl$setstatus(r0, 0x4, 0x2000) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet_dccp(0x2, 0x6, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x800000080004103) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f00000000c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) 03:04:28 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) write(r0, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r2, 0xffffffffffffffff, 0x0, 0xffffff38) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f00000000c0)=0x3) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141002, 0x140) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r3, r0, 0x0, 0xffffff38) r4 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, r3, 0x0) fcntl$setstatus(r4, 0x4, 0x2000) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004103) ioctl$UI_SET_PHYS(r6, 0x4008556c, &(0x7f0000000000)='syz0\x00') socket$nl_crypto(0x10, 0x3, 0x15) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) 03:04:28 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) ioctl$TIOCSTI(r0, 0x5412, 0x52) syz_open_dev$tty1(0xc, 0x4, 0x1) 03:04:28 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = getuid() r3 = getgid() r4 = socket$inet_udplite(0x2, 0x2, 0x88) fstat(r4, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$inet_udplite(0x2, 0x2, 0x88) fstat(r6, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="020000000100000000000000040003000000000008000100", @ANYRES32=r3, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r5, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r7, @ANYBLOB="1000070000000000200000000000000d"], 0x3c, 0x0) fchown(r0, r2, r3) r8 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r8, r0, 0x0, 0xffffff38) 03:04:28 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x151}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) close(0xffffffffffffffff) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, 0x0) write(r2, &(0x7f0000000600)="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", 0x200) sendfile(r2, r3, 0x0, 0x7fffffff) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x8301, 0x0) sendfile(r4, r5, 0x0, 0x20) perf_event_open$cgroup(&(0x7f0000000180)={0x3, 0x70, 0xc1, 0x40, 0xf9, 0x1, 0x0, 0xff, 0x2000, 0x18, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x80000001, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x10, 0x7846518, 0x0, 0x1, 0x3d, 0x6}, r2, 0xe, r0, 0xf) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r6 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r6, r0, 0x0, 0xffffff38) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 03:04:28 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TRIM(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x3f6, 0x209, 0x70bd26, 0x25dfdbff, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x0) [ 2066.709752][ T27] kauditd_printk_skb: 20 callbacks suppressed [ 2066.709770][ T27] audit: type=1800 audit(1586660668.548:4676): pid=21515 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=16833 res=0 [ 2066.743842][ T27] audit: type=1800 audit(1586660668.548:4677): pid=21516 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16786 res=0 [ 2066.768703][ T27] audit: type=1800 audit(1586660668.548:4678): pid=21517 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16818 res=0 [ 2066.799137][ T27] audit: type=1804 audit(1586660668.548:4679): pid=21517 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir932491758/syzkaller.D6Mno2/537/file0" dev="sda1" ino=16818 res=1 [ 2066.830168][ T27] audit: type=1800 audit(1586660668.548:4680): pid=21518 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=16801 res=0 [ 2066.830192][ T27] audit: type=1804 audit(1586660668.558:4681): pid=21518 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir057656323/syzkaller.yzn8jn/465/file0" dev="sda1" ino=16801 res=1 [ 2066.830213][ T27] audit: type=1804 audit(1586660668.568:4682): pid=21515 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="file0" dev="sda1" ino=16833 res=1 [ 2066.833286][ T27] audit: type=1804 audit(1586660668.568:4683): pid=21516 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir209219610/syzkaller.nCjs6O/707/file0" dev="sda1" ino=16786 res=1 03:04:28 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) [ 2066.833306][ T27] audit: type=1804 audit(1586660668.568:4684): pid=21518 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir057656323/syzkaller.yzn8jn/465/file0" dev="sda1" ino=16801 res=1 [ 2066.833326][ T27] audit: type=1804 audit(1586660668.568:4685): pid=21518 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir057656323/syzkaller.yzn8jn/465/file0" dev="sda1" ino=16801 res=1 03:04:28 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') r2 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, 0x0) write(r2, &(0x7f0000000600)="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", 0x200) sendfile(r2, r3, 0x0, 0x7fffffff) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r4, r2, 0x0, 0xffffff38) write$FUSE_GETXATTR(r4, &(0x7f0000000040)={0x18, 0x0, 0x7, {0x1}}, 0x18) sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) r5 = socket(0x1, 0x7, 0x6) sendto$inet6(r5, &(0x7f00000000c0)="4b0f0688d0831d7401b5b272b904d1187a0ee8c342958e42d0ec3c8f1df4b6af814ad9d0c9f36e4622dd85a4691c877616405ac862ff90c0f66fa77528806f6266e38f9d478aa78318a567c0f6ed164e6e0434408aa692d73b57e43798b90199a077eb618df996974692fa4493ddfd9811796e46739ff88b02a1886eb6ee263a180866d3276076651791d2a980a41976bab0f788e2f9925614d9d6644f129f1f7b7b276565bf107fabb772b8879d53a24f77020a203e0a0721f9fd15d18008553a500c69b89103004f79f54627955299cdec6a5ecdb7c4", 0xd7, 0x8000, &(0x7f0000000000)={0xa, 0x4e22, 0xfffffffd, @rand_addr="a5862baee311c439f994885f9ca2e514", 0x5}, 0x1c) syz_open_dev$tty1(0xc, 0x4, 0x1) 03:04:29 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x151}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) link(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0\x00') write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r2, r0, 0x0, 0xffffff38) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1000, 0x2080) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x200000, 0x0) r4 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, 0x0) write(r4, &(0x7f0000000600)="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", 0x200) sendfile(r4, r5, 0x0, 0x7fffffff) pwrite64(r5, &(0x7f0000000240)="911ecdb6022baa3e5c5b4d3fdb028c69e8b77131ac733313043bba5b0e6b2a34a4955ea00153cfa0e25f52fb7f375f5f3195f06cc298d8ed0b7703f598c41b07ce6f09b60d9d5ae21bea857d1f2d4c647d82446d9c40308bed7b0814f91c55550d313097125ec9591f871df77506b1bc829d07", 0x73, 0x6) ioctl$FIBMAP(r3, 0x1, &(0x7f00000000c0)=0xfffffffd) socket$inet_udplite(0x2, 0x2, 0x88) 03:04:29 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) socket$xdp(0x2c, 0x3, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r2, r0, 0x0, 0xffffff38) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000000)={0x1000, 0x97c7, 0x3, 0x7, 0x8, "e4ec7158e6d84cb5"}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'batadv0\x00', r3}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffff38) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) sendmsg$sock(r0, &(0x7f00000002c0)={&(0x7f0000000140)=@in6={0xa, 0x4e23, 0xffffffff, @mcast1, 0xa}, 0x80, &(0x7f0000000240)=[{}, {&(0x7f00000001c0)="0e3b2bc7f31e9d3ad96d9d98143461b360a2e2db9c87278e9ff3b37dabc84332d1b59f388eadba33359607aab657811389a6f048cb081748ad0309aa69a29a1110e98a3fdd11b5a578fc9ab20609779909956c7319cb17bed67493be70519d8aff81795a0e6b6ac9d428", 0x6a}, {&(0x7f00000000c0)="1c4f404b6ea39102ad46c14aa16e4fed808900ca0f25480aa95d94617fd9be36d2614c90052d07977fcb", 0x2a}], 0x3, &(0x7f0000000280)=[@txtime={{0x18, 0x1, 0x3d, 0x8}}], 0x18}, 0x40041) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf85}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r4, 0xffffffffffffffff, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) 03:04:29 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x40c21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x9, 0x20000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, 0x0) write(r1, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000000)='./file0\x00', 0x40042, 0x4) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r3, r1, 0x0, 0xffffff38) ioctl$SIOCNRDECOBS(r1, 0x89e2) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004103) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f00000000c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) [ 2072.958710][ T27] kauditd_printk_skb: 37 callbacks suppressed [ 2072.958730][ T27] audit: type=1800 audit(1586660674.788:4723): pid=21564 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16930 res=0 [ 2072.992413][ T27] audit: type=1804 audit(1586660674.828:4724): pid=21564 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir061524304/syzkaller.Juw9ej/248/file0" dev="sda1" ino=16930 res=1 [ 2073.068351][ T27] audit: type=1804 audit(1586660674.898:4725): pid=21565 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir061524304/syzkaller.Juw9ej/248/file0" dev="sda1" ino=16930 res=1 03:04:35 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = getuid() r3 = getgid() r4 = socket$inet_udplite(0x2, 0x2, 0x88) fstat(r4, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$inet_udplite(0x2, 0x2, 0x88) fstat(r6, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="020000000100000000000000040003000000000008000100", @ANYRES32=r3, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r5, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r7, @ANYBLOB="1000070000000000200000000000000d"], 0x3c, 0x0) fchown(r0, r2, r3) r8 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r8, r0, 0x0, 0xffffff38) 03:04:35 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./file1\x00', 0x862c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r2, r0, 0x0, 0xffffff38) r3 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, 0x0) write(r3, &(0x7f0000000600)="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", 0x200) sendfile(r3, r4, 0x0, 0x7fffffff) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r5, r3, 0x0, 0xffffff38) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x20000, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) 03:04:35 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r0, 0xffffffffffffffff, 0x0, 0xffffff38) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="810000007f00d8970f2eaff0549d69a1ce5eca8d9cf2a4c3189628d14fcbe9bed28b6fd84ac01b39c3bc9baf8f09ce15895c803963948486e4acd8e1ef95672c20916d41d4434a375a101959c2e598bc1ee6a348a0e82fbdd9c646ad7b541d2a58f9f90060f515e0ddd751d975604152ff2b37759a0ee1620b835a74e557c67df40c72b8872fe0a6fba08c06c22a090000000000000000000000dfdb734830571a36e57b159efb20a7c575ec56322bd4695e9a49860eb0d9d62ed4bf2d07a072f76e32516b3259bf686a181fd36f287e71a3e5aa15873a0477aed173d39de6765f30df55889b5adf0cca19ca49a96b325422000000"], 0x6) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, 0x0) write(r3, &(0x7f0000000600)="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", 0x200) sendfile(r3, r4, 0x0, 0x7fffffff) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r5, r3, 0x0, 0xffffff38) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$7\x00\x00', @ANYRES16=r6, @ANYBLOB="200029bd7000fcdbdf250200000008000100020000000800020002000000"], 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0x40885) 03:04:35 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x151}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x182) sendfile(r2, r0, 0x0, 0xffffff38) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, 0x0) mkdirat(r1, &(0x7f0000000000)='./file0\x00', 0x100) socket$inet_udplite(0x2, 0x2, 0x88) 03:04:35 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) prctl$PR_GET_FP_MODE(0x2e) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) 03:04:35 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7ffffffffffffb, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f00000000c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) [ 2073.322399][ T27] audit: type=1800 audit(1586660675.158:4726): pid=21570 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=16881 res=0 [ 2073.366254][ T27] audit: type=1804 audit(1586660675.158:4727): pid=21570 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir057656323/syzkaller.yzn8jn/467/file0" dev="sda1" ino=16881 res=1 [ 2073.366272][ T27] audit: type=1800 audit(1586660675.198:4728): pid=21576 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file1" dev="sda1" ino=17073 res=0 [ 2073.375786][ T27] audit: type=1804 audit(1586660675.208:4729): pid=21576 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir932491758/syzkaller.D6Mno2/538/file0" dev="sda1" ino=17074 res=1 03:04:35 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r3 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, 0x0) write(r3, &(0x7f0000000600)="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", 0x200) sendfile(r3, r4, 0x0, 0x7fffffff) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r5, r3, 0x0, 0xffffff38) ioctl$SNDRV_PCM_IOCTL_RESET(r5, 0x4141, 0x0) 03:04:35 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f0000000000)) [ 2073.450795][ T27] audit: type=1804 audit(1586660675.248:4730): pid=21576 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir932491758/syzkaller.D6Mno2/538/file0" dev="sda1" ino=17074 res=1 [ 2073.488890][ T27] audit: type=1804 audit(1586660675.248:4731): pid=21580 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir057656323/syzkaller.yzn8jn/467/file0" dev="sda1" ino=16881 res=1 03:04:35 executing program 3: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x40000, 0x0) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x400}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) socket$nl_netfilter(0x10, 0x3, 0xc) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x61ae) fcntl$setstatus(r1, 0x4, 0x6800) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004103) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f00000000c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) [ 2073.595357][ T27] audit: type=1804 audit(1586660675.248:4732): pid=21581 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir888993330/syzkaller.9XPLg2/612/file0" dev="sda1" ino=16930 res=1 03:04:35 executing program 4: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x3e2, 0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0xc}, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0xc0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r2, r0, 0x0, 0xffffff38) 03:04:35 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r3, r1, 0x0, 0xffffff38) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000000)) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r4, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 03:04:35 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f00000000c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) [ 2081.623231][ T27] kauditd_printk_skb: 26 callbacks suppressed [ 2081.623248][ T27] audit: type=1800 audit(1586660683.458:4759): pid=21621 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16935 res=0 [ 2081.649926][ T27] audit: type=1804 audit(1586660683.468:4760): pid=21621 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir061524304/syzkaller.Juw9ej/249/file0" dev="sda1" ino=16935 res=1 [ 2081.697756][ T27] audit: type=1804 audit(1586660683.528:4761): pid=21622 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir061524304/syzkaller.Juw9ej/249/file0" dev="sda1" ino=16935 res=1 03:04:43 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, 0x0) write(r1, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r3, r1, 0x0, 0xffffff38) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000000)) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r4, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 03:04:43 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') r3 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, 0x0) write(r3, &(0x7f0000000600)="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", 0x200) sendfile(r3, r4, 0x0, 0x7fffffff) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r5, r3, 0x0, 0xffffff38) openat$cgroup_procs(r3, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0) sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f00000000c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) 03:04:43 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x151}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x20000, 0x0) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r2, r0, 0x0, 0xffffff38) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 03:04:43 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendmsg$AUDIT_SIGNAL_INFO(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x3f2, 0x400, 0x70bd27, 0x25dfdbff, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x404c0a4}, 0x800) sendfile(r2, r0, 0x0, 0xffffff38) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x20, 0x0, 0x0, 0x7f, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2881}, 0x0, 0xffffffffffffffff, r2, 0x0) fcntl$setstatus(r3, 0x4, 0x2000) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r4, 0xffffffffffffffff, 0x0, 0xffffff38) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x7, 0x6, [0x7, 0x3, 0x0, 0xdc, 0xfffb, 0xbe1f]}, &(0x7f0000000280)=0x14) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f00000002c0)={r5, 0x1, 0x7, 0x9}, &(0x7f0000000300)=0x10) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r6, r7, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) 03:04:43 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r2, r0, 0x0, 0xffffff38) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r8, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r8, 0xffffffffffffffff, 0x0, 0xffffff38) ioctl$sock_TIOCOUTQ(r8, 0x5411, &(0x7f0000000280)) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x34, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@bridge_newneigh={0x30, 0x1c, 0xb25, 0x0, 0x0, {0xa, 0x0, 0x0, r7}, [@NDA_DST_IPV6={0x14, 0x1, @loopback}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_GET_MPATH(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, r3, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @dev={[], 0x2c}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x4}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) 03:04:43 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x8, 0x400) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x40) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, 0x0) write(r2, &(0x7f0000000600)="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", 0x200) sendfile(r2, r3, 0x0, 0x7fffffff) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r4, r2, 0x0, 0xffffff38) sendmsg$AUDIT_GET(r4, &(0x7f0000000140)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0x22, &(0x7f0000000100)={&(0x7f00000001c0)={0x10, 0x3e8, 0x5deb3fd177ccd3f6, 0x70bd2a, 0x25dfdbfc, "", ["", "", ""]}, 0x10}}, 0x8095) [ 2081.935932][ T27] audit: type=1800 audit(1586660683.768:4762): pid=21629 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=17078 res=0 [ 2081.978069][ T27] audit: type=1804 audit(1586660683.768:4763): pid=21629 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="file0" dev="sda1" ino=17078 res=1 [ 2082.005327][ T27] audit: type=1800 audit(1586660683.768:4764): pid=21630 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=17082 res=0 [ 2082.030743][ T27] audit: type=1804 audit(1586660683.798:4765): pid=21630 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir057656323/syzkaller.yzn8jn/468/file0" dev="sda1" ino=17082 res=1 [ 2082.078344][ T27] audit: type=1800 audit(1586660683.808:4766): pid=21628 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=17085 res=0 [ 2082.101539][ T27] audit: type=1804 audit(1586660683.808:4767): pid=21628 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir888993330/syzkaller.9XPLg2/615/file0" dev="sda1" ino=17085 res=1 [ 2082.103350][ T27] audit: type=1800 audit(1586660683.828:4768): pid=21632 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=17105 res=0 03:04:44 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x210000, 0x0) ioctl$TIOCSPGRP(r4, 0x5410, &(0x7f00000000c0)=r3) syz_open_dev$tty1(0xc, 0x4, 0x1) 03:04:44 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x3, 0x3, 0x4, 0x0, 0x0, 0x100000000, 0x0, 0x8, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x100, 0x1, @perf_config_ext={0x7fffffff, 0x10001}, 0x100, 0x10001, 0x7, 0x8, 0x9, 0xffff, 0x4}, r1, 0x7, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(0xffffffffffffffff, r2, 0x0, 0x800000080004103) connect(r2, &(0x7f0000000140)=@rc={0x1f, @any, 0x7}, 0x80) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f00000000c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, 0x0) write(r3, &(0x7f0000000600)="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", 0x200) sendfile(r3, r4, 0x0, 0x7fffffff) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280), 0x80, &(0x7f0000000400)=[{&(0x7f00000001c0)=""/50, 0x32}, {&(0x7f0000000300)=""/197, 0xc5}, {&(0x7f0000000800)=""/4096, 0x1000}], 0x3, &(0x7f0000000440)=""/221, 0xdd}, 0x2040) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r5, r3, 0x0, 0xffffff38) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) 03:04:44 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f00000000c0)={{0x9, 0x4, 0x7, 0x3ff, '\x00', 0x40}, 0x0, [0xfffffffffffffff8, 0x5ec, 0x40, 0x34, 0xca, 0x100000000, 0x5, 0x3, 0x10000, 0x80000001, 0x7, 0x7, 0xfffffffffffffff7, 0x2, 0x1, 0x7f, 0x7b4d3e77, 0x3, 0x8, 0x20, 0x1000, 0x314a, 0x7ff, 0x100000000, 0x4a755fd8, 0xffffffff, 0x7, 0x12, 0x4, 0x1f, 0x2, 0x1aae00000, 0x2, 0xf1, 0x8, 0x93, 0x4, 0x400, 0x1, 0x5, 0x5, 0x8, 0xfffffffffffffffe, 0x13, 0x0, 0x3, 0x81, 0x3, 0x8, 0xe76, 0x1400000000000000, 0x5, 0x800, 0x5, 0x8, 0xad62, 0x3ff830a7, 0x4, 0x2, 0x6, 0x3, 0x20, 0x7fff, 0x6, 0x3, 0x0, 0x7f, 0x1, 0x1, 0x2, 0xc8a5, 0x9, 0x7f, 0x8001, 0x3, 0x1, 0x2764, 0x3, 0x10001, 0x0, 0x11d, 0x2b, 0x4, 0x9, 0x7f, 0x6, 0x80000001, 0x3f, 0x101, 0x1, 0x1, 0x0, 0xffffffff00000001, 0x4, 0x6, 0x9, 0x7ff, 0xfff, 0x100000001, 0xae, 0xffff, 0x400, 0x1, 0x2, 0x7, 0xffff, 0x77bd, 0x1, 0x0, 0x1118, 0x100000001, 0x7fffffff, 0x1000, 0x8, 0x6, 0x9, 0x40, 0x0, 0xffffffff80000000, 0x15d8, 0x80000faa, 0xfffffffffffffffd, 0x40, 0x51a, 0x3, 0xf0a9, 0x1]}) openat$uhid(0xffffffffffffff9c, &(0x7f0000000600)='/dev/uhid\x00', 0x802, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) fcntl$setflags(r2, 0x2, 0x746db68097f4557c) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttynull\x00', 0x1, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(r1, 0x5404, &(0x7f00000005c0)={0x1, 0x6, 0x5, 0x626, 0xa, "978470f64e803adb3de5d135ea2d4f1c341633"}) fanotify_init(0x8, 0x800) 03:04:44 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.ima\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="0403a73af4189106fbf200000090d324"], 0x10, 0x2) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) 03:04:44 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r2, r0, 0x0, 0xffffff38) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) write$9p(r3, &(0x7f0000000180)="ff919136da0e5a0104a4b7124d534dc70e6de9880b23873c1e74a42e97765c4314fbdc37d0cd8d1ec41f6a60630bb9e66405426b5f54818dce33b5e819ad8d384b0363934ab6135b4978a54655b0118ce014caa7184c93d98bc4714bad0185026cb7469deeca57267b6b", 0x6a) 03:04:44 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000000)=0x400) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) fcntl$setstatus(r2, 0x4, 0x2000) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) write$binfmt_elf64(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"/2483], 0x9c1) [ 2092.261543][ T27] kauditd_printk_skb: 27 callbacks suppressed [ 2092.261583][ T27] audit: type=1800 audit(1586660694.098:4796): pid=21685 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16949 res=0 [ 2092.288830][ T27] audit: type=1804 audit(1586660694.108:4797): pid=21685 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir061524304/syzkaller.Juw9ej/250/file0" dev="sda1" ino=16949 res=1 03:04:55 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r3, r1, 0x0, 0xffffff38) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000000)) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r4, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 03:04:55 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x151}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r2, r0, 0x0, 0xffffff38) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, 0x0) r3 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, 0x0) write(r3, &(0x7f0000000600)="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", 0x200) sendfile(r3, r4, 0x0, 0x7fffffff) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r5, r3, 0x0, 0xffffff38) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="020000000100000000000000040003000000000008000100", @ANYRES32, @ANYBLOB='\b\x00\a\x00', @ANYRES32, @ANYBLOB='\b\x00\a\x00', @ANYRES32, @ANYBLOB="1000070000000000200000000000000d"], 0x3c, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002bc0)={&(0x7f0000000180)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000580)=[{&(0x7f0000000800)="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", 0x1000}, {&(0x7f0000000280)="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", 0xff}, {&(0x7f0000000380)="3d8b9060427bf86c057d5a1f25b558e875056d49988bddbe7b734575fcfd166f80e54924ab192315e150fed7f61404c4ab3f4d38f06d89beef51b1aefb1a882abc07cf27884dfc0ad8b6a37cfe79ccbc29db14535575cf992e01e2aac9838bff18f81c676666544c3527a1ec0848fc64d107a69db9e65314b2fd62cf810ef90c44545e26e050e5cdaecf629376d12ce66e98551b192cacdedbc0e697fb86843b8404e58e7a475f42defa4a", 0xab}, {&(0x7f0000000440)="9a91671c2fdfa99014072fa5c14e886ea47d138670c8a31f3036bd7cffd70cf8fc1e1bcf1b7d5348d3c34fe94f6555e9f07af88ec84331fb547c36a9c79c3f9973a7838ab180a18f996e63ed2089bdcfa93bb41781eddd49cb2bfa3dd9868327e5da956d6303c88e76ff2dd583843bf1", 0x70}, {&(0x7f0000001800)="4754111e06a40697058bd85fb4afba185059d6e1ef41984e1d40715b8d766792d746759f1e7cc1bbd1e857445c6de2079099493a22ef2487ffc14e7bb367379afb050a201c00e0b332ad34c88a81ed9c3633244f07ccb34d676f04f2ebc8c9b4a9cfdf52d9d49b471ae613db5102f6d31a2d93ec5e7fd3846281c3ea5f169c02af2d201e273e872e444a532fe44e0613b3c552dd6963146c47e86bead5fb7a64bb0094fa4bb0b9da545c0bb57ca485da66c4b1b630bc5b301cdce82026adf5ef6cd0143516498333e03442a72cb6b922a0f3ab298c89dd7292b1623c3b71892c5c7e7aa51ec5896ff682b379689665c7eccab7b76d4235f105a726003bb37be0fc9327238dee143c411e2364a732c00bc00da764648301cb7eac6b391a0bd5c5bd3c2378a9d651148c7a5c2a5fb11e6b38846b0d773019982d09945f2407aa6e98f1dcc4338ff5a1e11ee703d49bdc3d07459e96fddb7b54f9a7a932dffa01d3e65bdf3e721dae034b3f6518f6af740901e2c04ddb97c4ecf8c9e22d647cbefda241b5e0e969578927df7f3cb71b407816038296eec16d8810ee14d6bbe467fe2f1a2bb931b5983b0e34f1b3e73acd810b59ba7a4e6062b63c23dd19ae88e9da388da4019bfd6b2a93af53b94c0d1c8e4587e940e1f5244419782fc92c673bbe082f6ef388cf67d8bd41ded2d6cdd8a55b3b280aba25f42f31450b221ee6a9ec38b56dd6e7a300b2f0ddb41efd59cf4afc7ae66ff6513efe8ba6740c55212a4fd4043fa3b8e0baab931bec05acc18f60773eddb312183a3f3516382cd39b6535ec2661b5d8a32b5771b38dbb44ff9d18d19bba6a3b32bccb25665ad870e9c424911863a43a047280dfd1065ee19a13522dbc3dce7f0b6ccb44bc9af38f5e424b4f7781deca9d5395d5500d3e9a46844f97eb7bd8d00df0574a755a32a4efb53b7e21239f96cf749f3545b79e58a9819e32546a3386e40300ab1226dc7cb1ee7751ebac934fe9a77c9c50ff2f1ba55c0307cb7903806e81cdac5699b3d0e90fccbc65a6117f6823688f6da81417327bee835b0cd7569d3baec0292cb3ce513294a6ef3673bb7300488b3cfa88c7a3c110b0ea6b9e9342d31c8fd9fddbccf3483b1a10b0fdb87a841f32ce4ea0c20e44cb427f2dcc2c96534c5df558287635edebdff1e3fb789b8731c2e890a1c2396252ffa3ddcef80e9530ff97b4c86fbfdf9aacf9bf48594f6efde948ca010a31f58432387dc7273ccff12d4b0a216ab760d08e5035e6a5d11ff846a1e6faa4adc97bcfbb84f90fe336809f69af314645b41c4173b0af67c6aed27531792fcd812cbd801cb8217a12236e47de7796995a7c67f91192dd5134e84e3f112b1d8bf1baef591138882b13d6a0457e7e63abdaa2fe45bdac626dd8f7a9ac2b9350cf106125cf3efc95d2ecf13357a34463f97f31aa09af143e8defd949e2b1dd14ed9bd23dee616a85d31d293c6c6956a911b07dfa9d55ec079bfe6d66cce29349e8e9828dc3045191f2ddbe9e9761977b08fecc4cfab072b69b936e108e3cc82ff64fdb492707fc9e216ccbb876ce0bae886c259a076d7ac471f8c0850eb4b6b2223e09db149368b59a974dfaa45d5520233481ca8971db36a8e1e8620d1951b6e3f917d70f6c0347fedf11550e7fcdba9509e3b6a131715d9d3a3aa7342c25f430e45e86b8fbddebe12391d438cf09ea1991a5bdd5e4c1f325ed92033f4e3d5931acadaa2436e012e8bd002d0bda04ba7bce3c0a66dbf002267ea9abf053bd19a92f2939eac1957c6f5d2f411f075d383f844cdf47f3de9264478c26780f429c0c7a1d64ff73e39a2390f0855c098e59c5dc1323299bf4b96e7b9ac68d6b99724e6db485c517596c751dcc19bd66956332f7b63ef36915d0fa16464d0c3f75afae83ec50a80688c954d7422f39baef968028e481395d7bb71121b557f47056d252497cd685730b0d0745154f5e0b8f83a56b7a24ecc59021301fb680c8f3fe182f6700c34ab73e08ccfb2e45586642c7ecd1e5f7c9f2677be38511d33e9e2090f3f75be3597f00696b326b3a3fe8f594b4107e0a7f7743373b50217a1d03d1131b0f16d7f653abe92ff5dec04f496fa710917d3cfa591c85e308b546cef2d4a86744490cc6ebd5ffe55cfe4814a085045e5e4c6bad9a70fc431e30a57398372bb96b42cdfc001559a588b5d305f0a5dbf789e21675915034cf0bde2f968726194a80cb6c35612320cd451be0450bcf444cf06cf9427279c6456dc7794551b66474941d867defffe8bdeb4a9ef150a36e2edf2ef6ffbc4415b82d2125e116cfdd325366d3e3a3e24fd53b5e22c04b196782d0431a2b717aa70c75ace132f155776c27f83d283d5683feefbe4ee1606e0616fbb4fa74bd6dda9b3b0cbd8120953817c71a0cfec59189e8ae3e87a1494da9fc19926350d44472622cb879eef59b17d3beec939de72dddce894ac5d87223f4489cda9f49d28953ca1758ecdaa00052a128688ca8fea01b65f45dc4c69cac69b24bfaeb3e37487339200333753a94b6e8bce404668b86521fd4f368747c8251bd5e2918b1bef33a46378bf4224349d788a433064d56a338f1cf39ea0a9b41a1e8878b324825634a9e76f00c3403247974762a57bad7efe92475aee681a289f6e9c17465795b82632f4912c3ad33ecafe94c432d69e25767a5a8b37d2e6f7094b945778f6ed75d51ca7001eb8e59bd68d53756093185def0c5d98f6947c855886f2366eca73d0e519a453dca8e57101c8a034c5c01fd86c1b1de6b467771b71661fb49536a7a7da2ab9e0633f8f81ba0f279ef17d75ce24bb7787c16847d7941834de2d9582e085dfc850913b8d68a525c4860245787da564ff95db1521c68ec23861f317f107a83a076c89b63e72ca0610e2e546a3ea0b4a6a45b421b6bce48c767c7647caac2c1a2404f106c46909e60d3361f6b5da7223025f8db3e91ea596805e02e606adb8741a71607dcdf43a9e63194511e1d2549a69dbf05acb90783d7c0e1d8f12bd43208541b227fb8ce43622c8e70658eb427ece41d18b3530ee439cb63b9bfb917267384d849055489bb1585b2acf092f82a96e65047f75d9e0a594230987bab4b235d8c53d4bbfe2dca1c8ca9e3dca625cb3de4e32e1a31c63efcb8f94b1945123fefd3034c5c464eea69c7ce2cf74dc953dd09c0c67e12609e7035931b885103efc16359ae08daf5e6697c8b0a16afb1074cbad3eb7326dda14e1143d5e1c46176925cb6dfd1e8547fb43e931ef710996332defe6ae4b19028b9f4727f29aeb003e15e1d4938b783a107b3fb644ba987904aec0627838f3ad93b3a737ff1f5b1723a8811d27c3fe48c81d092882d0185407c9e6cdca38949f6f4e11dd28867905e6aaad0353f4170f040bcc54863787df306fbbd8f9e02098ba28c44402e58c9fb5f77d93f5bfd2a97886cd2b00f62f208f6ad6ee3e446f67143a0b8fbd254dc97a187f2844a1cd613808399eb706b956f990b73d47745f5178b90f1223f5f0a551450a7916106e1b08b40e6622e70adb8e8a25132bccddb0830e1573d04549f93c3dff54f203b7a35d5c73fc5a06741c8c850cda1775d626409cf68334824014b4d8a846142834367a49a6d44d267861354fda22e5089feb57bfe91fe9875b244023811f662005182a2a90b49db0bfa677b5d74a2c7b2f806efe98c54925406841654ffbefe0de297229b5fca06cb4b006b983964eee42b0712a1021199a78426b6443ad0c3d029ab0423368810291c3703c5edeca00e8a3758072041f226391f34560c29d52fa16a5fd8abb09dd57bf920585318d14656929c689b321bebea34b00db44ac328f0dda3d7f1d618f79e8334608d9e3e519faed4625c8b17449d9dc4b42ef38c45885843190056b1f387f63a32685be570ea1a7ceefaa51c4597213cc0ec57874589f08de28e48cffc7e36791426ecacbf45d378065fbb71ec8b9e551b2589a0a4277ef1b2b245da6ef03e2f31b89f9309c23f209de6878ae4a776e75849ff759f73687d4a2a884c61c9904ec3ff9008c29fc2b835c4949adefbbbcbd50c7c7cbc9861827bf3a303445c533fe93f73e5dbaf31a86571408f6841de5c22770b4c4364e045a6bffa22320bb705b4ae1f8154f8e39f77a26036c02cfd95210e25a323b091ea536b6cea7ab7840c3a7d8fb81009dca5d2589da54e47b682322acf57b5d2d8632ff1c833a02b66d21cea58d40c1ee4bfc0a97a3ea956082d0595cde0ae42e06a99aabf039438a4988144ccf596d12ae4875a2faf7beee76e1371c4580f0773874e9f09070f4e8eceaaa4d19d7eb6cc9145de609cac931fbd6c99700883d2c65711f2d026065b24aac8f09cce96bbb20ee3d5f1a4e4c3048ed7c21aa675ba4d80060015f7389c8f19388b05cc51a7a349d4872fddebf58c70431220cb83f87489f7fb65fbdca7c40c997783dadf21a130ebae3cc8048fa9dec44b82f7284253cb16aa43a8167b96dbfe51c8944bf9e0ded7a5576fd5770df016ab101fd3d69a8cabc07d6c3128a75a0ac3d5d89c29a07a77a7fec1f1fecdd80cf97b9d9ba82b78049d5e68f14eb34ebb9618b483bce57966418b70b8c6e2aa0decae28fdb72308f549b9a45ae059cd1af235db6ae59ae78bdb9ce63db46cfaa4aa1afc960130039038f7052a750f3fc12b420baea2a4dc2281baf4f243fe9c83f567f98d5b5aa3831cf6583a2fc8804b0bd7c2a831a629b39d0914c4a320d9d8bb7de256eeffcc0f3a87e52bdbfd37f732a78b9190363c7aab1c5a8f59d94f058f124b55423486d71c562b5b216fa19630bedf1157707be9b26c51867afce031221728015d1354e33088aab843bfda9663de8bba6862f0b29d34284f8c62ef25fec76708b4762a0960f1b93865c6d0efa7b4d3be968fd0503f5a5c67ecf47c6787409270fdac1b6e1aaa421d453eb6177fde564ccc5091e9442dc6aacfabd6c5c7e35c1963028c386063bd7b70cb97592c6e0221e1579aaa567f7ad057767bdc4096598cfbcfed53f7c6169dc2c0a77834632b0573a6035b2ddd454de0f741699183f7de8706d4ceebb55b2058161b86dbca7418721b1b4cfd5aa0af435dce1518eb8504889c3fd373a19e4d693ca11ea5b113b381d386263fe902d4134a11a8bc8ab793041785db84b32ba91e2884f4d72d910222d37a6438b903bf7bdfdc3a063941b1d8ae826ebad872acab25c5d0cef0aee4b46cf629d5d46d6dbdd1979db109534608e869f0c7956dc4dea59b7a2bca180eabfd4bb1383dddafc5d50ae20f7237cb332086ccb63b37032bf98df3eb6120b4112e97c9aae3afd2c72302019a7707999f98663b2ced434241aaaa278d5c2f55f942d93290d038358960e243694c42d9bc6d025b27c2b1a378b2803fb21832832c76469451b9b8156a9bcca1f4d1ffd331ebaaa0ba96cf94012fb3d8824506b4c3016c15595b6e21030223083404c82c3c7b116406a1b581091078c04bf4556a9e6f281b7059df52ba64e14b38a24814e48463be1e441477e3520c3debc7395938e03a079579a56fa8baab7a5cd1bbed5cc556965b91f43388fb2be711c9e2735701622078cf9d16cd85fe814db0479de3817c30b0ba00486bf4c9c9453c9ae37c4463140d2224c69e2eab2b8d76205a4332d568086498ff1f676c3aa1ef848e3baf09393807c2b2000b2aaf0b13627dc76511c752559bf292a1ba65e0253170fc904b0370553dcfa430d0a8eff564e3cb234b39234a089efb595089f73c0bd8688cbe42b684", 0x1000}, {&(0x7f00000004c0)="f51a077f4589302f47e5613f94d6fd5320b34c804b1dcc23c3d5efcd80419e3fd7f57abcdf5e6ab7503acc7816d7dfed9b5b50763625a983d72567e481720df884edb856a580513a8cc320e187f6a21261dc15af64a7bbbbe7e0909c6392f56e25bc9dc0e3a5c15f0cae26bdf099fd85c3408744d0ea2e08771254f1fc413790561143d297cd6a1097d5d6c1161c06526ea3a3336164c9", 0x97}, {&(0x7f0000002800)="bb19b28f13927c9d8554fcd09efb011fe7c839cb43ef222382591e78422ebd960e210c2414defba17374e3a05c3dbe1dc312abb36ed7c6dbf8a0baf817eabd8fe69cbfc259c4293f6b6f346c395965811298dd1a1b753fabfb73070410e116d5847601face74053c60fc2f073ef8ef58747eed87559724e90568a0f99b5ec6109044ef669d2056224dc488e4bd648aff02dd10c38249eaff82d6eb3457ac9082ca9cb14c6040d0de", 0xa8}, {&(0x7f00000028c0)="0fe11785334d299524eac078c39fd18928acc8812015d9999c613ddf03d0e6ae37d9a766889a276bf7932421fe3fe3c69769c2cc2107822c129d00a8cb758b0cfd27a919dc19f5a67e4a4808175d3828016cda38b3452fa168d66a33badc457b75484ed428c6002e2a73659eb9894c8d56087f3609b5606da873fd9b9c7f53140cd5088454f2a0163fac100ae3b23c5656f85ea0de9593afc180f3d54729a9e757db9866ed3fa19c072e4e8df384a80918e87ebc7a8f35bd", 0xb8}], 0x8, &(0x7f0000002ac0)=ANY=[@ANYBLOB="24000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r0, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32=r5, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xe0, 0x8095}, 0x40) ioctl$VHOST_SET_VRING_BASE(r3, 0x4008af12, &(0x7f0000000000)={0x1, 0x100}) socket$inet_udplite(0x2, 0x2, 0x88) 03:04:55 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x6ee0330061c387eb, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x1) r3 = open(&(0x7f0000000440)='./file0\x00', 0x2440c2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffff38) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000040)={0x9, 0x7ff, 0x9991, 0x5, 0x1c, 0x8001}) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x25a102, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, 0x0) write(r3, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r3, r4, 0x0, 0x7fffffff) r5 = open(&(0x7f00000003c0)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000200)={0x40, 0x9}) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, {&(0x7f0000000280)=""/192, 0xc0, &(0x7f0000000400)=""/49, 0x3, 0x3}}, 0x48) sendfile(r5, r3, 0x0, 0xffffff38) read$dsp(r5, &(0x7f0000000100)=""/157, 0x9d) sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f00000000c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) 03:04:55 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r2, 0xffffffffffffffff, 0x0, 0xffffff38) r3 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, 0x0) write(r3, &(0x7f0000000600)="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", 0x200) sendfile(r3, r4, 0x0, 0x7fffffff) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r5, r3, 0x0, 0xffffff38) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205647, &(0x7f0000000040)={0xa00000, 0x4, 0x6, r3, 0x0, &(0x7f0000000000)={0x9b0904, 0x0, [], @value64=0x3}}) ioctl$DRM_IOCTL_GEM_OPEN(r6, 0xc010640b, &(0x7f00000000c0)={0x0, 0x0, 0xffffffff}) syz_open_dev$tty1(0xc, 0x4, 0x1) 03:04:55 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x46000) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$VIDIOC_QUERY_DV_TIMINGS(r2, 0x80845663, &(0x7f00000000c0)={0x0, @reserved}) 03:04:55 executing program 4: r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000000)=0x80, 0x2) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r3, r1, 0x0, 0xffffff38) ioctl$SNDRV_PCM_IOCTL_DRAIN(r0, 0x4144, 0x0) [ 2093.353475][ T27] audit: type=1800 audit(1586660695.188:4798): pid=21692 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=17148 res=0 03:04:55 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x802, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) [ 2093.399989][ T27] audit: type=1804 audit(1586660695.218:4799): pid=21692 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir057656323/syzkaller.yzn8jn/469/file0" dev="sda1" ino=17148 res=1 [ 2093.402145][ T27] audit: type=1804 audit(1586660695.238:4800): pid=21693 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir888993330/syzkaller.9XPLg2/617/file0" dev="sda1" ino=17153 res=1 [ 2093.404289][ T27] audit: type=1804 audit(1586660695.238:4801): pid=21693 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir888993330/syzkaller.9XPLg2/617/file0" dev="sda1" ino=17153 res=1 03:04:55 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) creat(&(0x7f0000000000)='./file0\x00', 0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) 03:04:55 executing program 0: r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r2, r0, 0x0, 0xffffff38) r3 = pidfd_getfd(0xffffffffffffffff, r2, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000000000)=0x4, 0x4) prctl$PR_GET_SECCOMP(0x15) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x5) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) [ 2093.691763][ T27] audit: type=1800 audit(1586660695.318:4802): pid=21695 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=17154 res=0 03:04:55 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$P9_RLOPEN(r0, &(0x7f0000000000)={0x18, 0xd, 0x2, {{0x10, 0x2, 0x7}, 0xffffffff}}, 0x18) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) fcntl$getflags(r1, 0xb) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r2, r0, 0x0, 0xffffff38) [ 2093.746541][ T27] audit: type=1804 audit(1586660695.318:4803): pid=21701 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir057656323/syzkaller.yzn8jn/469/file0" dev="sda1" ino=17148 res=1 03:04:55 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, 0x0) write(r1, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r3, r1, 0x0, 0xffffff38) ioctl$VFIO_IOMMU_MAP_DMA(r3, 0x3b71, &(0x7f0000000000)={0x20, 0x3, 0x9f54, 0x1, 0x44}) fcntl$setstatus(r0, 0x4, 0x2000) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) [ 2093.914628][ T27] audit: type=1804 audit(1586660695.358:4804): pid=21693 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir888993330/syzkaller.9XPLg2/617/file0" dev="sda1" ino=17153 res=1 [ 2094.004594][ T27] audit: type=1804 audit(1586660695.368:4805): pid=21707 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir057656323/syzkaller.yzn8jn/469/file0" dev="sda1" ino=17148 res=1 03:04:56 executing program 1: r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r2, r0, 0x0, 0xffffff38) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x151}, 0x0, 0x0, r0, 0x0) r3 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r3, &(0x7f0000000600)="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", 0x200) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r4, r3, 0x0, 0xffffff38) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) [ 2101.620977][ T27] kauditd_printk_skb: 30 callbacks suppressed [ 2101.620994][ T27] audit: type=1800 audit(1586660703.458:4836): pid=21743 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16537 res=0 [ 2101.650647][ T27] audit: type=1804 audit(1586660703.458:4837): pid=21743 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir061524304/syzkaller.Juw9ej/251/file0" dev="sda1" ino=16537 res=1 [ 2101.682728][ T27] audit: type=1804 audit(1586660703.518:4838): pid=21744 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir061524304/syzkaller.Juw9ej/251/file0" dev="sda1" ino=16537 res=1 03:05:03 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7ffffffffffffb, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f00000000c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) 03:05:03 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/arp\x00') r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) sendfile(r2, r0, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 03:05:03 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10000, 0x325}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f00000000c0)="f37d183c32f54262f10c316383a727daa8a6ce870b") r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) r3 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, 0x0) write(r3, &(0x7f0000000600)="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", 0x200) sendfile(r3, r4, 0x0, 0x7fffffff) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r5, r3, 0x0, 0xffffff38) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000040)={0xf000000, 0x99, 0x0, r5, 0x0, &(0x7f0000000000)={0x9c0904, 0x10000, [], @ptr=0xffff}}) ioctl$VT_RELDISP(r6, 0x5605) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) 03:05:03 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) sendmsg$sock(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="7bb39136e06d5a9b6738d8db172bacedc7", 0x11}, {&(0x7f0000000800)="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", 0x1000}, {&(0x7f0000000180)="5ba38f303b776cf59af8d0cdf157d79edb7656112b258e5f55d8b299e8e70c8ac5a3786ac34890c5322e93892ddd667ca3cf3707432b132934666c41bc9426d200d0d7c34b4632e35d29c9c75d", 0x4d}, {&(0x7f0000000200)="16943badcfbea8cd8b2a9d0cc7db077e3a7e87ac4dc67c6105ab692ac1dbc8a046c5ad3a441ca8d580d6e94125b30132131eaf32e15da85f32357e43693c2a97c92bf76321f1593761f0c963b5638a4e107bafb0ae4f2e816db42b5a500082d5c23de6c203e7533f8340953181b40cdb2e95293bce936c2a95c907c4a712e3df4dc6afb9e503b612118b2fdd615f5b096127a79b177659551eb67eebbd921d8487c8d4687b960e96aac16f49dccbd547e0de894ad3cb8b08c20961f3385cb04b4171a8b908", 0xc5}], 0x4, &(0x7f0000000300)=[@txtime={{0x18, 0x1, 0x3d, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0xa26c0000}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @txtime={{0x18}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x101}}], 0x90}, 0x800) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r2, r0, 0x0, 0xffffff38) 03:05:03 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x151}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r2, r0, 0x0, 0xffffff38) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000), &(0x7f00000000c0)=0x14) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 03:05:03 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f00000000c0)) r3 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x59e1, 0x1a9000) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000040)="f043efae5a", 0x5, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r3, 0xc00464be, &(0x7f0000000140)={r4}) syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/btrfs-control\x00', 0x4100, 0x0) ioctl$TIOCL_BLANKSCREEN(r5, 0x541c, &(0x7f00000001c0)) 03:05:03 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x101040, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x7}, 0x3510, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r1, 0x8) fcntl$setstatus(r2, 0x4, 0x2000) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004103) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f00000000c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) [ 2101.976411][ T27] audit: type=1800 audit(1586660703.808:4839): pid=21753 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=16788 res=0 [ 2102.076916][ T27] audit: type=1804 audit(1586660703.808:4840): pid=21753 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir888993330/syzkaller.9XPLg2/619/file0" dev="sda1" ino=16788 res=1 [ 2102.076939][ T27] audit: type=1800 audit(1586660703.838:4841): pid=21756 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=16545 res=0 [ 2102.076962][ T27] audit: type=1804 audit(1586660703.848:4842): pid=21756 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir057656323/syzkaller.yzn8jn/471/file0" dev="sda1" ino=16545 res=1 [ 2102.076982][ T27] audit: type=1800 audit(1586660703.848:4843): pid=21754 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16562 res=0 [ 2102.077004][ T27] audit: type=1804 audit(1586660703.878:4844): pid=21754 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir932491758/syzkaller.D6Mno2/544/file0" dev="sda1" ino=16562 res=1 [ 2102.077027][ T27] audit: type=1804 audit(1586660703.898:4845): pid=21763 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir057656323/syzkaller.yzn8jn/471/file0" dev="sda1" ino=16545 res=1 03:05:04 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') r3 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, 0x0) write(r3, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r3, r4, 0x0, 0x7fffffff) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r5, r3, 0x0, 0xffffff38) ioctl$CAPI_GET_SERIAL(r5, 0xc0044308, &(0x7f0000000000)=0x5) sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f00000000c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) 03:05:04 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x1, 0x442) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000040)=0x9fa4, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x20, 0x10, 0x0, 0x0, 0x100007f, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x237, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x2000) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r4 = syz_open_procfs(r3, &(0x7f00000000c0)='net/protocols\x00') sendfile(r2, r4, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) 03:05:04 executing program 2: lsetxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.opaque\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) 03:05:04 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = gettid() fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000000)={0x2, 0xb78ad9c5052c8f25, 0x7fffffff, 0x6, r2}) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r3, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) 03:05:04 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, 0x0) write(r1, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r3, r1, 0x0, 0xffffff38) r4 = dup2(r3, 0xffffffffffffffff) sendmsg$NFT_BATCH(r4, &(0x7f0000002c40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELRULE={0x678, 0x8, 0xa, 0x101, 0x0, 0x0, {0xc, 0x0, 0x3}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_COMPAT={0x54, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2c}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6004}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88e7}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x5e}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x15}]}, @NFTA_RULE_EXPRESSIONS={0x604, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@payload={{0xc, 0x1, 'payload\x00'}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x10}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x7452}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0xffffffc0}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x7}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_PAYLOAD_CSUM_TYPE={0x8}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8}]}}]}, {0xa0, 0x1, 0x0, 0x1, [@range={{0xa, 0x1, 'range\x00'}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}]}}, @hash={{0x9, 0x1, 'hash\x00'}, @void}, @tproxy={{0xb, 0x1, 'tproxy\x00'}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xb}]}}, @dynset={{0xb, 0x1, 'dynset\x00'}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SREG_KEY={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_DYNSET_OP={0x8, 0x3, 0x1, 0x0, 0x2}]}}]}, {0xd0, 0x1, 0x0, 0x1, [@tproxy={{0xb, 0x1, 'tproxy\x00'}, @void}, @counter={{0xc, 0x1, 'counter\x00'}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfff}]}}, @dup_ipv4={{0x8, 0x1, 'dup\x00'}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x1d}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x12}]}}, @dup={{0x8, 0x1, 'dup\x00'}, @void}, @nat={{0x8, 0x1, 'nat\x00'}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}, @limit={{0xa, 0x1, 'limit\x00'}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}}, @dynset={{0xb, 0x1, 'dynset\x00'}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_DYNSET_SREG_DATA={0x8, 0x5, 0x1, 0x0, 0xc}]}}, @cmp={{0x8, 0x1, 'cmp\x00'}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x1}]}}]}, {0xec, 0x1, 0x0, 0x1, [@tproxy={{0xb, 0x1, 'tproxy\x00'}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x1}]}}, @osf={{0x8, 0x1, 'osf\x00'}, @void}, @bitwise={{0xc, 0x1, 'bitwise\x00'}, @void}, @fib={{0x8, 0x1, 'fib\x00'}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_FIB_FLAGS={0x8}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0xd}, @NFTA_FIB_FLAGS={0x8}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}]}}, @objref={{0xb, 0x1, 'objref\x00'}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz0\x00'}]}}, @socket={{0xb, 0x1, 'socket\x00'}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xc}]}}, @payload={{0xc, 0x1, 'payload\x00'}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_CSUM_FLAGS={0x8}]}}, @target={{0xb, 0x1, 'target\x00'}, @void}]}, {0xa4, 0x1, 0x0, 0x1, [@meta={{0x9, 0x1, 'meta\x00'}, @void}, @reject={{0xb, 0x1, 'reject\x00'}, @void}, @rt={{0x7, 0x1, 'rt\x00'}, @void}, @log={{0x8, 0x1, 'log\x00'}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x401}, @NFTA_LOG_PREFIX={0xb, 0x2, 0x1, 0x0, 'wlan0\\\x00'}, @NFTA_LOG_PREFIX={0x5, 0x2, 0x1, 0x0, '\x00'}, @NFTA_LOG_QTHRESHOLD={0x6}, @NFTA_LOG_PREFIX={0xe, 0x2, 0x1, 0x0, 'mountinfo\x00'}, @NFTA_LOG_PREFIX={0xb, 0x2, 0x1, 0x0, 'vmnet1\x00'}]}}, @lookup={{0xb, 0x1, 'lookup\x00'}, @void}, @reject={{0xb, 0x1, 'reject\x00'}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x1}, @NFTA_REJECT_TYPE={0x8}]}}]}, {0x20c, 0x1, 0x0, 0x1, [@exthdr={{0xb, 0x1, 'exthdr\x00'}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x2}]}}, @log={{0x8, 0x1, 'log\x00'}, @void}, @counter={{0xc, 0x1, 'counter\x00'}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x20}]}}, @reject={{0xb, 0x1, 'reject\x00'}, @void}, @target={{0xb, 0x1, 'target\x00'}, @val={0x120, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x8000}, @NFTA_TARGET_NAME={0xe, 0x1, 'mountinfo\x00'}, @NFTA_TARGET_NAME={0x9, 0x1, '\'\xd7em0'}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0xffff7fff}, @NFTA_TARGET_INFO={0x42, 0x3, "887418287385b96647e72ad6e7ffc96b00eee4ca528cf4e1883293158d2bfeb4009ecde40e945c94914e0c250f3cb00da2b4a621bb248a62389b28150375"}, @NFTA_TARGET_INFO={0xa9, 0x3, "8b7b27d2065de9604d0279222f0047f58ce0caf0f04caba5af737cd005918e6519090f47fbe250bb9093f7b6d7a3461bc136e13469a0cd141b4cd4cb1f7f24afb63270a37247a4d27e626ce80f6368877e371407deda8a8afb23921f50b9f6f50c5923a47f634ca15d49394c4f41a396b217be75a883900f46a60d8cf8fe9bda2386c5eae671a3e1a29b0483d1524102894d19c1f9800a6ffeb0b57a09e8c303b6d54c1153"}]}}, @flow_offload={{0x11, 0x1, 'flow_offload\x00'}, @void}, @connlimit={{0xe, 0x1, 'connlimit\x00'}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_COUNT={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x80}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}}, @meta={{0x9, 0x1, 'meta\x00'}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x18}]}}]}, {0x10, 0x1, 0x0, 0x1, [@payload={{0xc, 0x1, 'payload\x00'}, @void}]}, {0x4}, {0x94, 0x1, 0x0, 0x1, [@socket={{0xb, 0x1, 'socket\x00'}, @void}, @hash={{0x9, 0x1, 'hash\x00'}, @void}, @limit={{0xa, 0x1, 'limit\x00'}, @void}, @limit={{0xa, 0x1, 'limit\x00'}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0xffffffff}]}}, @nat={{0x8, 0x1, 'nat\x00'}, @void}, @socket={{0xb, 0x1, 'socket\x00'}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x11}]}}]}]}]}, @NFT_MSG_DELRULE={0x100, 0x8, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_RULE_USERDATA={0xda, 0x7, 0x1, 0x0, "e342e173db502d241b9e567e6f1a66c0118c305a686ffddd57c7b0b8591cb772dcfc73343ed261cbf5066c101da2dd8e75970a522e85e01054e7b1ad1143511b08f3e01ad32cb489712fe3c6cae8e6e40341c120bd94b4deceee7da699cd45b8d32ad4ad795588b1c19c6ee97b6f00ede997a091b3f0dcb530a20bb0828caa503b60586ab7ec6ffc01af11ff016b1859d69df1d068ca57227d348676cf02c62b043263bf028f7000069d611b47a9f0509107dec714e74389c4a31b2f9f3258b3cd83d5fa186e3455a828f64aadaec0b73ecc7bbbf37b"}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_ID={0x8}]}, @NFT_MSG_NEWSETELEM={0x233c, 0xc, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x12e4, 0x3, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x3a, 0x6, 0x1, 0x0, "a896449ca19db27979f4f93151f9b1b42ae4fc8cfc13645becafb72053566f80386a4bbddded09b3de86c14dffcce1d564051cc598ac"}]}, {0x11cc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x50, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffff9}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_KEY={0x115c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x7e, 0x1, "54bf52dd3ceeeaabe3da7bcf0bbf713512200fb3c5fd2f3c9feebfb4247b3a4b30f9da846f0069bd68387f659b8f155badf7d8c767b0c52274848e05db8ced5e8e2db0984e6dfd8b3b7ccef471f57da1151532c2c490ad98a42c40cf019a5656bb9908f6d9fb600dcb8096cf793055886e150076d007436f56cd"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}]}, {0x68, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x50, 0x6, 0x1, 0x0, "64951b1da7e701165fbab6da2ad060316e7fb600c9b91f32b3bc01197de5ec86a57535609faccf3e906073eec34cbc967ff4d6216238f97bbcea53dcee605319f595a1df14f74c8ddea2210d"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7ff}, @NFTA_SET_ELEM_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8}]}, {0x50, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x4b, 0x6, 0x1, 0x0, "a44324ba271cafbeccbebae8277fd6437eb8790c767b1285872d28690a6a74241486b19ff02bc53bcd5f7a95970e878e3131fd3a3e4872414706632b247da7a737f76551918c7e"}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1044, 0x3, 0x0, 0x1, [{0x1030, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_USERDATA={0x1004, 0x6, 0x1, 0x0, "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"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xfffffffeffffffff}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_FLAGS={0x8}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xfffffffffffffff8}]}]}]}, @NFT_MSG_DELSET={0x74, 0xb, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}, @NFTA_SET_DESC={0x44, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x101}]}]}], {0x14}}, 0x2b70}, 0x1, 0x0, 0x0, 0x4}, 0x8001) fcntl$setstatus(r0, 0x4, 0x2000) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r5, 0xffffffffffffffff, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) 03:05:12 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r3, r1, 0x0, 0xffffff38) r4 = dup2(r3, 0xffffffffffffffff) sendmsg$NFT_BATCH(r4, &(0x7f0000002c40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELRULE={0x678, 0x8, 0xa, 0x101, 0x0, 0x0, {0xc, 0x0, 0x3}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_COMPAT={0x54, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2c}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6004}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88e7}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x5e}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x15}]}, @NFTA_RULE_EXPRESSIONS={0x604, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@payload={{0xc, 0x1, 'payload\x00'}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x10}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x7452}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0xffffffc0}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x7}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_PAYLOAD_CSUM_TYPE={0x8}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8}]}}]}, {0xa0, 0x1, 0x0, 0x1, [@range={{0xa, 0x1, 'range\x00'}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}]}}, @hash={{0x9, 0x1, 'hash\x00'}, @void}, @tproxy={{0xb, 0x1, 'tproxy\x00'}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xb}]}}, @dynset={{0xb, 0x1, 'dynset\x00'}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SREG_KEY={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_DYNSET_OP={0x8, 0x3, 0x1, 0x0, 0x2}]}}]}, {0xd0, 0x1, 0x0, 0x1, [@tproxy={{0xb, 0x1, 'tproxy\x00'}, @void}, @counter={{0xc, 0x1, 'counter\x00'}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfff}]}}, @dup_ipv4={{0x8, 0x1, 'dup\x00'}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x1d}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x12}]}}, @dup={{0x8, 0x1, 'dup\x00'}, @void}, @nat={{0x8, 0x1, 'nat\x00'}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}, @limit={{0xa, 0x1, 'limit\x00'}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}}, @dynset={{0xb, 0x1, 'dynset\x00'}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_DYNSET_SREG_DATA={0x8, 0x5, 0x1, 0x0, 0xc}]}}, @cmp={{0x8, 0x1, 'cmp\x00'}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x1}]}}]}, {0xec, 0x1, 0x0, 0x1, [@tproxy={{0xb, 0x1, 'tproxy\x00'}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x1}]}}, @osf={{0x8, 0x1, 'osf\x00'}, @void}, @bitwise={{0xc, 0x1, 'bitwise\x00'}, @void}, @fib={{0x8, 0x1, 'fib\x00'}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_FIB_FLAGS={0x8}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0xd}, @NFTA_FIB_FLAGS={0x8}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}]}}, @objref={{0xb, 0x1, 'objref\x00'}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz0\x00'}]}}, @socket={{0xb, 0x1, 'socket\x00'}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xc}]}}, @payload={{0xc, 0x1, 'payload\x00'}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_CSUM_FLAGS={0x8}]}}, @target={{0xb, 0x1, 'target\x00'}, @void}]}, {0xa4, 0x1, 0x0, 0x1, [@meta={{0x9, 0x1, 'meta\x00'}, @void}, @reject={{0xb, 0x1, 'reject\x00'}, @void}, @rt={{0x7, 0x1, 'rt\x00'}, @void}, @log={{0x8, 0x1, 'log\x00'}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x401}, @NFTA_LOG_PREFIX={0xb, 0x2, 0x1, 0x0, 'wlan0\\\x00'}, @NFTA_LOG_PREFIX={0x5, 0x2, 0x1, 0x0, '\x00'}, @NFTA_LOG_QTHRESHOLD={0x6}, @NFTA_LOG_PREFIX={0xe, 0x2, 0x1, 0x0, 'mountinfo\x00'}, @NFTA_LOG_PREFIX={0xb, 0x2, 0x1, 0x0, 'vmnet1\x00'}]}}, @lookup={{0xb, 0x1, 'lookup\x00'}, @void}, @reject={{0xb, 0x1, 'reject\x00'}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x1}, @NFTA_REJECT_TYPE={0x8}]}}]}, {0x20c, 0x1, 0x0, 0x1, [@exthdr={{0xb, 0x1, 'exthdr\x00'}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x2}]}}, @log={{0x8, 0x1, 'log\x00'}, @void}, @counter={{0xc, 0x1, 'counter\x00'}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x20}]}}, @reject={{0xb, 0x1, 'reject\x00'}, @void}, @target={{0xb, 0x1, 'target\x00'}, @val={0x120, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x8000}, @NFTA_TARGET_NAME={0xe, 0x1, 'mountinfo\x00'}, @NFTA_TARGET_NAME={0x9, 0x1, '\'\xd7em0'}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0xffff7fff}, @NFTA_TARGET_INFO={0x42, 0x3, "887418287385b96647e72ad6e7ffc96b00eee4ca528cf4e1883293158d2bfeb4009ecde40e945c94914e0c250f3cb00da2b4a621bb248a62389b28150375"}, @NFTA_TARGET_INFO={0xa9, 0x3, "8b7b27d2065de9604d0279222f0047f58ce0caf0f04caba5af737cd005918e6519090f47fbe250bb9093f7b6d7a3461bc136e13469a0cd141b4cd4cb1f7f24afb63270a37247a4d27e626ce80f6368877e371407deda8a8afb23921f50b9f6f50c5923a47f634ca15d49394c4f41a396b217be75a883900f46a60d8cf8fe9bda2386c5eae671a3e1a29b0483d1524102894d19c1f9800a6ffeb0b57a09e8c303b6d54c1153"}]}}, @flow_offload={{0x11, 0x1, 'flow_offload\x00'}, @void}, @connlimit={{0xe, 0x1, 'connlimit\x00'}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_COUNT={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x80}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}}, @meta={{0x9, 0x1, 'meta\x00'}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x18}]}}]}, {0x10, 0x1, 0x0, 0x1, [@payload={{0xc, 0x1, 'payload\x00'}, @void}]}, {0x4}, {0x94, 0x1, 0x0, 0x1, [@socket={{0xb, 0x1, 'socket\x00'}, @void}, @hash={{0x9, 0x1, 'hash\x00'}, @void}, @limit={{0xa, 0x1, 'limit\x00'}, @void}, @limit={{0xa, 0x1, 'limit\x00'}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0xffffffff}]}}, @nat={{0x8, 0x1, 'nat\x00'}, @void}, @socket={{0xb, 0x1, 'socket\x00'}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x11}]}}]}]}]}, @NFT_MSG_DELRULE={0x100, 0x8, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_RULE_USERDATA={0xda, 0x7, 0x1, 0x0, "e342e173db502d241b9e567e6f1a66c0118c305a686ffddd57c7b0b8591cb772dcfc73343ed261cbf5066c101da2dd8e75970a522e85e01054e7b1ad1143511b08f3e01ad32cb489712fe3c6cae8e6e40341c120bd94b4deceee7da699cd45b8d32ad4ad795588b1c19c6ee97b6f00ede997a091b3f0dcb530a20bb0828caa503b60586ab7ec6ffc01af11ff016b1859d69df1d068ca57227d348676cf02c62b043263bf028f7000069d611b47a9f0509107dec714e74389c4a31b2f9f3258b3cd83d5fa186e3455a828f64aadaec0b73ecc7bbbf37b"}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_ID={0x8}]}, @NFT_MSG_NEWSETELEM={0x233c, 0xc, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x12e4, 0x3, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x3a, 0x6, 0x1, 0x0, "a896449ca19db27979f4f93151f9b1b42ae4fc8cfc13645becafb72053566f80386a4bbddded09b3de86c14dffcce1d564051cc598ac"}]}, {0x11cc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x50, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffff9}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_KEY={0x115c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x7e, 0x1, "54bf52dd3ceeeaabe3da7bcf0bbf713512200fb3c5fd2f3c9feebfb4247b3a4b30f9da846f0069bd68387f659b8f155badf7d8c767b0c52274848e05db8ced5e8e2db0984e6dfd8b3b7ccef471f57da1151532c2c490ad98a42c40cf019a5656bb9908f6d9fb600dcb8096cf793055886e150076d007436f56cd"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}]}, {0x68, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x50, 0x6, 0x1, 0x0, "64951b1da7e701165fbab6da2ad060316e7fb600c9b91f32b3bc01197de5ec86a57535609faccf3e906073eec34cbc967ff4d6216238f97bbcea53dcee605319f595a1df14f74c8ddea2210d"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7ff}, @NFTA_SET_ELEM_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8}]}, {0x50, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x4b, 0x6, 0x1, 0x0, "a44324ba271cafbeccbebae8277fd6437eb8790c767b1285872d28690a6a74241486b19ff02bc53bcd5f7a95970e878e3131fd3a3e4872414706632b247da7a737f76551918c7e"}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1044, 0x3, 0x0, 0x1, [{0x1030, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_USERDATA={0x1004, 0x6, 0x1, 0x0, "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"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xfffffffeffffffff}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_FLAGS={0x8}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xfffffffffffffff8}]}]}]}, @NFT_MSG_DELSET={0x74, 0xb, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}, @NFTA_SET_DESC={0x44, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x101}]}]}], {0x14}}, 0x2b70}, 0x1, 0x0, 0x0, 0x4}, 0x8001) fcntl$setstatus(r0, 0x4, 0x2000) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r5, 0xffffffffffffffff, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) 03:05:12 executing program 1: r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) write(r0, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r2, r0, 0x0, 0xffffff38) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000180)={'wg1\x00', 0xbf69}) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x151}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r3, &(0x7f0000000600)="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", 0x200) r4 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x4, 0x400000) r5 = openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x20000, 0x0) sendfile(r4, r5, 0x0, 0x4) r6 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r6, r3, 0x0, 0xffffff38) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 03:05:12 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') r1 = open(&(0x7f0000000000)='./file0\x00', 0x219282, 0xa97e9eee2b10f1cc) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) lgetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="6f73782e6d6f756e74696e666f003203916519f8ffa0e9b8afc75f1c94b267cb674c3ed6f210b89c08182ce39f98a687cdb826a7e9c906084f6edcc1cbdfff298185e034b911a9df715060a5ad0d34509f8a0cc8b26b55dd7e1bf5c04923a40529bfbfb4c5b0f8ab22a47782a6786a1f7fb71549b02c5dd34a9c571ea4a82ba304724f2515920e5e3a3961bdda39078eeaca6aaaac4e486da7e949ed413e0add03c5996999aa025fd95d6d076683989f773f60ba556dd674076c2c7a4f1a24b984271f2b5fcb034e94"], &(0x7f0000000140)=""/176, 0xb0) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7fffffff) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r4, 0xffffffffffffffff, 0x0, 0xffffff38) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000280)='cpusettrusteduser\x00', 0x0, r4) sendfile(r3, r1, 0x0, 0xffffff38) sendfile(r1, r0, 0x0, 0x800000080044101) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 03:05:12 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) sendmsg$AUDIT_DEL_RULE(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000800)={0x45c, 0x3f4, 0x20, 0x70bd27, 0x25dfdbff, {0x0, 0x1c86dbb88adac357, 0x24, [0x0, 0x401, 0x9, 0x9, 0x8, 0x5, 0xffff, 0x2, 0x9, 0x8, 0x5cb, 0x1, 0xf6, 0x9, 0x900, 0xffff0001, 0x0, 0x8, 0xda8, 0x2, 0x0, 0x5, 0x400, 0x8, 0x7, 0x9, 0x9, 0x100, 0x7, 0xe92b, 0x7, 0x5, 0x8, 0x8, 0xffffffac, 0x57, 0x6, 0x46cd5226, 0x3f, 0x7, 0x7fff, 0x3ff, 0xc5e9, 0x0, 0x10001, 0x558, 0x1, 0xffff7fff, 0x8000, 0x1, 0x9, 0x7, 0x2, 0x1, 0x4, 0x6, 0x8, 0x10000, 0x80000001, 0x9, 0xfffffff7, 0xbc3, 0x200, 0xc], [0x6, 0x7, 0x6, 0x6, 0x8, 0x7, 0x7fff, 0x10000, 0x396, 0x3, 0x80000001, 0xff, 0x0, 0x400, 0x1f, 0x9, 0x7fffffff, 0x6, 0x101, 0x9e89, 0x0, 0x3f, 0xd8d3, 0xffffffff, 0x6bbc, 0x10001, 0xd2b, 0x4, 0x7f, 0x2, 0xcc, 0x2, 0x6, 0x9, 0x5, 0x6, 0x8, 0x0, 0x7, 0x80000000, 0x200, 0x81, 0x8, 0x8, 0x2, 0x2, 0x6, 0xb17, 0x1ff, 0xfffff001, 0x5b0, 0x8, 0x7, 0x9, 0x6, 0xf19d, 0xaca2, 0xad0, 0x1f, 0xa0a, 0x200, 0x9, 0xfffffff9, 0x8], [0xfff, 0x7, 0x1, 0x8, 0xb30e, 0x5, 0x3f, 0x80, 0x5, 0x3, 0x5, 0x80000001, 0x9, 0x1, 0x8000, 0x2, 0x1, 0x6, 0xffffffff, 0xd179, 0xb12f, 0x0, 0x32a, 0x8001, 0x9de, 0x8000, 0x7, 0x2, 0x0, 0x1, 0x6, 0x1, 0x1e0, 0x710a37f8, 0x47, 0x0, 0x1b86, 0xfffff722, 0x6, 0xe1, 0xffffffff, 0x6, 0x2, 0x4, 0xfffff000, 0xfffffc00, 0xbe0, 0x3, 0x1000, 0xfffffffd, 0x4, 0x0, 0x941d, 0x3ff, 0x1ff, 0x1, 0x5, 0x1, 0x8, 0xfffffffe, 0x1, 0x8001, 0x3, 0x7fff], [0x7, 0x9, 0xe3, 0x8, 0x8001, 0x7c33, 0x81, 0x8a9, 0x3, 0x8001, 0x8, 0x3, 0x400, 0x4e, 0x8, 0x7, 0x2, 0x101, 0x10001, 0x200, 0x5, 0x3, 0x40000000, 0x7fffffff, 0xce3, 0x7, 0x3, 0x20, 0x5, 0x0, 0x400000, 0x1ff, 0x0, 0x1, 0x878f, 0x1, 0xffffffc6, 0x80000001, 0x4, 0x8, 0x7, 0x7f, 0x5, 0x800, 0x6, 0x3ff, 0x75bb, 0x7, 0x3, 0x14, 0x1, 0x6, 0x8, 0xfff, 0x8, 0x9, 0x8001, 0x5, 0x3, 0x2, 0x100, 0x200, 0x1000, 0x6], 0x3a, ['\x00', 'selinuxcgroupvboxnet0\x00', ']-em1,vmnet0\\{\x00', 'mountinfo\x00', 'mountinfo\x00']}, ["", "", "", "", "", ""]}, 0x45c}}, 0x6b752c3d357ef75e) fcntl$setstatus(r0, 0x4, 0x2000) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') r4 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, 0x0) write(r4, &(0x7f0000000600)="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", 0x200) sendfile(r4, r5, 0x0, 0x7fffffff) r6 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r6, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r6, r4, 0x0, 0xffffff38) ioctl$TIOCGICOUNT(r4, 0x545d, 0x0) sendfile(r2, r3, 0x0, 0x800000080004103) ioctl$GIO_FONTX(r6, 0x4b6b, &(0x7f00000001c0)={0x13e, 0x1, &(0x7f0000000c80)}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) 03:05:12 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, 0x0) write(r1, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r3, r1, 0x0, 0xffffff38) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x18, 0x1407, 0x4, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x20000001) fcntl$setstatus(r0, 0x4, 0x2000) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004103) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x400, 0x0) ftruncate(r6, 0x1ff) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f00000000c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) 03:05:12 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000000)={'ah\x00'}, &(0x7f00000000c0)=0x1e) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) write(0xffffffffffffffff, &(0x7f0000000600)="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", 0x200) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r2, 0xffffffffffffffff, 0x0, 0xffffff38) recvmmsg(0xffffffffffffffff, &(0x7f0000006b00)=[{{&(0x7f0000000180)=@isdn, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/186, 0xba}], 0x1}}, {{&(0x7f0000000300)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000002940)=[{&(0x7f0000000380)=""/31, 0x1f}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/198, 0xc6}, {&(0x7f00000004c0)=""/204, 0xcc}, {&(0x7f0000002800)=""/153, 0x99}, {&(0x7f00000028c0)=""/102, 0x66}], 0x7}, 0x20}, {{&(0x7f00000029c0)=@x25, 0x80, &(0x7f0000002b00)=[{&(0x7f00000005c0)=""/22, 0x16}, {&(0x7f0000002a40)=""/173, 0xad}], 0x2}, 0x80000001}, {{&(0x7f0000002b40)=@nfc_llcp, 0x80, &(0x7f0000003d80)=[{&(0x7f0000002bc0)=""/187, 0xbb}, {&(0x7f0000002c80)=""/224, 0xe0}, {&(0x7f0000002d80)=""/4096, 0x1000}], 0x3, &(0x7f0000003dc0)=""/10, 0xa}, 0x1}, {{&(0x7f0000003e00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000004140)=[{&(0x7f0000003e80)=""/13, 0xd}, {&(0x7f0000003ec0)=""/97, 0x61}, {&(0x7f0000003f40)=""/161, 0xa1}, {&(0x7f0000004000)}, {&(0x7f0000004040)=""/65, 0x41}, {&(0x7f00000040c0)=""/20, 0x14}, {&(0x7f0000004100)=""/52, 0x34}], 0x7, &(0x7f00000041c0)=""/255, 0xff}, 0x20}, {{&(0x7f00000042c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000005480)=[{&(0x7f0000004340)=""/4096, 0x1000}, {&(0x7f0000005340)=""/85, 0x55}, {&(0x7f00000053c0)=""/29, 0x1d}, {&(0x7f0000005400)=""/113, 0x71}], 0x4, &(0x7f00000054c0)=""/193, 0xc1}, 0x7f}, {{&(0x7f00000055c0)=@nl=@unspec, 0x80, &(0x7f0000006a00)=[{&(0x7f0000005640)=""/161, 0xa1}, {&(0x7f0000005700)=""/143, 0x8f}, {&(0x7f00000057c0)=""/4096, 0x1000}, {&(0x7f00000067c0)=""/142, 0x8e}, {&(0x7f0000006880)=""/92, 0x5c}, {&(0x7f0000006900)=""/63, 0x3f}, {&(0x7f0000006940)=""/40, 0x28}, {&(0x7f0000006980)=""/110, 0x6e}], 0x8, &(0x7f0000006a80)=""/80, 0x50}, 0x9}], 0x7, 0x0, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={r5, 0x6, 0x0, 0xb5}, 0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000140)={r5, @in6={{0xa, 0x0, 0x1ff, @loopback}}, 0x2, 0x2}, &(0x7f0000000240)=0x90) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000006cc0)=@sack_info={r5, 0x1f10, 0x6}, 0xc) r6 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r6, r0, 0x0, 0xffffff38) [ 2110.369008][ T27] kauditd_printk_skb: 18 callbacks suppressed [ 2110.369026][ T27] audit: type=1800 audit(1586660712.198:4864): pid=21804 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=16964 res=0 [ 2110.436221][ T27] audit: type=1804 audit(1586660712.238:4865): pid=21809 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir057656323/syzkaller.yzn8jn/472/file0" dev="sda1" ino=16964 res=1 03:05:12 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000140)) sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0x400}, @mss={0x2, 0x18}, @timestamp, @timestamp, @timestamp, @window={0x3, 0x1, 0x5bad}, @timestamp, @mss, @mss={0x2, 0x1}, @mss], 0xa) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) [ 2110.510308][ T27] audit: type=1800 audit(1586660712.238:4866): pid=21805 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16965 res=0 [ 2110.591529][ T27] audit: type=1804 audit(1586660712.238:4867): pid=21805 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir932491758/syzkaller.D6Mno2/545/file0" dev="sda1" ino=16965 res=1 03:05:12 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x7f, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8f24}}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x2000) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x40100, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x68, r6, 0x8b8e0eb13081c495, 0x0, 0x0, {{}, {0x0, 0x4109}, {0x4c, 0x18, {0x114, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r6, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {}, {0x20, 0x17, {0x14, 0xffffffe1, @l2={'eth', 0x3a, 'veth0_to_bridge\x00'}}}}, ["", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008040}, 0x40080) [ 2110.591549][ T27] audit: type=1804 audit(1586660712.258:4868): pid=21810 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir888993330/syzkaller.9XPLg2/620/file0" dev="sda1" ino=16966 res=1 [ 2110.591570][ T27] audit: type=1804 audit(1586660712.268:4869): pid=21803 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir888993330/syzkaller.9XPLg2/620/file0" dev="sda1" ino=16966 res=1 [ 2110.591654][ T27] audit: type=1804 audit(1586660712.298:4870): pid=21809 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir057656323/syzkaller.yzn8jn/472/file0" dev="sda1" ino=16964 res=1 03:05:12 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r3 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, 0x0) write(r3, &(0x7f0000000600)="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", 0x200) sendfile(r3, r4, 0x0, 0x7fffffff) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r5, r3, 0x0, 0xffffff38) ioctl$SG_GET_RESERVED_SIZE(r5, 0x2272, &(0x7f0000000000)) [ 2110.592337][ T27] audit: type=1804 audit(1586660712.298:4871): pid=21813 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir932491758/syzkaller.D6Mno2/545/file0" dev="sda1" ino=16965 res=1 [ 2110.592358][ T27] audit: type=1804 audit(1586660712.308:4872): pid=21813 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir932491758/syzkaller.D6Mno2/545/file0" dev="sda1" ino=16965 res=1 [ 2110.592392][ T27] audit: type=1804 audit(1586660712.378:4873): pid=21815 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir057656323/syzkaller.yzn8jn/472/file0" dev="sda1" ino=16964 res=1 03:05:12 executing program 3: r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)=@xdp={0x2c, 0x4, 0x0, 0x1c}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000800)="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", 0x1000}, {&(0x7f0000000300)="ad243411309ff04e5968cab123208093c9b49ba627b2d96dbdba26b2fb77a6fcc3447a8bc40c27fc54d305ef23e0abc5596dcc929c799e59c848f43fb56774ea557b43d137a4243962024b1094d9ba3874ccf2fd36f1939da3ef8c93113355c9994b642c5c2a799aed8e2566b41d8a58a4985017906ad88f21e596cc56055260d27e80f9c762e6d06af8ab098f80c049a98da183002e17ee794088f86d1f3fae01e960ae410ef61c15b758afc919", 0xae}], 0x2, &(0x7f0000001800)=[{0x40, 0x29, 0x8, "deca33f42c102388ea236962abc3e27003b4cb3ec507d986f922f084348f71b909caa1001c4b6ec03a"}, {0x80, 0x114, 0x1f, "ecd2df910fc9e541c57da7a173882b1469bca573f7a4b1c9a91b1650b7cdc78f0910f29f113c4abbc1c0d31318280fc0df195fb35464ac13586543b3fe73e26fc4929c25069546451f1a5af6bf5c9fe28c6c334063af42add83a771117e36d68309bb5e4ba9e8cf6c22e340b615cde59"}, {0xe0, 0x0, 0xffffffff, "97e870b2bc11aaeb5b3b165e5fe319d1cba50c13dd49f1d8e8bd0ab702d02452c326a35bf9a151cce0d751e9664db418bcfbfc82ba7c45e3fecc31e66806b23efcddfc5495ce2f04c1794a47b7d0fe9ad18154c676d24b9ff8957688a04ffcf4abab17b034643437163a9d865955b34cf5aa6b44e5bd6dbd66d41f09185a3bf13f4efbe51d0cae5d85a65cc788f61750443b1535cf5e4ccab30830406ae9ec1369854525dbfed9210bf1cd72b851af2892a2da97b433a0e2dfe0b2d167678b06244c86cdfba0da0b95604b5030"}, {0x1010, 0x100, 0x9, "9e65a593f9a4e7fa70fdd350bf8392303727dfa3966fa1ebc14ba2921a8c65ace683aaede65f8ddf582be1f0a80e4c45fbb9ab232187b3af80443ee533f7379c6ff882386a3264d33cb1766a6580a9db8e518716d2fff710d9ba3811f8d73d7288700510b4ecb25d49f27733704eac797bd5916ad4d5f59ac47251a7969ffafa8c2e3a1438d6dc37b3b85bd9f95ec6e9dc09d025986d361c52f9fe0ce92fb45efc99fc0b087f045e42cdb5f314d287416eeb7ec39849a153a8117ffdfcce7ebbf06b7cc3727ee1a6e06a26aa2a6f0dad84fd7eec3ad994c7b7465eb1554864e8fd8b6e9d9154285563f3d167e2703b2dc3d364154242207056a82469d23bbcdbac446248cc44c0bd6587c240dcbdfb7eb5674ae658764c896ef829e8b97c280527dbd8a94cb286f2a28e12319b2b7f05bd22ce66afa632a1f8813ba2cfc16e009a5f65bf7b87ca66aef427adaac5935ca2043fc857858c5b93995159f7d2b4ea3f3d9434ef0d770827bc28a041938c212c27fdfbd3e321bdbea6d1d0e41021b34b31385ef7d15ac231ade30464a749e556c74599741cefae0258c56eb742509fd299148728689289df799c59068b80803ed3ebe67155331c1b3dc937ad91186a3f3b1c652b9efce04f860dd392cbfd837c6ab6c37a437d7c7762bfed21fdbbaca51a73068c8ad58873635e0fe6b97c9bfe3729f4f6e608754a0d5e164da0ddf89497f26d2d9c7d12b0a4a30987dfea196152a12ad1c35c1101a09cf7103a09c632bd988a5141635ff2f33d4ec4b7554a1119a94b619d61ae854569aae6cfcb62e49dd59fce163239c54508089e709b7996fbaab6ef0f860ad97ee412c9976c32c24897386c3f80fd5967e911dc8902ec111fe02ba491f83854ca4f432da74073a5d714e35b60c279e9a09679df31561c6df6555ae5aa81db07709216fb9b44b9ded8ffb0cbd9ef2c6079c22aef601edef15ab0e7871f796c44188a953143fd08f144e3a0d224b27c0f927139865a0a943fd1a5f13b2139c053a12ea4728dc689b2b77fef99577a3034d23bb84be8e797b6753f0b74c3a62882716f483e9a177834fb423174fa444a42ff0173e8d4e14ce3125b8bb7cff026232fa2a0d7069adb84dd1513a8b3693d7b284ac7671de78ec3b0aad263e5081ba651a59397289f53d57fb63a9f89f2c4a156ad4b1a21fc8e3548b317e1ef8788e1eaaeda445a4c47bef84477fbb0cceb929bbfc1d0c51521990c2fefafb9c8eff6824fa28d058f29c8eac92ddd2a839bc767fcea6eadacfd95743ec48a8d01bbfb2443653a4d32f07cd3b6d1e1af102fcf2f1d3cdc8ff8e7bd1da15736583482c5b1d2b9fca34b5e1b868f9ff4fe27a0286cb8cc28bd652a30ef3fb683f4e27123e0635649a80e56c678309dc395e46b6d36a5924cbc731d51f750f30b89057c89f941f3fb9c88ba31cafc6774074c86a21fcb75d3bf1b564c20e2b487a7175f880b37ae04003f218700788729b3af3fad3102346cd58916463ba19057262fe19f3b156cc423ca8ca836b7365d396d7b7f05608b4d14c39e8aff74ac20a7ff3dd2006cfaecf819912628b6e1b45f01382d85f436b92e74ad9a5f22163a57c2ce8b2f93cffbd98b47df329680301218bbe333d01459e34fa04371352aca3ed809e03011e2b9390f909b6a130cdabcc7c700032de1d6d5c6c8eb268aa5e067bae9aeb442e7d349c1ba2f55560d97b6558de9aec2af43ff905c7efcb23331ec377b6b77afe67369310b0244d29b17466ecb12b95942879fc47b4c1bd315474471ebdbff4da12d907551f551a81bccfab565f64c2431531a7a7914e1b28486ed73919e2db4fcb9d0c80d9a30c1b5d93a2427f2f945bd090f947ff32df2b3a8637402e0dbd575c2335f3ccec52a3be7d15764b4dbf36154acbb8001e7412cf90362f0edee4d9f26658df89acd31e8a765f2413dd37355cfce44fda382b36eb0a4852467cf26cc3c530af98bb073cbcaa4943df7d5f6fbede3674ef88905fa65392ebf0d89c7673cf9362520f9acd5b4bd037a608d7c2b04b6c845d94e82f5fb6144a8b1afdd713c221d84c0309d8556ad524c856e7512ace96b5bc65e4505c660a64b0f395050b4d229584747298f5db488fee267621d941f67c67f40085c29180169f0551f938fb990414f02edb4c45773411af93c2a312678336f97a8de73017d7b17c80621d59f789600a381a683ae8e9cfd57faddba1efbf8fcdae744a9bbab470755508f6617655bf723cab5498ccee139866d21313551b0331eb835c4ed4ee05ef6ceeffddc66ec4bfe4fb534468a050fb864205e42bbd9197c81b890bfc47b4d748278560ff0ccfd1c09dd2160e432556a0493a1c56a50342c40caf1f98534780c41bb1eb7701084b0c06234d3b5adc46d15147bff98c12494a6cd7db3fad67acd8869231d47ef6d90303754fd99722ea6e597a0b0cfb7e3e346d8dd187cde7b183d71ec37304a8e5ddf7518df1c897fe04daa3403736cca7d71f4ce36be682ff44a1b57a3b00231924de319f0e0026c1d37f56956817c67d9a8cd1c7f4122f55de00f73f2e0a888c5a44095c98e662ada77492065fcf792b2d6b293bb2af914ad3e6e46eb29fd3dcf75fe8b1787be006197d72e2a93b276ca3911f9ba78a9e186279bb2a7864701dc3a85307a53442d8227220978567acefd83d6a3a7d72832c3b51df1264f5609da315bf2b5e6b67592328b87ea8ee3faefcfb1409563c50d2be0c6c7010139155e67289b485e390f6c6d9667d93772f8c6ddba6596c3a29c120d3b7909f8328e557d4e326ff537aaee225837681aeb7120fee0dcda210141557221ebaaa95b6857ae107c725673b471132b55548629d4935744af469f2912464889a46b299365765226b1d2b11ef6ac1f4ed220e98a51b48849445e9992b14a8f741786da42ac055fff7a6fcbc6906b6f8df9de4ea606cdca6ba03c149ea07a2a2c1c49be433ebc4234671bb90d6176cbd28dadb2a93e462c9e178d8077141ff52791bf6ce2b5637ffe696dfb93a31db159c12bdaf5deaabbae86adf56a0d33a3fcc1820e571e50a306853143d57f2ca06f3ced1e4c31f01fda169efcee0cc52198a2ed458607c4a4183e0f779c4c7b4d11fb18b13557ce942b16e929bc2fdd5c6b72cdc58371477b1100ef9bd25b00326b7e35e211ae100d0d0df7eb42ac2c677867273518077afe2040c00c776c46e814e755fbde87a9219f0a02a6cf7ff52d31e2c5640ada94f58b1764f46397275bc4893c2d4d280c43cfdaaca92bec7e16436c1910561a81ecdc46ded0c73896e13025e73ebe25f3dd3d18f64d46dfcedc5bc52929dc04e543e24bbcc5947fed255f308fb588c0b0b0116b2683e901ab9223753eb0e43b8c29458ff78fed954b155e7d133bd3bc5e319b7dab90f1f0842d244ca1d363ba82ea507715142044857cc462bd79a109f40337c1af2a5782bd9ae75b66ea5c1ca7efaaf29d5cfd4fa39d50c3369fbc5040d69ed3b6b859237416ffb9825fb3129253c4a6692e563f57ff65e3c9489480f41e1eb8d818ce96101e2492cd8cecebe06b00c3f4ad60d5dfb8ef63f60b2f08d62c3eb5a3861aa24c0caf16e88f103ceed1bde8693cb53ced8c940b1a385cd0b74e5b22da079076a463d5cd816ebca2a55a763fcfe4531a0ed64dac860481771862c8b768e0121cabb7cddace42a615d4045ab06e6901b8f3f931b04b53fd705b2af329eae5d8dbc777c9cb59231bff13d662e41c447a9621fa64435ec80298c4d56ea42889403725c02ce45856e8d91b5dab0b4872205c5f1126039a48da3185ee8b8c8cb3b49b6fb1990e2001b85d4c296a527bbd8cce4e9028940d0f29a2484606377215711d44cb2f0f2f185420d03e400ccf495c76d4cdd82b93773d5ecd41d9729cd43b8ae354c1e8f22066e424fba350fcad98fa367f5b12b11abddc0abb829ec0e2ba25f7775bdca97c12f4adef6a4d2d40d296f05e08c8c81ee7ded11ae8a712256b939858ff62d09da9a44cc84f4bbdad6291a910e10baf921dcdb0b3686d2a12908081873e74e19f0bfc7539a389c3e04c5805c09e22d5adc94f37730e5c563ee9f7e524dcf714562d9265e741571d4e7d00368c0006f8a74b2743e3b00e8d4831f8ac64667d54b5e38484a01c4c75f0c1d71955e51422167cdbb65975a2588f51ef39bbd7502c774dc074673948522133a2c0cfe129c3a9c2680d5e9490d665bf376071056745f14bb5cb8ed5fdc75fabbc33a348424b03d4b3516cbbeb9cc039e0a4f8197afef632c0491eb8ee86bc19c007a7b67f62932a5be75bbd537a533056951edac1fc0d3664cbb4ad20fbbe325dc3473b917c66cd52ca4bc22106866346adf0178a277b30793295c152d56964c393fe3cc8aa651d9ec26b8127638b4372b0cda2af979c7efe38b1765c1b8be8703871eb348010a7e229b4ef470fde839965b5d687b2e6eab821f45c77980c7ad6837a30f62f7126e4e1c0091c5fadc421630c598274b44af082b92280f3e16240cffa11ed81d52dfce64d58842c870d6c8ee630b456c82c50df1109e40c5a4844e86a6b22a42ae7a9ea6891242d2afcfb1a8a9a3b4cdfa9d53e7042b0d550fce031c5b56430478a0f8a3932fe860797d07d5f87a09933dcf010fd77045dbc1d99f1cbfbb3c3d828b7aed4aa45a23b578972a0b5d7801af0768452ae391006227fe6beb3e8d126af7faad2ec20356cdb7729f2576aa9d1869d910a57926b62fd3713851bab0164dafeba0b085d2611f3471754e62ee91149429966bb7dd5fb867af10bdf54ca547889b9bb4f363fd5b1dfe7944d95b1920454d194021c87e27473f86d7d9ea699c5bbd3099c6f9d04a0122f83dd0194d91573ad310bc7c9c13f6d31451709159282faa4ea264d928461e4c70d6ff28c8dd2a23589d61b6579e0132d2d090561201763c4ee6d5f22f6512e69c5628078d1bd4d902cc0ae72ab2b33871b9093e29707ecb8ee7fd0f80649a8459742091a13cb0fb0a786a8ef48dfb0266274aab7150e934986a0cf93aeab5655c81c282b10989d1fe81cfd66d5de185954c979814282fed519e3859ed03e82f0ec25f8d91cdb7b0d80cfb37fe1290f1a7235a26e7e84d8094cf6f452a542a2302c0019a23425231c73fa8f1940d2faefced349c1136c309d57ba36d106521c98cccddc6100b9443e67db4bf4723374272225c9fb7ee5cf9f94b509a2ea2821630ff7a41ad712f751945b72d802c833116c4c8866b277d8de2f596f530d33ef3bd4f4aea59490bbab1a4741d97af49a55b342ef03336ffc5724d0e6fae81246c803b4bbec4bd939582066066c9dccd5a899bb92f29fb69e0e9a481f5c37cc8e3fe19d05482c8889a6db6f72b15b4618a25685c4df470fb25d082cb230fcb56d975617ca72e365eea4526bac29dbf394c1c1ebc05213b98205b00c4a2863d0f8a2f48f15582a17c16e17c9b8d69ab07047a651553f642c66b4407e56bb16b2a66fa212ced54b6e94d5815053b0703e346d2ce0c3f1caecd3f8c7b99ccb71ca449aa5a55464b28af1834c90cb3df38538da4bb49f02118064162a8711b8d0e95c667e8dcf9a821c76daf726216ba0223ba77ebbf909f4d5cd0359f28283cb4adf88f89a3599aff4113f9aac2e6bda8725fb1b28be031e1d4a76fb5186168a5adc2ea348f38108874190594058c86f5b0ab345a15a54b107ac42f490030b0caffc58869a506c081264d0196212e09ba4fed356eab397ca272c74cc2901f612400e2611491151b2ea"}, {0xb0, 0x6, 0x9, "a05c78eb8a4729dc12b28da27b095d592342649210604aafc55f7ff553965813338772ad6016d0b0eee7c2bf1f43f5088aaf6b690b74dd0d3be86d9e9ac7d809e34cc9e3e4deb81b7651e4025cc694fd8a540bd38a670bbb15c42072a9892398641e2696e6b1600b66d12e9b7b767524ff448ebcde8c8de4e6de06f2e1df04ce9b21fc4d1e5a26c2d0eb79c6ae425368a7975d2e2e18f141fde80b"}, {0xa8, 0x109, 0x8f, "68f9d07e34bdf620f1c8f78abfbc635bb1514746f94afe81ff546c447166d827d54662e343f091bf1aabeabc3167a858419e676806d340c069a40e0002e4e1f1932989b620148ae0d2c80490472885d347bb0e027cebac96c168014c44c1ae42690d1a1f793e57d8e54f5c48c4c5c39f4a42181f2a6f50b2f715b6340448af6ee5f8e4bbb6c2e2d539b138d09f35e9bcab"}, {0x60, 0x84, 0x2, "8fb378bdd1e539ee186a53085e2f20aebfad49d2830a86237bbff6f18755e94aa71f8d0d6cbcc860ed8343a22b1728797750aea82077d41fa7c94becbd1c755583f2e84541ce623c9a1da4884ea6"}, {0xc0, 0x1, 0x6630, "7f486b89281a0211b9fa9ab37d8d9a60df53b0a50fd4f863def8c40d71baf5d16ba668fa9c3f217a853862ff16e2a665ff8c2306c68eddb21ffc67ce84652c383dd5a4f3b00735abb13320ea3451b2c8b803daa7b0f6f5208b3f58f491a83986fbfb8707af6472fbce9842258cd7c7db390a5b8255cc023e9baa65e28ed5490a1e87aab1f9cb710694da46232bda6ca9389165223c16ac7f88470bc5565ac0b52c2464d09bc6625d89d42157ab5e145e"}], 0x1428}, 0x4001) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r2, r0, 0x0, 0xffffff38) r3 = perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0x0) fcntl$setstatus(r3, 0x4, 0x2000) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004103) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f00000000c0)) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x10042, 0x0) ioctl$BLKTRACESTART(r6, 0x1274, 0x0) write$FUSE_INIT(r6, &(0x7f0000000100)={0x50, 0x0, 0x5, {0x7, 0x1f, 0x9, 0x4, 0x7, 0x4, 0x10000, 0x7a1}}, 0x50) ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, &(0x7f0000000180)) syz_open_dev$tty1(0xc, 0x4, 0x1) 03:05:12 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) lsetxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.evm\x00', &(0x7f00000000c0)=@md5={0x1, "2acb2ca05c49fda94404e308a272e92d"}, 0x11, 0x1) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 03:05:12 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) write(0xffffffffffffffff, &(0x7f0000000600)="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", 0x200) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r2, 0xffffffffffffffff, 0x0, 0xffffff38) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x26, 0x803, 0x5) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x34, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000001c00250b00000000000000000a0000008a6a2bf03c98c11ca03f1e0e01d220cb25fdda8bc1b5877fbe58cf5ebfdc5fa38e4df987f9f6ef2ff39e0ff63c2f75d1d5ce28d07196eaa5da853ff4c6cc9f409cc385c2e65adfa50e22367faefc8458d4316631e594c3d5b0", @ANYRES32=r6, @ANYBLOB="000000001400010000000000000000000000000000000001"], 0x30}}, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000000)={@remote, @local, r6}, 0xc) sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) [ 2111.178781][T21839] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2111.228546][T21839] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2111.238619][T21844] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2118.670478][ T27] kauditd_printk_skb: 17 callbacks suppressed [ 2118.670498][ T27] audit: type=1800 audit(1586660720.508:4891): pid=21854 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16537 res=0 [ 2118.697197][ T27] audit: type=1804 audit(1586660720.508:4892): pid=21854 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir061524304/syzkaller.Juw9ej/253/file0" dev="sda1" ino=16537 res=1 [ 2118.772749][ T27] audit: type=1804 audit(1586660720.608:4893): pid=21855 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir061524304/syzkaller.Juw9ej/253/file0" dev="sda1" ino=16537 res=1 03:05:20 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r3, r1, 0x0, 0xffffff38) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x18, 0x1407, 0x4, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x20000001) fcntl$setstatus(r0, 0x4, 0x2000) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004103) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x400, 0x0) ftruncate(r6, 0x1ff) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f00000000c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) 03:05:20 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r3 = syz_open_procfs(r2, &(0x7f0000000000)='net/connector\x00') sendfile(r1, r3, 0x0, 0x800000080004103) r4 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x60e, 0x2) openat$cgroup_subtree(r4, &(0x7f00000000c0)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) 03:05:20 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x2051}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setrlimit(0x0, &(0x7f0000000000)={0x4, 0x2}) r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) r2 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, 0x0) write(r2, &(0x7f0000000600)="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", 0x200) sendfile(r2, r3, 0x0, 0x7fffffff) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000180)=0x7, 0x1) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r4, r2, 0x0, 0xffffff38) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000000c0)='eth0((\x00', 0x0, r4) sendfile(r0, r1, 0x0, 0x7fffffff) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r5, r0, 0x0, 0xffffff38) socket$inet_udplite(0x2, 0x2, 0x88) 03:05:20 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000040)='net/stat\x00') sendfile(r0, r2, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 03:05:20 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x3e2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x8c, 0x1, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_SEQ_ADJ_REPLY={0x54, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xffffffff}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xcbe7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7ff}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5aaa}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xe401}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x10000}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xfff}]}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x40}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xa7}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x80}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc000090) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r3, r0, 0x0, 0xffffff38) 03:05:20 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r3, r1, 0x0, 0xffffff38) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000040)=0x5) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004103) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f00000000c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000000)=0x2) [ 2119.015067][ T27] audit: type=1800 audit(1586660720.838:4894): pid=21859 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16609 res=0 [ 2119.101858][ T27] audit: type=1804 audit(1586660720.848:4895): pid=21859 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir932491758/syzkaller.D6Mno2/546/file0" dev="sda1" ino=16609 res=1 03:05:21 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, 0x0) write(r2, &(0x7f0000000600)="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", 0x200) sendfile(r2, r3, 0x0, 0x7fffffff) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r4, r2, 0x0, 0xffffff38) setsockopt$inet_tcp_buf(r4, 0x6, 0x21, &(0x7f0000000280)="ac378ab98b6cf63c5d7b270aa5297588a11e0f4b677f91caa1a4a202ba1b9fda6c37a881398a45e7c56797483f04c614c9a5b9d7c4fb17bcbc385b524f80aa29e91e23313067fb3d39c8b59f42295656496f230f00b87d2287f02639e8c501db", 0x60) name_to_handle_at(r4, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0xe2, 0x10001, "d9174f1466c439ac4b445585a3b6e46bc6a1f30d3b59a090bc3a79fc96899d13bb189d60fc2d6130693df56849ee84b3fe54655cb865879a33e9801a4405b9b45f9878026a5f7cd50efd2ca5fe4f6791c1d81b84fb369b97fb8d5a11475dd14e3e08cdcfbeaed25078347c67abecb8a37a26c7e0907866a8f3d1a51eacfbbcce4f04aff7ecb70d40b2f6f2ad836f294184525b35f46646c9af4782dd4cfe021937af1d5a59ab7b4086f456b928a91efa6620949366f91efd4845dd830ec80d49e5d84b934a9f9add45735a13c530ff7770c3891e2f59ba597684"}, &(0x7f0000000040), 0x1000) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r5, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) 03:05:21 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffff38) ioctl$CAPI_NCCI_OPENCOUNT(0xffffffffffffffff, 0x80044326, &(0x7f0000000140)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) r2 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r3 = open$dir(&(0x7f0000000180)='./file0\x00', 0x0, 0x1) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, 0x0) write(r2, &(0x7f0000000600)="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", 0x200) sendfile(r2, r3, 0x0, 0x7fffffff) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r4, r2, 0x0, 0xffffff38) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)=0xfffffffd) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x101001, 0x0) ioctl$UI_SET_SNDBIT(r5, 0x4004556a, 0x7) syz_open_dev$tty1(0xc, 0x4, 0x1) [ 2119.182206][ T27] audit: type=1804 audit(1586660720.898:4896): pid=21865 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir932491758/syzkaller.D6Mno2/546/file0" dev="sda1" ino=16609 res=1 [ 2119.234985][ T27] audit: type=1800 audit(1586660720.918:4897): pid=21867 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=16818 res=0 03:05:21 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, 0x0) write(r2, &(0x7f0000000600)="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", 0x200) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000140)=0x1) sendfile(r2, r3, 0x0, 0x7fffffff) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r5, r2, 0x0, 0xffffff38) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000040)=0xec) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r6, 0x0, 0x800000080004103) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f00000000c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = pidfd_getfd(r1, r0, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r7, 0xc0305615, &(0x7f0000000000)={0x0, {0x5, 0x7}}) [ 2119.330938][ T27] audit: type=1804 audit(1586660720.928:4898): pid=21866 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir209219610/syzkaller.nCjs6O/721/file0" dev="sda1" ino=16674 res=1 [ 2119.387508][ T27] audit: type=1804 audit(1586660720.928:4899): pid=21867 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir057656323/syzkaller.yzn8jn/473/file0" dev="sda1" ino=16818 res=1 [ 2119.517408][ T27] audit: type=1804 audit(1586660720.928:4900): pid=21862 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir209219610/syzkaller.nCjs6O/721/file0" dev="sda1" ino=16674 res=1 03:05:21 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) 03:05:21 executing program 2: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') r2 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) ioctl$TIOCMSET(r1, 0x5418, &(0x7f00000000c0)=0x455) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, 0x0) write(r2, &(0x7f0000000600)="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", 0x200) sendfile(r2, r3, 0x0, 0x7fffffff) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r4, r2, 0x0, 0xffffff38) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)={0xc0, 0x4, 0x8, 0x201, 0x0, 0x0, {0xc, 0x0, 0x8}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_SENT2={0x8, 0x9, 0x1, 0x0, 0x801f}, @CTA_TIMEOUT_TCP_SYN_SENT2={0x8, 0x9, 0x1, 0x0, 0x7f}, @CTA_TIMEOUT_TCP_ESTABLISHED={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_TCP_ESTABLISHED={0x8, 0x3, 0x1, 0x0, 0x81}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x39}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_TCP_ESTABLISHED={0x8, 0x3, 0x1, 0x0, 0x800}]}, @CTA_TIMEOUT_NAME={0x8, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xce5}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x80000003}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}]}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @fccp}]}, 0xc0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040) sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) 03:05:21 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r1, r0, 0x0, 0xffffff38) [ 2127.394507][ T27] kauditd_printk_skb: 30 callbacks suppressed [ 2127.394534][ T27] audit: type=1800 audit(1586660729.228:4931): pid=21911 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16897 res=0 [ 2127.422249][ T27] audit: type=1804 audit(1586660729.238:4932): pid=21911 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir061524304/syzkaller.Juw9ej/254/file0" dev="sda1" ino=16897 res=1 [ 2127.497807][ T27] audit: type=1804 audit(1586660729.328:4933): pid=21912 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir061524304/syzkaller.Juw9ej/254/file0" dev="sda1" ino=16897 res=1 03:05:29 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') r3 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, 0x0) write(r3, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r3, r4, 0x0, 0x7fffffff) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r5, r3, 0x0, 0xffffff38) ioctl$CAPI_GET_SERIAL(r5, 0xc0044308, &(0x7f0000000000)=0x5) sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f00000000c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) 03:05:29 executing program 1: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000000200)={0x0, 0x4, 0x800}) socket$l2tp(0x2, 0x2, 0x73) open(&(0x7f0000000180)='./file0\x00', 0x3e1a00, 0x88) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x40ffffff38) perf_event_open(&(0x7f0000000100)={0x4, 0x70, 0x3e2, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x151, 0x7, 0x0, 0x0, 0xffffffffffffffff, 0x100}, 0x0, 0x0, r0, 0x0) r3 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x400040, 0x0) write(r3, &(0x7f0000000600)="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", 0x200) sendfile(r3, r4, 0x0, 0x7fffffff) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r5, r3, 0x0, 0xffffff38) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 03:05:29 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='cpuset\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x121002, 0x100) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, 0x0) write(r2, &(0x7f0000000280)="34fd98aa1d0e7adec937a5f331a70010000000000000751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe78cfa58bd8e35c6c720763afcf8e02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de82b8f2923a085773437403d77edaa83a302fcf3d3f6f328b1b5c809a72942160afbb6aab5cfe94b4d63f3eeae24ac1432b048547c425866db90ea0b96fd4cd28640afaf836a951b675528eee3eb6d6349bf0a5c5a939c12aebc547e3a8686d825914062b4d197ba34b14168f3be064e634800b67e3ea1ff16716bcff7e00e7fc6298125f4488", 0x4f) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000000), &(0x7f00000000c0)=0x4) sendfile(r2, r3, 0x0, 0x7fffffff) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffff38) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000540)={{{@in=@dev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f0000000640)=0xe8) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xfffffba9}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x10001}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40d4}, 0x10) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r5, r2, 0x0, 0xffffff38) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) 03:05:29 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r2, r0, 0x0, 0xffffff38) r3 = open(&(0x7f0000000100)='./file1\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, 0x0) write(r3, &(0x7f0000000600)="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", 0x200) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x34, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004c894}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@bridge_newneigh={0x30, 0x1c, 0xb25, 0x0, 0x0, {0xa, 0x0, 0x0, r5}, [@NDA_DST_IPV6={0x14, 0x1, @loopback}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)=@deltfilter={0xa0, 0x2d, 0x400, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0xfff3, 0x1}, {0xfff1, 0xffe0}, {0x6, 0xa}}, [@TCA_RATE={0x6, 0x5, {0x22, 0x6}}, @TCA_RATE={0x6, 0x5, {0x5, 0xff}}, @filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x24, 0x2, [@TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "d24a49697c2460517b01957a0449a30a"}, @TCA_FLOWER_KEY_ARP_THA_MASK={0xa, 0x42, [0x0, 0x0, 0x0, 0x0, 0xff]}]}}, @filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_CLASSID={0x8, 0x3, {0xb, 0xfff2}}]}}, @TCA_RATE={0x6, 0x5, {0x80, 0x11}}, @TCA_CHAIN={0x8, 0xb, 0x4}, @TCA_CHAIN={0x8, 0xb, 0x2}, @TCA_RATE={0x6, 0x5, {0x0, 0x5d}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x4040090) sendfile(r3, r4, 0x0, 0x7fffffff) r6 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r6, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r6, r3, 0x0, 0xffffff38) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x61, &(0x7f0000000180)={'filter\x00', 0x4}, 0x68) 03:05:29 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r3 = syz_open_procfs(r2, &(0x7f0000000080)='sched\x00') sendfile(r1, r3, 0x0, 0x800000080004103) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x6400, 0x0) connect$unix(r4, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f00000000c0)) r5 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, 0x0) write(r5, &(0x7f0000000600)="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", 0x200) sendfile(r5, r6, 0x0, 0x7fffffff) r7 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r7, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r7, r5, 0x0, 0xffffff38) ioctl$CAPI_GET_FLAGS(r5, 0x80044323, &(0x7f0000000180)) syz_open_dev$tty1(0xc, 0x4, 0x1) 03:05:29 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) r3 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, 0x0) write(r3, &(0x7f0000000600)="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", 0x200) sendfile(r3, r4, 0x0, 0x7fffffff) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r5, r3, 0x0, 0xffffff38) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000100)=0x0) sendmsg$AUDIT_SET(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x3e9, 0x300, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, 0x8000, 0x2, 0x80000000, 0x0, 0x2}, ["", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4080}, 0x20000004) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x99a, 0x0, 0x1}, {0x96e, 0x0, 0x5}]}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) [ 2127.775379][ T27] audit: type=1800 audit(1586660729.608:4934): pid=21921 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16992 res=0 [ 2127.831346][ T27] audit: type=1800 audit(1586660729.608:4935): pid=21922 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16993 res=0 03:05:29 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) [ 2127.868161][ T27] audit: type=1800 audit(1586660729.638:4936): pid=21920 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=16994 res=0 03:05:29 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x151}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r2, r0, 0x0, 0xffffff38) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, 0x0) r3 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, 0x0) ioctl$SNDCTL_DSP_GETBLKSIZE(r0, 0xc0045004, &(0x7f0000000000)) write(r3, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r3, r4, 0x0, 0x7fffffff) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000580)=[{{&(0x7f0000000280)=@l2tp6={0xa, 0x0, 0x6, @mcast1, 0xe33}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000300)="51eccf2aa3cb06a47c64875e2b94593e9ec0d6e77df0d528375cc2b2bc20c8e6485fc1a86b2150cf4e444ea5e916d31d11609fcfd6df47702b298ec5a448d657419ff7956b6d028fec71ec05929c9ef62b4bbf45495c277d4ec57a1451456e37bee1232ecf90925cbc494f709f9a9908dc5abffd3b857ece8cdd8c64758d01629a5274848fcdbaf5c06fa5efc148fb6a98a91f8359", 0x95}, {&(0x7f0000000800)="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", 0x1000}], 0x2, &(0x7f00000003c0)=[@txtime={{0x18, 0x1, 0x3d, 0xfffffffffffff767}}, @timestamping={{0x14, 0x1, 0x25, 0x80000001}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x100}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x81}}], 0xa8}}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000480)="18e2a91b10d0b90698dad0210cf6232ce9d5331ff372c338c56483746a0448a3fbee98e3e8f3fe8aa81c1dbc6b766cc438091fdcc09190764f2ddfc7e97e82ef18a1bb2d35d8a88724f27e7724046ef86220a7eb3c0a9c48ce5d474547b9", 0x5e}, {&(0x7f0000000500)="01fb18759bce8f0e04016ef1606fe160474cd5e6382fd80538b7a9c979b1a7501bfe193193e9a98bec108039212b077bfddd6edff6b6fb3854", 0x39}], 0x2, &(0x7f0000001800)=[@txtime={{0x18, 0x1, 0x3d, 0x292}}, @txtime={{0x18, 0x1, 0x3d, 0x20}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @txtime={{0x18}}, @txtime={{0x18, 0x1, 0x3d, 0xffffffff}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @mark={{0x14}}, @mark={{0x14, 0x1, 0x24, 0xffffff81}}], 0xf0}}], 0x2, 0x4000) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r5, r3, 0x0, 0xffffff38) ioctl$sock_proto_private(r3, 0x89e9, &(0x7f0000000180)="afdc7a587e1a1c5f54d6ca964045a167cda268a0c2fffe2cead45ece6a1337b02bbd861e419d138aa083b6618e99cdf8347129dbae974a3e9e623f978ab16ca760b8a1880c263c059a03652440ef4ad830e3bcdbbcae16a8b5dc07abe23568de1ae477bcf0a47ea0e1c94071b1cb51089be113c22f6ffd16f85c52123c72904dc70d2ab99d624a313c901913f20f37a0bbc47df674f92547116cb270d5bd3c8c02d030981ac414f65ede715ca5b4b132373de9") socket$inet_udplite(0x2, 0x2, 0x88) [ 2127.955881][ T27] audit: type=1804 audit(1586660729.638:4937): pid=21922 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir209219610/syzkaller.nCjs6O/723/file0" dev="sda1" ino=16993 res=1 03:05:29 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r3, r1, 0x0, 0xffffff38) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={r5, 0x6, 0x0, 0xb5}, 0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000140)={r5, @in6={{0xa, 0x0, 0x1ff, @loopback}}, 0x2, 0x2}, &(0x7f0000000240)=0x90) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f00000000c0)={r5, @in={{0x2, 0x4e20, @rand_addr=0x1}}, [0x1, 0x200, 0x6, 0x7, 0x2, 0x5, 0x4, 0xffff, 0x1, 0xaec, 0x1, 0x8, 0x8, 0x7fff, 0x5]}, &(0x7f0000000000)=0x100) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r6, r7, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) [ 2128.091160][ T27] audit: type=1804 audit(1586660729.638:4938): pid=21921 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir932491758/syzkaller.D6Mno2/548/file0" dev="sda1" ino=16992 res=1 03:05:30 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x200080, 0x0) [ 2128.142053][ T27] audit: type=1804 audit(1586660729.638:4939): pid=21923 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir057656323/syzkaller.yzn8jn/474/file0" dev="sda1" ino=16991 res=1 [ 2128.178930][ T27] audit: type=1804 audit(1586660729.648:4940): pid=21923 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir057656323/syzkaller.yzn8jn/474/file0" dev="sda1" ino=16991 res=1 03:05:30 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') ioctl$KDENABIO(r0, 0x4b36) sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 03:05:30 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r3 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x4000, 0xa) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, 0x0) write(r3, &(0x7f0000000600)="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", 0x200) sendfile(r3, r4, 0x0, 0x7fffffff) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r5, r3, 0x0, 0xffffff38) ioctl$USBDEVFS_RESET(r2, 0x5514) [ 2136.055606][ T27] kauditd_printk_skb: 31 callbacks suppressed [ 2136.055625][ T27] audit: type=1800 audit(1586660737.888:4972): pid=21967 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16538 res=0 [ 2136.085748][ T27] audit: type=1804 audit(1586660737.918:4973): pid=21967 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir061524304/syzkaller.Juw9ej/255/file0" dev="sda1" ino=16538 res=1 [ 2136.170339][ T27] audit: type=1804 audit(1586660738.008:4974): pid=21968 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir061524304/syzkaller.Juw9ej/255/file0" dev="sda1" ino=16538 res=1 03:05:38 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') r3 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, 0x0) write(r3, &(0x7f0000000600)="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", 0x200) sendfile(r3, r4, 0x0, 0x7fffffff) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r5, r3, 0x0, 0xffffff38) sendto$l2tp6(r3, &(0x7f0000000100)="f11e30497ccaf1251a06852c6fd3003a3011a1382729d490fec9be01e51712e9f535e53dda6226560385715f99b3f160a9ad652b2356e1fff341b8af9ca0093adbbc512e86eebc10a4cb52f81158db10bfc63a7ea9ebb63df5aa3c2afb9306b6ac401ac9239032bb14d7b6177bc149b5c51184a87754c4f99e4cede4b045a82b098674097f8fd39c7604e1697b40dcf2d8fac2f5d7fb61cf7c3e05b83564c1c8e5937c34b0705a67fd23f06537bc4083529601490095a3ca323cda69e0bb5b281eddad969dc01853f937ff6ec02422c71fe6bba34ef920e1009a4beeef5224fa6291881d298c902241", 0xe9, 0x4004050, &(0x7f0000000000)={0xa, 0x0, 0x1000, @ipv4={[], [], @loopback}, 0x800, 0x3}, 0x20) sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f00000000c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) 03:05:38 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10000, 0x325}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f00000000c0)="f37d183c32f54262f10c316383a727daa8a6ce870b") r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) r3 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, 0x0) write(r3, &(0x7f0000000600)="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", 0x200) sendfile(r3, r4, 0x0, 0x7fffffff) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r5, r3, 0x0, 0xffffff38) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000040)={0xf000000, 0x99, 0x0, r5, 0x0, &(0x7f0000000000)={0x9c0904, 0x10000, [], @ptr=0xffff}}) ioctl$VT_RELDISP(r6, 0x5605) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) 03:05:38 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) r2 = dup(r0) epoll_pwait(r2, &(0x7f0000000000), 0x0, 0x4, &(0x7f0000000040)={[0x8]}, 0x8) syz_open_dev$tty1(0xc, 0x4, 0x1) 03:05:38 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) r3 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, 0x0) write(r3, &(0x7f0000000600)="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", 0x200) sendfile(r3, r4, 0x0, 0x7fffffff) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r5, r3, 0x0, 0xffffff38) ioctl$VHOST_SET_LOG_BASE(r5, 0x4008af04, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) 03:05:38 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') r3 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, 0x0) write(r3, &(0x7f0000000600)="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", 0x200) sendfile(r3, r4, 0x0, 0x7fffffff) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r5, r3, 0x0, 0xffffff38) ioctl$CAPI_GET_SERIAL(r5, 0xc0044308, &(0x7f0000000000)=0x5) sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f00000000c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) 03:05:38 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x151}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r2, r0, 0x0, 0xffffff38) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r3 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, 0x0) write(r3, &(0x7f0000000600)="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", 0x200) sendfile(r3, r4, 0x0, 0x7fffffff) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r5, r3, 0x0, 0xffffff38) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r3, 0x54a3) [ 2136.478727][ T27] audit: type=1800 audit(1586660738.308:4975): pid=21979 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=16753 res=0 [ 2136.500105][ T27] audit: type=1804 audit(1586660738.318:4976): pid=21979 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir057656323/syzkaller.yzn8jn/476/file0" dev="sda1" ino=16753 res=1 03:05:38 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x800442d2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, @random}]}) sendfile(r1, r2, 0x0, 0x800000080004103) 03:05:38 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) r3 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, 0x0) write(r3, &(0x7f0000000600)="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", 0x200) sendfile(r3, r4, 0x0, 0x7fffffff) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r5, r3, 0x0, 0xffffff38) ioctl$sock_netrom_SIOCADDRT(r5, 0x890b, &(0x7f0000000000)={0x0, @default, @netrom={'nr', 0x0}, 0x5, 'syz0\x00', @null, 0xfee, 0x1, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default]}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) [ 2136.542033][ T27] audit: type=1804 audit(1586660738.378:4977): pid=21981 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="file0" dev="sda1" ino=16769 res=1 [ 2136.553175][ T27] audit: type=1804 audit(1586660738.388:4978): pid=21984 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir057656323/syzkaller.yzn8jn/476/file0" dev="sda1" ino=16753 res=1 [ 2136.555607][ T27] audit: type=1800 audit(1586660738.388:4979): pid=21980 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16786 res=0 [ 2136.558612][ T27] audit: type=1804 audit(1586660738.388:4980): pid=21981 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="file0" dev="sda1" ino=16769 res=1 [ 2136.563091][ T27] audit: type=1800 audit(1586660738.398:4981): pid=21982 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16801 res=0 03:05:38 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) getsockopt(r1, 0x9, 0x4, &(0x7f00000000c0)=""/162, &(0x7f0000000000)=0xa2) syz_open_dev$tty1(0xc, 0x4, 0x1) 03:05:39 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f00000000c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, 0x0) write(r3, &(0x7f0000000600)="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", 0x200) sendfile(r3, r4, 0x0, 0x7fffffff) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r5, r3, 0x0, 0xffffff38) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r5, &(0x7f0000000000)={0x1}) 03:05:39 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000200)={0x0, 0x9}) sendfile(r3, 0xffffffffffffffff, 0x0, 0xffffff38) ioctl$TIOCGISO7816(r3, 0x80285442, &(0x7f0000000140)) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f00000000c0)={0x6, 0x1, 0x7fff, 0x1, 0x9, "5af13b01faa2e6d5bb5769184c526465fa89f7"}) write(r2, &(0x7f0000000600)="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", 0x200) sendfile(r2, r4, 0x0, 0x7fffffff) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f0000000200)={0x9, 0x5, 0x4}) sendfile(r5, r2, 0x0, 0xffffff38) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0xd8}, 0x1, 0x0, 0x0, 0x20000000}, 0x8d1) 03:05:39 executing program 4: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x2c0, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x151}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0xc5) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r2, r0, 0x0, 0xffffff38) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 03:05:39 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x151}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r2, r0, 0x0, 0xffffff38) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in6={{0xa, 0x0, 0x1ff, @loopback}}, 0x2, 0x2}, &(0x7f0000000240)=0x90) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000005c0)={0x0, 0x4}, &(0x7f0000002900)=0x8) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={r5, 0x6, 0x0, 0xb5}, 0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000140)={r5, @in6={{0xa, 0x0, 0x1ff, @loopback}}, 0x2, 0x2}, &(0x7f0000000240)=0x90) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={r7, 0x6, 0x0, 0xb5}, 0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000140)={r7, @in6={{0xa, 0x0, 0x1ff, @loopback}}, 0x2, 0x2}, &(0x7f0000000240)=0x90) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002a40)=[{&(0x7f0000000000)=@in6={0xa, 0x4e24, 0x6, @mcast1, 0xffff}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000180)="a4c19683e7ce17093d75ec5e589ef4f3e56b83182604744f5061848aaf03a8711314fb8d8bf812881fbd1a1b8c2a0ec92587fdbfb85697b27599fcc81d6d3cc694e3f3b4b3b16bcb18963596ca", 0x4d}], 0x1, 0x0, 0x0, 0x4080880}, {&(0x7f0000000200)=@in6={0xa, 0x4e24, 0x7fffffff, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x41}}, 0xffff}, 0x1c, &(0x7f0000000240), 0x0, &(0x7f0000000280)=[@init={0x18, 0x84, 0x0, {0x5, 0x0, 0x7, 0x2}}, @dstaddrv6={0x20, 0x84, 0x8, @local}, @sndrcv={0x30, 0x84, 0x1, {0x9, 0x6, 0x0, 0x20, 0x0, 0x4f35, 0x1, 0xf78d}}, @authinfo={0x18, 0x84, 0x6, {0x3}}], 0x80, 0x4004040}, {&(0x7f0000000300)=@in6={0xa, 0x4e22, 0x3, @mcast1, 0x3}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000800)="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", 0x1000}, {&(0x7f0000001800)="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", 0x1000}, {&(0x7f0000000340)="620aa09bd42a0852f10b3248e77b96a6a064e61f7282441b0d626148b676f1e203b661a63c3bb89d96767231e463db415b54c23903445fd45970755570d1fb4e5115191b1a3f8dac73aff77d5200c0a969ad557889118086b4179986abf433cf7a4003f15a8a96a1e54ca430d41afb77b964042150d955dbcc4f12b244038bcf0501ae8c7ab94cb89552475b21118ee661469be9efe381d4dc3f84cadad6e96abc86d1d9243cbbe38f0ee147f4d8e18d56693db66ad52fb4eab2c4310b1f69b281c486998618c15677de7df706d254e178822f3a2b", 0xd5}, {&(0x7f0000000440)="2607fd8b11a9dd304b81e0fe296dab5cf6b5242413fc8b7757c3e95f325c0845b61faa88c0f083d08489ef94e653", 0x2e}, {&(0x7f0000000480)="3ab7578c5833a1b1b3010b6935403fbe6c0e591c70fabadc22c366bd90a8f2397224f4314b6388a16bc0de49c221271b898c8cf791dd4224f6d4a420748eab19c32c8339d85e357f5ba1e98cfd713e8d5ba20a40921d45f74630ddf85818cd9bd4100d393007e04cf03f28f5a28bdcdef7bfcce90638e774823f809e11844f9496a5da8922bb38c6dead", 0x8a}, {&(0x7f0000002800)="191ea6854245e5f98d7d20cb1e2ed57244eed561399e8c0ed1092c3de80c3ec878cdb6ace39545a331f3c2376b15cd708b86b74a5d61c0aa5d833a3e3f907379359835a336d5b3584b03dc869a3c878fd5e120bd3a7db74fdc26c2ba2f218658d3b7aa8322430bf54c4243dd6ed95b24409012a337935edf6f259c8a368e700c08e7c96178845cae08949e4bceaf3077832585123122195ffa688223f01d0332e909e884ee24a87c183d7efaead60d5113bcd20e1dceb7bb1ef1b43524cd194d03df830073bc2bbaaec14020f6761394506249bfa38a85d739bdaade65a3603c742630fd1cc6842a130b96ad967c63", 0xef}], 0x6, &(0x7f0000002940)=[@sndrcv={0x30, 0x84, 0x1, {0xfff9, 0x7, 0x0, 0xffffe439, 0x101, 0x9, 0x7, 0xff, r3}}, @authinfo={0x18, 0x84, 0x6, {0x5}}, @dstaddrv6={0x20, 0x84, 0x8, @mcast2}, @prinfo={0x18, 0x84, 0x5, {0x0, 0xc6a7}}, @sndrcv={0x30, 0x84, 0x1, {0xba, 0xf9, 0x20c, 0x81, 0x8, 0x101, 0x4, 0xc17, r5}}, @sndinfo={0x20, 0x84, 0x2, {0x401, 0x400, 0x5, 0x0, r7}}], 0xd0, 0x44010}], 0x3, 0x20) [ 2138.274956][T22007] ================================================================== [ 2138.283255][T22007] BUG: KCSAN: data-race in ext4_set_iomap / writeback_single_inode [ 2138.291373][T22007] [ 2138.293691][T22007] write to 0xffff888128d31bf0 of 8 bytes by task 22025 on cpu 1: [ 2138.301399][T22007] writeback_single_inode+0x1fc/0x2f0 [ 2138.306766][T22007] sync_inode_metadata+0x75/0xa0 [ 2138.311781][T22007] ext4_sync_file+0x47a/0x8b0 [ 2138.316462][T22007] vfs_fsync_range+0x7c/0x150 [ 2138.321144][T22007] ext4_buffered_write_iter+0x211/0x280 [ 2138.326681][T22007] ext4_file_write_iter+0xf4/0xd30 [ 2138.331775][T22007] do_iter_readv_writev+0x4a7/0x5d0 [ 2138.336964][T22007] do_iter_write+0x137/0x3a0 [ 2138.341645][T22007] vfs_iter_write+0x56/0x80 [ 2138.346133][T22007] iter_file_splice_write+0x530/0x830 [ 2138.351500][T22007] direct_splice_actor+0x97/0xb0 [ 2138.356500][T22007] splice_direct_to_actor+0x22f/0x540 [ 2138.361869][T22007] do_splice_direct+0x152/0x1d0 [ 2138.366926][T22007] do_sendfile+0x396/0x810 [ 2138.371377][T22007] __x64_sys_sendfile64+0x121/0x140 [ 2138.376576][T22007] do_syscall_64+0xc7/0x390 [ 2138.381094][T22007] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2138.386984][T22007] [ 2138.389323][T22007] read to 0xffff888128d31bf0 of 8 bytes by task 22007 on cpu 0: [ 2138.396981][T22007] ext4_set_iomap+0x397/0x3c0 [ 2138.401664][T22007] ext4_iomap_begin+0x3dc/0x4a0 [ 2138.406530][T22007] iomap_apply+0xd4/0x660 [ 2138.410858][T22007] iomap_dio_rw+0x67e/0x9a0 [ 2138.415364][T22007] ext4_file_write_iter+0xb84/0xd30 [ 2138.420570][T22007] do_iter_readv_writev+0x4a7/0x5d0 [ 2138.425765][T22007] do_iter_write+0x137/0x3a0 [ 2138.430358][T22007] vfs_iter_write+0x56/0x80 [ 2138.434866][T22007] iter_file_splice_write+0x530/0x830 [ 2138.440233][T22007] direct_splice_actor+0x97/0xb0 [ 2138.445165][T22007] splice_direct_to_actor+0x22f/0x540 [ 2138.450545][T22007] do_splice_direct+0x152/0x1d0 [ 2138.455400][T22007] do_sendfile+0x396/0x810 [ 2138.459825][T22007] __x64_sys_sendfile64+0x121/0x140 [ 2138.465032][T22007] do_syscall_64+0xc7/0x390 [ 2138.469553][T22007] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2138.475438][T22007] [ 2138.477760][T22007] Reported by Kernel Concurrency Sanitizer on: [ 2138.483917][T22007] CPU: 0 PID: 22007 Comm: syz-executor.0 Not tainted 5.6.0-rc1-syzkaller #0 [ 2138.492592][T22007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2138.502994][T22007] ================================================================== [ 2138.511050][T22007] Kernel panic - not syncing: panic_on_warn set ... [ 2138.517632][T22007] CPU: 0 PID: 22007 Comm: syz-executor.0 Not tainted 5.6.0-rc1-syzkaller #0 [ 2138.526291][T22007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2138.536465][T22007] Call Trace: [ 2138.539755][T22007] dump_stack+0x11d/0x187 [ 2138.544077][T22007] panic+0x210/0x640 [ 2138.547964][T22007] ? vprintk_func+0x89/0x13a [ 2138.552544][T22007] kcsan_report.cold+0xc/0xf [ 2138.557146][T22007] kcsan_setup_watchpoint+0x3fb/0x440 [ 2138.562538][T22007] ext4_set_iomap+0x397/0x3c0 [ 2138.567217][T22007] ext4_iomap_begin+0x3dc/0x4a0 [ 2138.572056][T22007] ? iomap_dio_rw+0x67e/0x9a0 [ 2138.576733][T22007] iomap_apply+0xd4/0x660 [ 2138.581239][T22007] ? iomap_dio_bio_actor+0x970/0x970 [ 2138.586520][T22007] iomap_dio_rw+0x67e/0x9a0 [ 2138.591007][T22007] ? iomap_dio_bio_actor+0x970/0x970 [ 2138.596376][T22007] ? ext4_file_write_iter+0xb84/0xd30 [ 2138.601879][T22007] ext4_file_write_iter+0xb84/0xd30 [ 2138.607077][T22007] ? current_time+0x6d/0xc0 [ 2138.611580][T22007] do_iter_readv_writev+0x4a7/0x5d0 [ 2138.616772][T22007] do_iter_write+0x137/0x3a0 [ 2138.621374][T22007] ? __kmalloc+0x21c/0x640 [ 2138.625808][T22007] vfs_iter_write+0x56/0x80 [ 2138.630307][T22007] iter_file_splice_write+0x530/0x830 [ 2138.635856][T22007] ? page_cache_pipe_buf_release+0xf0/0xf0 [ 2138.641657][T22007] direct_splice_actor+0x97/0xb0 [ 2138.646586][T22007] splice_direct_to_actor+0x22f/0x540 [ 2138.651957][T22007] ? generic_pipe_buf_nosteal+0x20/0x20 [ 2138.657515][T22007] do_splice_direct+0x152/0x1d0 [ 2138.662431][T22007] do_sendfile+0x396/0x810 [ 2138.666860][T22007] __x64_sys_sendfile64+0x121/0x140 [ 2138.672062][T22007] do_syscall_64+0xc7/0x390 [ 2138.676564][T22007] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2138.682434][T22007] RIP: 0033:0x45c889 [ 2138.686315][T22007] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2138.705948][T22007] RSP: 002b:00007f151c1e1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2138.714366][T22007] RAX: ffffffffffffffda RBX: 00007f151c1e26d4 RCX: 000000000045c889 [ 2138.722333][T22007] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000006 [ 2138.730297][T22007] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2138.738272][T22007] R10: 000000007fffffff R11: 0000000000000246 R12: 00000000ffffffff [ 2138.746239][T22007] R13: 00000000000008d4 R14: 00000000004cb7c6 R15: 000000000076bf0c [ 2138.756007][T22007] Kernel Offset: disabled [ 2138.760332][T22007] Rebooting in 86400 seconds..