openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x101000, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000400)='sit\x00') io_uring_enter(r3, 0x0, 0x0, 0x7, 0x0, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x400002, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) 17:53:34 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e20, 0x7, @private2, 0x8}}}, &(0x7f0000000040)=0x84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000180), 0x0) 17:53:34 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x208200) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) getpid() read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) 17:53:34 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x208200) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) getpid() read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) 17:53:34 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x208200) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) getpid() read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) [ 303.266022][ T37] kauditd_printk_skb: 5 callbacks suppressed [ 303.266036][ T37] audit: type=1804 audit(1618682014.768:119): pid=14013 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/113/file0/bus" dev="ramfs" ino=41213 res=1 errno=0 [ 303.460559][ T37] audit: type=1804 audit(1618682014.818:120): pid=14015 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/103/file0/bus" dev="ramfs" ino=41215 res=1 errno=0 17:53:35 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e20, 0x7, @private2, 0x8}}}, &(0x7f0000000040)=0x84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000180), 0x0) 17:53:35 executing program 3: r0 = syz_io_uring_setup(0x9a, &(0x7f0000000140)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_enter(r0, 0x0, 0xc3d7, 0x7, 0x0, 0x0) io_uring_enter(r0, 0x4442, 0xc8ac, 0x2, &(0x7f0000000000), 0x8) [ 303.586656][ T37] audit: type=1804 audit(1618682014.858:121): pid=14015 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/103/file0/bus" dev="ramfs" ino=41215 res=1 errno=0 [ 303.687135][ T37] audit: type=1804 audit(1618682014.888:122): pid=14018 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir150283135/syzkaller.bC4w7w/105/file0/bus" dev="ramfs" ino=41219 res=1 errno=0 [ 303.838766][ T37] audit: type=1804 audit(1618682014.938:123): pid=14018 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir150283135/syzkaller.bC4w7w/105/file0/bus" dev="ramfs" ino=41219 res=1 errno=0 [ 303.900409][ T9438] usb 2-1: new high-speed USB device number 20 using dummy_hcd 17:53:35 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x20}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e20, 0x7, @private2, 0x8}}}, &(0x7f0000000040)=0x84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000180), 0x0) [ 304.217185][ T37] audit: type=1804 audit(1618682015.718:124): pid=14013 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/113/file0/bus" dev="ramfs" ino=41213 res=1 errno=0 [ 304.252637][T14048] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 304.290920][ T37] audit: type=1804 audit(1618682015.718:125): pid=14013 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/113/file0/bus" dev="ramfs" ino=41213 res=1 errno=0 17:53:35 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x20}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e20, 0x7, @private2, 0x8}}}, &(0x7f0000000040)=0x84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000180), 0x0) [ 304.340528][ T9438] usb 2-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=ce.99 [ 304.349606][ T9438] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 17:53:35 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x20}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e20, 0x7, @private2, 0x8}}}, &(0x7f0000000040)=0x84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000180), 0x0) [ 304.473147][ T9438] usb 2-1: config 0 descriptor?? [ 304.479823][ T37] audit: type=1804 audit(1618682015.778:126): pid=14018 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir150283135/syzkaller.bC4w7w/105/file0/bus" dev="ramfs" ino=41219 res=1 errno=0 [ 304.534449][ T9438] gspca_main: STV06xx-2.14.0 probing 046d:0840 17:53:36 executing program 3: r0 = syz_io_uring_setup(0x7, &(0x7f0000000140)={0x0, 0x59dc, 0x1, 0x0, 0x357}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) io_uring_enter(r0, 0x0, 0x0, 0x7, 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x10000, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x400) r4 = syz_open_dev$ptys(0xc, 0x3, 0x0) fcntl$dupfd(r0, 0x0, r4) [ 305.105959][T14057] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 305.116746][T14075] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 305.633213][T14031] udc-core: couldn't find an available UDC or it's busy [ 305.640221][T14031] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 305.901204][T14031] udc-core: couldn't find an available UDC or it's busy [ 305.908254][T14031] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 306.420178][ T9438] gspca_stv06xx: I2C: Read error writing address: -71 [ 306.428417][ T9438] usb 2-1: USB disconnect, device number 20 17:53:38 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x40, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, &(0x7f0000001040)={0x24, &(0x7f0000000ec0)={0x20, 0xf, 0xb0, {0xb0, 0x21, "c2e9f16f984c103ab1130963504f00ac1619191cad7c722b07a9acc127af82c8eac8d0d63581911e7cd1d9ac4d73d8fc91a038f18eb12efec9b0611f3f16af37a53362adadacac18bd16324b13ae804f760d80ffff8e0729a0a54bfdc73f2f6166f9adda8592c286a3dc5ac69c17269e59c78c7baa708c47f14358ad4183be5bc27b2175dd3f8bbaac6902b07815a4e5af35a4ac50ec4a82afed680562eadd3fe70755a5ac338bf0d5f4e4e7c7fd"}}, &(0x7f0000000f80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44f}}, &(0x7f0000000fc0)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0x9, "30adcab6"}, @local=@item_4={0x3, 0x2, 0x2, "eadd7df7"}]}}, &(0x7f0000001000)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x48, 0x1, {0x22, 0xe4f}}}}, &(0x7f00000012c0)={0x2c, &(0x7f0000001080)={0x20, 0xa, 0xb2, "236fddfbb349ff0d7a11ef25bd52e95533d4b9e3556718212d5438613c60f0e0aa09eacb095d97ea3b7b7e9eec28a392082ee0e60cc2710a3fcdbc69afd9d132225380c54df6bd58b2dd9d1cb02f33043b96cc460582b932e8594bb243f6fe611d19167884486f6a86c6fcd5a571aef780b9035254eb11688754ebf4d94770ca651d2234982829b5bdf71cc28a9c1af1d514a7c66a8c030b6677567031acf1f9b25e13f7f4899534dcb431738cbca227286e"}, &(0x7f0000001140)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000001180)={0x0, 0x8, 0x1, 0x45}, &(0x7f00000011c0)={0x20, 0x1, 0x7b, "de8a93a63b9b504f65a2cc93fb98a0e59edc7c8d4af516e174263031cd2928f19fad3f2b3b7ec5394e625c7fa9c110453ab7ea4ed59f2fbed92b8ca8268d65984781ed584190435de215205ba8d982efd24394743965c9dbf64f9ecd490320fd9d0aa18ff53eb86cdd9f640bf531137b36b58b43e516ac948c4db4"}, &(0x7f0000001280)={0x20, 0x3, 0x1, 0x4}}) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="201179000000790e91c778eee281205fe5a796a30199906c3b65d756cfce2965c03d1874a1921f21191850263501f7ec83267fc8666d5c3bbf82786ef75b44b3216b62ad99291694dac32641ec02050e4d7ca7d9fe925dc7a2f35eff252d8ebd73d083e023068ee5f465398322b2c03d86ab2a6ebec568a013aa4b8456f7e4"], &(0x7f00000000c0)={0x0, 0x3, 0x58, @string={0x58, 0x3, "23338a983878ab91423fc18c82577ac14263492cd336b5e9e9c8986709127ffaaa291b884a3918ee1e026044a53fafaeb6730d578bf675387d35ec9a2c3bcb572850f02a4f662810d884b3b8d1c7e6e81d38bef44578"}}}, &(0x7f0000000440)={0x34, &(0x7f0000000180)={0x40, 0x15, 0x7f, "4893800f6206ae753bcdfaf908f35f297d154182bedcdd74767ecb5583942f4a1d32e262538b094f8e9d8686ad8236d68092aec10e244c4b5e0ccff9108709ea3ac6556dabc87d18b112df13e6ce5d03dfd0d8f37e6759e7cbb6ed906868c4679079b5d86c313590226375f1680b5b996313b5437d50dffc2b52469e6a3680"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0xe0}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000002c0)={0x20, 0x0, 0xf6, {0xf4, "93b4c18e929213f997b6b9c946cd309a860b21242da6837b3d4fa7defdb288f8a6581b20a789697ca88846a1306d76183443543a972df58ff995e451ca76226784ffb2f475ddebd0b97fd069a032f397ff3baef0dcea4258349fcd143a73092f9b9987da83b43a9781420dc3b6e21ce5047b502837afd203ac2c0e3746d326e4f9e1f711c4313a00372f8cb633d13a423eec329c90fe64918760c2f6d1ee298acdc952f51d0e5ca1336dc7e8bb1c143bd59d21aa9f78a758aca424674196690c60fa0ee6128edd8037873c06cd6cc0668b4eef08f1bd019c624e22a60ea06a5d32d3a4ba4b2043e50837d40bc4b4eeb82b2b8ba4"}}, &(0x7f00000003c0)={0x20, 0x1, 0x1, 0x8}, &(0x7f0000000400)={0x20, 0x0, 0x1}}) r2 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000480)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x7f, 0x58, 0x7f, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x7, 0x1, 0x1, 0x8, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x3, 0x7, 0xa5}}}}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x310, 0x2, 0x4b, 0x8, 0x10, 0x81}, 0xbc, &(0x7f0000000500)={0x5, 0xf, 0xbc, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x14, 0x1, 0x3, 0x40}, @ssp_cap={0x20, 0x10, 0xa, 0x4, 0x5, 0x9e8, 0xf00, 0x8, [0x3f30, 0x0, 0xc000, 0xff0180, 0x0]}, @ssp_cap={0x1c, 0x10, 0xa, 0x4, 0x4, 0x1, 0xf000, 0x200, [0x30, 0xff0000, 0x3f3f, 0xc0]}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x2, 0x5, 0x80}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x1, 0x3}, @generic={0x66, 0x10, 0x0, "4e0dd1078cc8b3c067a4fb8334eda2873f1e4f617aed3c7c32608d0d75c867078f41d0f210768004d774aee12770c31c974bfe76e07e6d603edecd7c243e555d1e1f9e8ad7668c28517aee620f75170839425780be0b9221d9df85d17655bcc9d2d89d"}]}, 0x2, [{0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x404}}, {0x41, &(0x7f0000000600)=@string={0x41, 0x3, "27c13b48dae8b316336fd42bae6a60ac4960bad8dc24759464c8b952e20a5206a2f6a23f4a77799ea336600c6c838c1270cbf7746f180d91dbb54efbc1224d"}}]}) syz_usb_control_io(r2, &(0x7f0000000900)={0x2c, &(0x7f00000006c0)={0x40, 0x24, 0xb4, {0xb4, 0x8, "b9dda4d8105c3e55524d8e89ca2c10043621446e1d5fcf4f8ceb57bb2dd3fa092b888cb4fa639e1d0c55ffcfa72e87466346a47e7001667e941544c1053c5e52299df315b15ea436c45a29225ceb3cc301ebb7835c04ef7cdd390d7aca419731ff09447e801ab107baed882f62d58d23ba920ce9b78447850b335ee7173d9861450eb0a9b508e408f4e98953ae6b1225de7fcd698b0fd58bcab98e337c2c388ecf531b1450c325be6b9219b60b89560404e0"}}, &(0x7f0000000780)={0x0, 0x3, 0xa0, @string={0xa0, 0x3, "f93072f68e7d229534a667b22715565af5c53d098e18852697481d7d04f6449772b8a2ed4445d8f4c8b66a9d94fb7c6d79acb8ae2a7a7a5c3ee189db70a5736c5b8d552f0533100ef3e036db46c77fa1dcb3abccea8ff36074c9d30b477e4b9a2adee262c38110817fd6b9b002f0ab5a5abed7c54455f54744d8753958ae6c0c8d1ebf9139309296f985a9c64a5724cad949851ce4455359daa8df0742b3"}}, &(0x7f0000000840)={0x0, 0xf, 0x26, {0x5, 0xf, 0x26, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x6, 0x0, 0x1000}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "73cb5d1b033234461da1e04af82d1dc8"}, @ptm_cap={0x3}]}}, &(0x7f0000000880)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0xa7, 0x0, "3c2fc53c", "b377ad1f"}}, &(0x7f00000008c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x80, 0x40, 0x80, 0x80, 0x40, 0x1, 0x574}}}, &(0x7f0000000e00)={0x84, &(0x7f0000000940)={0x40, 0x15, 0xdf, "fcb95ce02e0b0eea5b9f8e9e47583189257f37442e167f56f8b2aff5b01e20ec22d3d538cf2e2910c4f9ddb310b1de59364a3b3cc02fa2b030bd12b062e430c46c1688b277211603277b8e4e91bbcb4448d16766123b4de551653f47c2dc1a81b4861f597fa34b2d4dbe9c99f9d863672b7588a413b74cb8179ff2f1a40d7f33333622237377140a1ab16e0d639c01caef8f716c59c6777e136bb7f4477639a51af9e4626778d8c48ea247c88c43628a561310328f578b3bf03c3ef8243e54b51243444b364cea32e35e21bbad763d400704b750b281f19d35b0b394f944a7"}, &(0x7f0000000a40)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000a80)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000ac0)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000b00)={0x20, 0x0, 0x4, {0x400, 0x1}}, &(0x7f0000000b40)={0x40, 0x7, 0x2, 0x77}, &(0x7f0000000b80)={0x40, 0x9, 0x1}, &(0x7f0000000bc0)={0x40, 0xb, 0x2, "eab0"}, &(0x7f0000000c00)={0x40, 0xf, 0x2, 0x6}, &(0x7f0000000c40)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000c80)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000cc0)={0x40, 0x19, 0x2, "490e"}, &(0x7f0000000d00)={0x40, 0x1a, 0x2, 0x400}, &(0x7f0000000d40)={0x40, 0x1c, 0x1, 0x20}, &(0x7f0000000d80)={0x40, 0x1e, 0x1, 0xbc}, &(0x7f0000000dc0)={0x40, 0x21, 0x1}}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 17:53:38 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x20}) write$cgroup_int(r1, 0x0, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e20, 0x7, @private2, 0x8}}}, &(0x7f0000000040)=0x84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000180), 0x0) 17:53:38 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x208200) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) getpid() read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) 17:53:38 executing program 3: ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, &(0x7f00000017c0)={{}, "86a2cd7d3f5777e46d95535d94117d5fab98fbca40dee3065952dc3e146afa6cf3e5bce1232d5c382d96a6ed9f8aa9f5f536ee7d213cefb0bd543240563f6edc2d5ace8ee0a96fe106246812201f5f9e18d23c9ca04b2e82c49939faae756fc753526c7101dc1f0175bd208ae7adaecaf4122798495df08183c4dc7677a001879219f301c4bdbf2b4565068810f48cddb12833e64023521a69047c6c985bd69bd515d903a263961531a108d64393be8a3e72e11ad3deccadbe46294c221f35559d825d0af1c7dbe684236224b919122204da5be4d7fa3d8adab1c5db9d38a7698474bc746764864f6c0252748196843693035bfd539b391d1de8bfbc8e19c3fb1020d7abe17e156058ce56b14424b9fb2e0d0411e96fa8536a5b0e95347923f9d7f4e3644761d8dfa21572ec8f465b1101a9fc87f055a53c6b5529e4d51a2a67e3ba7707199e84897e4ae0d64ec5fc6f9086334e29c7501965f219c6d50e0b476e8c9690bc2d59e68cd22bd9d9ddd00200bdf72f2f6b2c2354a6552f3b852d1ff15ea7b5fd31776fb356c1c2d6e7bd90acf6e5992be70e69b6f874c0db96922bf4ba2d0c26f90d9123eba2b54897bc78b8b7698393c418d9a2ca47f0d4885bc2e4fb01cd82a73e1c940b0c3f28dab628a6584e915342fe24e6cc365b9b83842b8ce02b3aa34071c43828cf0d5a75a2e521f5631cf21869ab04f62558ad08b334d75a14502afb0f2ce52737fe1ada852a2e3b18ec1d4b11a5b626b4e0ccc02816034eda63ef69fb819e1ee9f0c4ffeecc935f2e0cc491e50f8ae5227eb855082f09b1352d874a55979ae376def7a172dafce8994abeb2638c1ed8cfbef7e7bf82125e0373a5a0abbdaeb94fadd7526eb6e06a56d66ea033b33968104043d449c3e8bc9f1b5d8ba359bafa93f5b9e47b2255dfdcc8f2ede134c3e697170245c4ebea7a84c6429ac8158e1f0b94df3b35aafe3157cd57557cd22a5ce5502bb75f10cb24286a60b3c58d97c3552f9d82524fd40b934b2a7328c1e1708283df296148429959134f126d438aed55474f27613654c0c66c5ef55bdbc8b4956869301178fafbf8057f882e9b4c0ccd68eb6b93f1a6b974e72ff7a9ce730f73591e503022ad8c460ab4f93195c8184a6ef9dee22df15e33b25e2df4d53264f986286b68724050d396704be15212dc5aa3143c8c9b3264ae89c9c168737f5a9f05f7ba9c83fbd3937bc9d413bb5a758913e3b0e2ed90176fece24ef41519bc4e8327fb4c45abc4ce9e374780d6c8ab559f869fe54a6de4448f7002c80fafe4df680fe34b5edccde7f6677776607fa4bce6ddfeb555711ec9ae8d92b42e07a7e6e0a3eb82a33694c114fbb13c09a45535bf2dfbba5fcdc25458d68cd61a33ecf291b4cba244ae7cc1917ca1e2dc17a233596a9dba0e3f283385fa5d7c243cfead30dde25355f181cded666b867ec66b6addff26a9c930647e8cca9762d16693fca1f1472e77eca886f78e6d143dda7f4f9c33d478d67bfb1d994cb21e1762fe74e6f17e0a6f0d1d99d6f3cff12cfd017254fccb518a68a36cc6afdaf6e548373507abc87163f646b4d985d9ed4d9ab759badf7ce5cbbf13c0b0c6db79cae10f5556d40bc7e63c6b7a5f56decf923402ad128315c7e0a5dad0922f1d570abbeb290ef58eceeefca212ccd9c69963f226c2d60a82be48467618a6a9ca0395384e62b4cd9c81c7b375916e4f395062e75755be3311a2630d8d6b30b42e647572b496799476bea21c6cddb2e479e69115c6e1ac762feef8248b44b37e5ed6a5c2afb9359e2f88a589c4ee7520c2730a4447928d6b138d5186484f2542e33db1dbacbb95955f3675ed59cedf3f9025fa94bbc29a244397028280f3b06ab72ef5ae5c032fc6951dbb70d50f6cacbaf6a804b745c30d52b45e2fd38af7cc4eabbae1926adb850d444b8560a9eb4fdd7642f115a020733eb9181c6a2ee4d02ea8615d0e10770a109f9257051e74aaf77042e22c7e4f34b638b945701dd88c4ab402f72e89d67eec880830797041de106f69e7158e3e4b812a0153aa2bdc8d423919be922bba91a605ba1bdaf2e17abc865e0ac2614565b08a11de236274bc434f691f36db7cb97f564d27dc2ca27834052d20c8541c1879c12b8761fb4eb4ac899676f42ff190c28ecbc50b81ac2bf4be554a7f9597345484fac452737c08d4f17ab22b283578eeb6c4e6485c4ad67eece107116ce89150be033742b1a46c16aa58e7874d7766c687467e431170514c934697e1b66ecc80a45de4a35a09ca28df33a6b2e823a661a8a6e0fcc1f06353cd72254b706a012fd674b004ed7483b1aedcd5eeb79167a1b6a6c0a261bd51e46b82e0acaa444c83e61a8e759f6a27c80fd34157126fce3f2546d6de4711a87d77b104698285a2cf76f0ac9c3f1f1bd4f6b8a11c1c3a06bce520480883b0b67a90d4d0174c0b377672c5cedb8bb9bcf487686e5f1836512c96c67c5982b8538cd6836bcd495f92815ffb28f76e5bc0cf3ec0184ad64aaae768bdce9a2dd5154e107bbc38cb3a734e0ad542deb12a772e8af6a3ac336333b51b376f55c1c2b55837d8d207e95b461b51c452517910793bf45e969d8a005f50f2db6f15f4951e52a8bf1fc933c3a754bfabd1c3f790ce27f256f65117549d55262d22d2197acc3d33247a393f533733b32eee2f2203d3a004a81ee0e105c937a4c4ce7fe32d04a9ac43989889dcd5fea43827b453cc7480d919dee4db70da6a3e56ef9de14b251d71138b871a20c2839e551a61d61360533758446e440893e61bfb5155888efd9116e7ce413c9079c0d4018b77ec54de5edcede3e18f561bd608c9caec5035b12d366995ecaf4cec89e6db369a320e03078ecdb1f5a3c74b1b89907498384c6c2f3826d5a78921ccd5e9bc68f976ba184e68ce0ee8f35de0790925af34c02ce7fd8d94b905f29813bdc7fa5ad1ca7e0604c2560fae84a3db9d6978a07ef4f1457e691427ebb9a37a207c7a3c6b64a942a7e81eb44fbac385352084b7537022858c7c3cd58ce84ba9214fea80954f214ebeb8e64fa36eb841edf79a774b79f882c0820bb98ac97256873adc077f234f43af0294cae50fefa25c45237c3824a51807c771fb9452a8f17ec722f94aa7ac73055018c573abc1816a297e52db5139672dc65da4b5d846376a5bcb003fc90c40ab6eecd685d3a4312f6795a4ed343e394ae1bc998e25dcd902f1963e695777fec00177c0a75c7d8c12cfbcba7dacdb8c7bb99237347a4597c20c362cb4b8542162e7d942f2e190ddb1f632c4eca92d35a82338e65af42ad3533ed7013aed7c206e66fbf4d13b43c5aa844453dd8a1d0add872e23580d17253b9991700fd9b4c0843e825efd35648be3de4a146a4179f85223a55780892e128f0b6263687ee7510f8320e908ef1b00c459be404158047a85968bee38feb5d393b249ebf05cf334761f18a9448b28c34863aaf2fc1542a2ec6e215dfea9b644620816e773c9f2cc0a5dbdc212e9effd17aceaf512c474eaa729cb5105c7e2f4359917ae74df25da6bd6e43d86bba17ddc2e294be36cceb5edef06856061a9a3d5678e49f7b9a8be1363bfa175fe00461858e13320b57c9470d38cffdbc81e002a68e91e91910c2ec4d4fe007b3c0e2cb3be5e8bb542b5e6374ab61b7f835a50b2b381a9b040888c1195061975b10f00dc1c09c351709eaa56d8fbe8a31e28cdab86bbde85ec8e2599ab3923c71f5833afcb0e2aa95c45e4f8aa1429e71e0139749f46438b2559c86020318d4add6aa81bb5ba97239465e5dea43c25dba003d9c8beb4900abf5f083cdca63973dcda523d0c53c7e0e1a1719e8a460362e705493fc39f1556a557ea8b0a237118c22eec65e6c06957964e7f4946324aaa5e92114c022c8044341332a38d786ec0bd09d0eccf1162286d61e65c778f6f07f91129b8b836a96f32b07db781baec944f0406e8f9e4c76d9cd2b086845f54f31df07e0e3b522bdbcd2982e5889900aa9d4a8929a9bbc46fcaf839f42178b3d9c17478877fbe9d55c183605424213bef23b489b748576eddee79d26dce2f943f528b12f2725b731ac86f5facce99a34421aa3b9c6840398b607909de2be26d9e0cb71a3fe5f8c2e2fd7da8ccd2ed070b77fcb32fa76333ecb85a01ec98068c8174b1bde7f2b6f585a0b5d44bd9990e601e65ad5e0c12911b28ca3d906a00fe478a0115ebce7c62a194a125b020e94439c672e82889d70a57d09ea90d3061a4fa47d4bef7c84a29e73ee75d036a303b39c65f576a0b426dd949ae99c92e7cb16d75919c8236bb01be1ba2d8057520d3fb30bc5a8c62ab32beb1d59cecd9dfb8964b94660efee057906069dc0d4447713ee31a082af83064f04fb7d0abb0da9ec78c917f2240582fa495a5640fd95ffe6f7a3f50a7b1caa10a237670505ba9819d98c78af146914e2886ad8c362d70a4933f98a46ad3a67c28975ddf3339cd756b6221d5a38686d1cb978f3ddddc2c5ea9ac386ad89d70ad0597e3b5f282ee6c8a66c8af66b150137374446c97f2b27c3d91758ddaf0b60866244b0bad46c13c2c88eb103319eb987daa4d63e8c98ec71e9fbdb0e0faf825bfe7799ad0c44ad0623b00e7886fcc622fb099fec93fbdab8164eff073b25f6dbe4d23c502408f0bdb3da027161e9c4d2d3852eb766f68ef8e47c7cea8d5fe9be2608c40634c7983bb007afb1d2c7802d8159b60a6104af77ac438fa4dcf6837eddedfb323408ef1cfd1f4660a5779749804815a5e241f9a5cd15c7e4e34a3809d067b01db9f4967f780a4f708dd5a39d4baa12ef10a483ed1a19eaf84d50dffebfa363411958163c283bea7dfbcff814951194267cc397712b5eb4a7e5e4bf59cc3d1845f568f05201d25c0e9963bc66f89f738da13bddd903ff080f7be202e02ed47b13bc687f2cec9a367ff3663d0d0d583f7da47e9065dd6c48878745376f9f6b32b8fca362cd4d5bafd96d9bcda223c8f456dbdcc56485fee308feba2b91b8ab28597d0cb3f1f3322d7e32aa7e40d73226e9f9b4ef02a41ebfe3328b0b776f775e256766daf7a905cb39c25389f3084863c614d90b2492ee9a284f436cfd276bea99008b4443f4f822fc297f85075d43ce21d537bc8b82e295f724cc552be479e4a89dad68c0fed6ddfb40a35629c3fde8177fc734497b3da305ab31018eaa9578d07d1c3de8a6608adae642d9e5f54d643785807c046dd8be9a00f21f0d00122c5f3416b0104a4350e8bd68eef8b4128e15ebf54ff805f6dcc71b33845eae6f9489484945b7657cae1c6890d48b4af7a7ddeab6b1b32666d0e3ba6b28c682eb4b630a7bc55687fab670eff451e0d88349108bb29e0d90c3f939b0686c27106f282c75c2a57bc100e55e1dfff162d5ff749784a4c09d095c0fcc799320e09587fcfb561d87a7916521f171ec02e61c35b5eace43e8b4f38413dad954af786a91f5601ac1df3ed4a167212505766806c7488e84eb436a92f3ff6e12105b69d999a3e22ac5f570558563f7e0e9af28b103215b9f1c965d3d6bb16b5b3a518c2288042cdf07f2e4512aff85dd2b5e82d8609fe9d51c83ea3c260557c169b1b7c3f08fa84064ad6923b4396411984baf5525c80ea13dcc7d2612384432f572bf506430380a8274c7f245776aacbec0c008b14eb53ddc266fc15074eb7d488f842eae38b12600f2e9ef10e4cca3b28fcdd82711c836a1fcf0b54c92ac65af4e2e2df0d94e798c149fefecd282ad6cdf64b693fcc95853a"}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x101000, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000400)='sit\x00') r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card0/oss_mixer\x00', 0x80, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x101000, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000400)='sit\x00') read$proc_mixer(r2, &(0x7f00000016c0)=""/3, 0x3) r3 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$proc_mixer(0xffffffffffffffff, &(0x7f00000027c0)=[{'LINE', @void}, {'OGAIN', @void}, {'DIGITAL2', @val={' \'', 'Synth Capture Switch', '\' '}}, {'TREBLE', @val={' \'', 'Master Capture Switch', '\' '}}, {'BASS', @void}], 0x79) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r3, 0x0) ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000001780)={{}, 0xffffffffffffffff, 0x200000006, 0x100000000}) pwritev(r1, &(0x7f0000001600)=[{&(0x7f00000001c0)="fcc0c70197630be2ba9145c624f16e0d0050ec153c5bfa96c5fa6a0a3579024ce807577cf669a0651420e85dac5f6168d0f8deea25fb1c7d6a3b91851ce502ed169813e940b85b0ba73b122827dea690138cf89b9d543aa013d386c6774985e6e8a015bfad56095413364d30b6f0bce5a7457f150fd6bbc0e618ed4b0dc3c60d268699ed08b4fd7a7ccb8c65575b9af0bae44a5356744a5c51ad31894141d970e94db4969998d5a494af84ef711cb31fd5c3b96be3a2d0d757b2d857c42ef4ac382ad120dccf2a1ed9736318b8", 0xcd}, {&(0x7f00000002c0)="2b0a5fcf8db1882e8b536980d0b71d9fa6a12a35904b560d6806034657ee03f7161f11bee6d3e8096b7bbccfd106bb58cdb42f2eee306712d8523ecbb7d0f209f975f4387db82548cd550c293873110cc7ba0ad9fbfa2033c948f0b9f07912ce5343966ba7687020c4c8381343b3ec0d6cdd2ea967f5ee21f6dbbdfd574d3bd1b1f2d7fd585597c648a3d67fda493c5b6331772c71df980675e64c59311f1b", 0x9f}, {&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000000100)="e3803de7660d27efc16e9254e41cf06ec4cf50714334fcaf149d3f2899", 0x1d}, {&(0x7f0000001440)="2e668c437af8671a5be6bfbccd91bfa61dc35d5127064873bc8609c96ba0e97b9c9664c2d64771a3b9ba77bbff2d7f4d753fdedd5f6864c7c317cc85f8b04c268179d3d7046e8e5d787ee13cbb7b2b76065530cba523aa6754696a7b6d20e96924e33ba5ae6d8fd859c2e3151b4cbf7ed01ee280064386c62a420de992729b850f03cde2f3", 0x85}, {&(0x7f0000000380)="456ee8991aeb477f964aad9a1da7e1e6b254e89eb96a8569343e4e0c7932475059caf406e75797a5824df4090a6a3755034949bc3614b256ae59be1bd011e06ca204874dc7bfd8254594d9e1e3bee71846aff34451ec919c88783d039e22a4e2496f25f1ad7e5731bc2e5b1c2e300417819d", 0x72}, {&(0x7f0000001500)="11f98b4d546073a49498511e9d77f07399f85174f623a1bd8a7b2acfd5d128cc958ebbebdb6962195642f23c2a3eeff97ad60a62d881554b7141", 0x3a}, {&(0x7f0000001540)="2cb3f3614c47155541eba2c472cf4a040eb24761188fc810ea6956d4ceaf37aa2f269c5f5f2dc3a3753b06f4fac229cf5e3a9b2df72c7c901ea3c6733ae81955a210f11c756b603cf644231dcb2289d1", 0x50}, {&(0x7f00000015c0)='O', 0x1}], 0x9, 0xb15, 0xffffffff) r4 = syz_io_uring_setup(0x9a, &(0x7f0000000140)={0x0, 0x0, 0x12, 0x0, 0xfbfffffc, 0x0, r0}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000000)) io_uring_enter(r4, 0x0, 0x0, 0x7, 0x0, 0x0) perf_event_open(&(0x7f0000001700)={0x2, 0x70, 0xe0, 0x4, 0x1, 0x2, 0x0, 0x3f, 0x4000, 0xe, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x3, 0x8}, 0x10, 0x5, 0x200, 0x7, 0xcccf, 0x4, 0x3}, 0x0, 0x2, r2, 0x1) 17:53:38 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x208200) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) getpid() read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) 17:53:38 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x208200) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) getpid() read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 306.984086][ T37] audit: type=1804 audit(1618682018.478:127): pid=14094 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/114/file0/bus" dev="ramfs" ino=41284 res=1 errno=0 17:53:38 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x20}) write$cgroup_int(r1, 0x0, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e20, 0x7, @private2, 0x8}}}, &(0x7f0000000040)=0x84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000180), 0x0) [ 307.183542][ T37] audit: type=1804 audit(1618682018.508:128): pid=14098 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir150283135/syzkaller.bC4w7w/106/file0/bus" dev="ramfs" ino=40543 res=1 errno=0 17:53:38 executing program 3: syz_io_uring_setup(0x9a, &(0x7f0000000140)={0x0, 0x0, 0x12}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) [ 307.300233][ T36] usb 2-1: new high-speed USB device number 21 using dummy_hcd 17:53:39 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x20}) write$cgroup_int(r1, 0x0, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e20, 0x7, @private2, 0x8}}}, &(0x7f0000000040)=0x84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000180), 0x0) 17:53:39 executing program 3: r0 = syz_io_uring_setup(0x9a, &(0x7f0000000340)={0x0, 0xdd0, 0x2, 0x3}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_enter(r0, 0x0, 0x0, 0x7, 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x101000, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000400)='sit\x00') io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)=""/146, 0x92}, {&(0x7f00000001c0)=""/39, 0x27}, {&(0x7f0000000200)=""/198, 0xc6}], 0x3) 17:53:39 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x20}) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e20, 0x7, @private2, 0x8}}}, &(0x7f0000000040)=0x84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000180), 0x0) 17:53:39 executing program 3: r0 = syz_io_uring_setup(0x9a, &(0x7f0000000140)={0x0, 0xffffffff, 0x8, 0x3, 0x370}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_enter(r0, 0x0, 0x0, 0x7, 0x0, 0x0) [ 307.680140][ T36] usb 2-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=ce.99 [ 307.689243][ T36] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.721420][ T36] usb 2-1: config 0 descriptor?? [ 307.782010][ T36] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 308.216938][T14108] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 308.238656][T14150] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 308.271613][T14153] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 308.916241][T14100] udc-core: couldn't find an available UDC or it's busy [ 308.923734][T14100] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 309.160913][T14100] udc-core: couldn't find an available UDC or it's busy [ 309.167874][T14100] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 309.657466][ T36] gspca_stv06xx: I2C: Read error writing address: -71 [ 309.666099][ T36] usb 2-1: USB disconnect, device number 21 17:53:41 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x40, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, &(0x7f0000001040)={0x24, &(0x7f0000000ec0)={0x20, 0xf, 0xb0, {0xb0, 0x21, "c2e9f16f984c103ab1130963504f00ac1619191cad7c722b07a9acc127af82c8eac8d0d63581911e7cd1d9ac4d73d8fc91a038f18eb12efec9b0611f3f16af37a53362adadacac18bd16324b13ae804f760d80ffff8e0729a0a54bfdc73f2f6166f9adda8592c286a3dc5ac69c17269e59c78c7baa708c47f14358ad4183be5bc27b2175dd3f8bbaac6902b07815a4e5af35a4ac50ec4a82afed680562eadd3fe70755a5ac338bf0d5f4e4e7c7fd"}}, &(0x7f0000000f80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44f}}, &(0x7f0000000fc0)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0x9, "30adcab6"}, @local=@item_4={0x3, 0x2, 0x2, "eadd7df7"}]}}, &(0x7f0000001000)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x48, 0x1, {0x22, 0xe4f}}}}, &(0x7f00000012c0)={0x2c, &(0x7f0000001080)={0x20, 0xa, 0xb2, "236fddfbb349ff0d7a11ef25bd52e95533d4b9e3556718212d5438613c60f0e0aa09eacb095d97ea3b7b7e9eec28a392082ee0e60cc2710a3fcdbc69afd9d132225380c54df6bd58b2dd9d1cb02f33043b96cc460582b932e8594bb243f6fe611d19167884486f6a86c6fcd5a571aef780b9035254eb11688754ebf4d94770ca651d2234982829b5bdf71cc28a9c1af1d514a7c66a8c030b6677567031acf1f9b25e13f7f4899534dcb431738cbca227286e"}, &(0x7f0000001140)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000001180)={0x0, 0x8, 0x1, 0x45}, &(0x7f00000011c0)={0x20, 0x1, 0x7b, "de8a93a63b9b504f65a2cc93fb98a0e59edc7c8d4af516e174263031cd2928f19fad3f2b3b7ec5394e625c7fa9c110453ab7ea4ed59f2fbed92b8ca8268d65984781ed584190435de215205ba8d982efd24394743965c9dbf64f9ecd490320fd9d0aa18ff53eb86cdd9f640bf531137b36b58b43e516ac948c4db4"}, &(0x7f0000001280)={0x20, 0x3, 0x1, 0x4}}) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="201179000000790e91c778eee281205fe5a796a30199906c3b65d756cfce2965c03d1874a1921f21191850263501f7ec83267fc8666d5c3bbf82786ef75b44b3216b62ad99291694dac32641ec02050e4d7ca7d9fe925dc7a2f35eff252d8ebd73d083e023068ee5f465398322b2c03d86ab2a6ebec568a013aa4b8456f7e4"], &(0x7f00000000c0)={0x0, 0x3, 0x58, @string={0x58, 0x3, "23338a983878ab91423fc18c82577ac14263492cd336b5e9e9c8986709127ffaaa291b884a3918ee1e026044a53fafaeb6730d578bf675387d35ec9a2c3bcb572850f02a4f662810d884b3b8d1c7e6e81d38bef44578"}}}, &(0x7f0000000440)={0x34, &(0x7f0000000180)={0x40, 0x15, 0x7f, "4893800f6206ae753bcdfaf908f35f297d154182bedcdd74767ecb5583942f4a1d32e262538b094f8e9d8686ad8236d68092aec10e244c4b5e0ccff9108709ea3ac6556dabc87d18b112df13e6ce5d03dfd0d8f37e6759e7cbb6ed906868c4679079b5d86c313590226375f1680b5b996313b5437d50dffc2b52469e6a3680"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0xe0}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000002c0)={0x20, 0x0, 0xf6, {0xf4, "93b4c18e929213f997b6b9c946cd309a860b21242da6837b3d4fa7defdb288f8a6581b20a789697ca88846a1306d76183443543a972df58ff995e451ca76226784ffb2f475ddebd0b97fd069a032f397ff3baef0dcea4258349fcd143a73092f9b9987da83b43a9781420dc3b6e21ce5047b502837afd203ac2c0e3746d326e4f9e1f711c4313a00372f8cb633d13a423eec329c90fe64918760c2f6d1ee298acdc952f51d0e5ca1336dc7e8bb1c143bd59d21aa9f78a758aca424674196690c60fa0ee6128edd8037873c06cd6cc0668b4eef08f1bd019c624e22a60ea06a5d32d3a4ba4b2043e50837d40bc4b4eeb82b2b8ba4"}}, &(0x7f00000003c0)={0x20, 0x1, 0x1, 0x8}, &(0x7f0000000400)={0x20, 0x0, 0x1}}) r2 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000480)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x7f, 0x58, 0x7f, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x7, 0x1, 0x1, 0x8, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x3, 0x7, 0xa5}}}}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x310, 0x2, 0x4b, 0x8, 0x10, 0x81}, 0xbc, &(0x7f0000000500)={0x5, 0xf, 0xbc, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x14, 0x1, 0x3, 0x40}, @ssp_cap={0x20, 0x10, 0xa, 0x4, 0x5, 0x9e8, 0xf00, 0x8, [0x3f30, 0x0, 0xc000, 0xff0180, 0x0]}, @ssp_cap={0x1c, 0x10, 0xa, 0x4, 0x4, 0x1, 0xf000, 0x200, [0x30, 0xff0000, 0x3f3f, 0xc0]}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x2, 0x5, 0x80}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x1, 0x3}, @generic={0x66, 0x10, 0x0, "4e0dd1078cc8b3c067a4fb8334eda2873f1e4f617aed3c7c32608d0d75c867078f41d0f210768004d774aee12770c31c974bfe76e07e6d603edecd7c243e555d1e1f9e8ad7668c28517aee620f75170839425780be0b9221d9df85d17655bcc9d2d89d"}]}, 0x2, [{0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x404}}, {0x41, &(0x7f0000000600)=@string={0x41, 0x3, "27c13b48dae8b316336fd42bae6a60ac4960bad8dc24759464c8b952e20a5206a2f6a23f4a77799ea336600c6c838c1270cbf7746f180d91dbb54efbc1224d"}}]}) syz_usb_control_io(r2, &(0x7f0000000900)={0x2c, &(0x7f00000006c0)={0x40, 0x24, 0xb4, {0xb4, 0x8, "b9dda4d8105c3e55524d8e89ca2c10043621446e1d5fcf4f8ceb57bb2dd3fa092b888cb4fa639e1d0c55ffcfa72e87466346a47e7001667e941544c1053c5e52299df315b15ea436c45a29225ceb3cc301ebb7835c04ef7cdd390d7aca419731ff09447e801ab107baed882f62d58d23ba920ce9b78447850b335ee7173d9861450eb0a9b508e408f4e98953ae6b1225de7fcd698b0fd58bcab98e337c2c388ecf531b1450c325be6b9219b60b89560404e0"}}, &(0x7f0000000780)={0x0, 0x3, 0xa0, @string={0xa0, 0x3, "f93072f68e7d229534a667b22715565af5c53d098e18852697481d7d04f6449772b8a2ed4445d8f4c8b66a9d94fb7c6d79acb8ae2a7a7a5c3ee189db70a5736c5b8d552f0533100ef3e036db46c77fa1dcb3abccea8ff36074c9d30b477e4b9a2adee262c38110817fd6b9b002f0ab5a5abed7c54455f54744d8753958ae6c0c8d1ebf9139309296f985a9c64a5724cad949851ce4455359daa8df0742b3"}}, &(0x7f0000000840)={0x0, 0xf, 0x26, {0x5, 0xf, 0x26, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x6, 0x0, 0x1000}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "73cb5d1b033234461da1e04af82d1dc8"}, @ptm_cap={0x3}]}}, &(0x7f0000000880)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0xa7, 0x0, "3c2fc53c", "b377ad1f"}}, &(0x7f00000008c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x80, 0x40, 0x80, 0x80, 0x40, 0x1, 0x574}}}, &(0x7f0000000e00)={0x84, &(0x7f0000000940)={0x40, 0x15, 0xdf, "fcb95ce02e0b0eea5b9f8e9e47583189257f37442e167f56f8b2aff5b01e20ec22d3d538cf2e2910c4f9ddb310b1de59364a3b3cc02fa2b030bd12b062e430c46c1688b277211603277b8e4e91bbcb4448d16766123b4de551653f47c2dc1a81b4861f597fa34b2d4dbe9c99f9d863672b7588a413b74cb8179ff2f1a40d7f33333622237377140a1ab16e0d639c01caef8f716c59c6777e136bb7f4477639a51af9e4626778d8c48ea247c88c43628a561310328f578b3bf03c3ef8243e54b51243444b364cea32e35e21bbad763d400704b750b281f19d35b0b394f944a7"}, &(0x7f0000000a40)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000a80)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000ac0)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000b00)={0x20, 0x0, 0x4, {0x400, 0x1}}, &(0x7f0000000b40)={0x40, 0x7, 0x2, 0x77}, &(0x7f0000000b80)={0x40, 0x9, 0x1}, &(0x7f0000000bc0)={0x40, 0xb, 0x2, "eab0"}, &(0x7f0000000c00)={0x40, 0xf, 0x2, 0x6}, &(0x7f0000000c40)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000c80)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000cc0)={0x40, 0x19, 0x2, "490e"}, &(0x7f0000000d00)={0x40, 0x1a, 0x2, 0x400}, &(0x7f0000000d40)={0x40, 0x1c, 0x1, 0x20}, &(0x7f0000000d80)={0x40, 0x1e, 0x1, 0xbc}, &(0x7f0000000dc0)={0x40, 0x21, 0x1}}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 17:53:41 executing program 3: syz_io_uring_setup(0x9a, &(0x7f0000000140)={0x0, 0x0, 0x12}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x101000, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000400)='sit\x00') io_uring_enter(r0, 0x1000, 0x20004, 0x3, 0x0, 0x0) 17:53:41 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x208200) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) getpid() read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) 17:53:41 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x20}) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e20, 0x7, @private2, 0x8}}}, &(0x7f0000000040)=0x84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000180), 0x0) 17:53:41 executing program 4: r0 = syz_io_uring_setup(0x9a, &(0x7f0000000140)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_enter(r0, 0x0, 0xc3d7, 0x7, 0x0, 0x0) io_uring_enter(r0, 0x4442, 0xc8ac, 0x2, &(0x7f0000000000), 0x8) 17:53:41 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x208200) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) dup(0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 310.265296][ T37] kauditd_printk_skb: 5 callbacks suppressed [ 310.265309][ T37] audit: type=1804 audit(1618682021.758:134): pid=14182 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/115/file0/bus" dev="ramfs" ino=40590 res=1 errno=0 17:53:41 executing program 3: r0 = syz_io_uring_setup(0x9a, &(0x7f0000000140)={0x0, 0x0, 0x12}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_enter(r0, 0x0, 0x0, 0x7, 0x0, 0x0) syz_io_uring_setup(0x54a0, &(0x7f0000000000)={0x0, 0x772, 0x2, 0x2, 0x335, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) [ 310.404753][ T37] audit: type=1804 audit(1618682021.798:135): pid=14185 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/105/file0/bus" dev="ramfs" ino=40594 res=1 errno=0 17:53:42 executing program 3: io_uring_enter(0xffffffffffffffff, 0x7d3d, 0xc6ce, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x7, 0x0, 0x0) 17:53:42 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x20}) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e20, 0x7, @private2, 0x8}}}, &(0x7f0000000040)=0x84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000180), 0x0) [ 310.525618][ T37] audit: type=1804 audit(1618682021.898:136): pid=14185 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/105/file0/bus" dev="ramfs" ino=40594 res=1 errno=0 [ 310.602389][ T9475] usb 2-1: new high-speed USB device number 22 using dummy_hcd 17:53:42 executing program 3: r0 = syz_io_uring_setup(0x9a, &(0x7f0000000140)={0x0, 0x0, 0x12}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_enter(r0, 0x0, 0x0, 0x7, 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x101000, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x101000, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000400)='sit\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'macsec0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@deltfilter={0x4c, 0x2d, 0x20, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xf, 0x2}, {0xffff}, {0xfff2, 0x1}}, [@TCA_CHAIN={0x8, 0xb, 0x100}, @TCA_RATE={0x6, 0x5, {0xc6, 0x3f}}, @TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x6, 0x5, {0x60, 0x6}}, @TCA_CHAIN={0x8, 0xb, 0xc5d}]}, 0x4c}, 0x1, 0x0, 0x0, 0x14004844}, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000000), 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000400)='sit\x00') mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x4000010, r1, 0x10000000) 17:53:42 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x20}) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r0, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e20, 0x7, @private2, 0x8}}}, &(0x7f0000000040)=0x84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000180), 0x0) 17:53:42 executing program 3: r0 = syz_io_uring_setup(0x9a, &(0x7f0000000140)={0x0, 0x0, 0x12}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) io_uring_enter(r0, 0x0, 0x0, 0x7, 0x0, 0x0) syz_io_uring_setup(0x379d, &(0x7f0000000000)={0x0, 0x526d, 0x10, 0x2, 0x2ea, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000001c0)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r5}]}}}]}, 0x38}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000200)=@xdp={0x2c, 0x7, r5, 0x6}, 0x0, 0x0, 0x1}, 0x8) [ 311.040045][ T9475] usb 2-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=ce.99 [ 311.049128][ T9475] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.116306][ T9475] usb 2-1: config 0 descriptor?? [ 311.181951][ T9475] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 311.567293][ T37] audit: type=1804 audit(1618682023.058:137): pid=14182 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/115/file0/bus" dev="ramfs" ino=40590 res=1 errno=0 [ 311.647511][ T37] audit: type=1804 audit(1618682023.098:138): pid=14182 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/115/file0/bus" dev="ramfs" ino=40590 res=1 errno=0 [ 311.688334][T14251] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 311.913357][T14258] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 312.301742][T14187] udc-core: couldn't find an available UDC or it's busy [ 312.308781][T14187] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 312.560991][T14187] udc-core: couldn't find an available UDC or it's busy [ 312.568004][T14187] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 313.049680][ T9475] gspca_stv06xx: I2C: Read error writing address: -71 [ 313.058493][ T9475] usb 2-1: USB disconnect, device number 22 17:53:45 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x40, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, &(0x7f0000001040)={0x24, &(0x7f0000000ec0)={0x20, 0xf, 0xb0, {0xb0, 0x21, "c2e9f16f984c103ab1130963504f00ac1619191cad7c722b07a9acc127af82c8eac8d0d63581911e7cd1d9ac4d73d8fc91a038f18eb12efec9b0611f3f16af37a53362adadacac18bd16324b13ae804f760d80ffff8e0729a0a54bfdc73f2f6166f9adda8592c286a3dc5ac69c17269e59c78c7baa708c47f14358ad4183be5bc27b2175dd3f8bbaac6902b07815a4e5af35a4ac50ec4a82afed680562eadd3fe70755a5ac338bf0d5f4e4e7c7fd"}}, &(0x7f0000000f80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44f}}, &(0x7f0000000fc0)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0x9, "30adcab6"}, @local=@item_4={0x3, 0x2, 0x2, "eadd7df7"}]}}, &(0x7f0000001000)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x48, 0x1, {0x22, 0xe4f}}}}, &(0x7f00000012c0)={0x2c, &(0x7f0000001080)={0x20, 0xa, 0xb2, "236fddfbb349ff0d7a11ef25bd52e95533d4b9e3556718212d5438613c60f0e0aa09eacb095d97ea3b7b7e9eec28a392082ee0e60cc2710a3fcdbc69afd9d132225380c54df6bd58b2dd9d1cb02f33043b96cc460582b932e8594bb243f6fe611d19167884486f6a86c6fcd5a571aef780b9035254eb11688754ebf4d94770ca651d2234982829b5bdf71cc28a9c1af1d514a7c66a8c030b6677567031acf1f9b25e13f7f4899534dcb431738cbca227286e"}, &(0x7f0000001140)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000001180)={0x0, 0x8, 0x1, 0x45}, &(0x7f00000011c0)={0x20, 0x1, 0x7b, "de8a93a63b9b504f65a2cc93fb98a0e59edc7c8d4af516e174263031cd2928f19fad3f2b3b7ec5394e625c7fa9c110453ab7ea4ed59f2fbed92b8ca8268d65984781ed584190435de215205ba8d982efd24394743965c9dbf64f9ecd490320fd9d0aa18ff53eb86cdd9f640bf531137b36b58b43e516ac948c4db4"}, &(0x7f0000001280)={0x20, 0x3, 0x1, 0x4}}) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="201179000000790e91c778eee281205fe5a796a30199906c3b65d756cfce2965c03d1874a1921f21191850263501f7ec83267fc8666d5c3bbf82786ef75b44b3216b62ad99291694dac32641ec02050e4d7ca7d9fe925dc7a2f35eff252d8ebd73d083e023068ee5f465398322b2c03d86ab2a6ebec568a013aa4b8456f7e4"], &(0x7f00000000c0)={0x0, 0x3, 0x58, @string={0x58, 0x3, "23338a983878ab91423fc18c82577ac14263492cd336b5e9e9c8986709127ffaaa291b884a3918ee1e026044a53fafaeb6730d578bf675387d35ec9a2c3bcb572850f02a4f662810d884b3b8d1c7e6e81d38bef44578"}}}, &(0x7f0000000440)={0x34, &(0x7f0000000180)={0x40, 0x15, 0x7f, "4893800f6206ae753bcdfaf908f35f297d154182bedcdd74767ecb5583942f4a1d32e262538b094f8e9d8686ad8236d68092aec10e244c4b5e0ccff9108709ea3ac6556dabc87d18b112df13e6ce5d03dfd0d8f37e6759e7cbb6ed906868c4679079b5d86c313590226375f1680b5b996313b5437d50dffc2b52469e6a3680"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0xe0}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000002c0)={0x20, 0x0, 0xf6, {0xf4, "93b4c18e929213f997b6b9c946cd309a860b21242da6837b3d4fa7defdb288f8a6581b20a789697ca88846a1306d76183443543a972df58ff995e451ca76226784ffb2f475ddebd0b97fd069a032f397ff3baef0dcea4258349fcd143a73092f9b9987da83b43a9781420dc3b6e21ce5047b502837afd203ac2c0e3746d326e4f9e1f711c4313a00372f8cb633d13a423eec329c90fe64918760c2f6d1ee298acdc952f51d0e5ca1336dc7e8bb1c143bd59d21aa9f78a758aca424674196690c60fa0ee6128edd8037873c06cd6cc0668b4eef08f1bd019c624e22a60ea06a5d32d3a4ba4b2043e50837d40bc4b4eeb82b2b8ba4"}}, &(0x7f00000003c0)={0x20, 0x1, 0x1, 0x8}, &(0x7f0000000400)={0x20, 0x0, 0x1}}) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000480)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x7f, 0x58, 0x7f, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x7, 0x1, 0x1, 0x8, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x3, 0x7, 0xa5}}}}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x310, 0x2, 0x4b, 0x8, 0x10, 0x81}, 0xbc, &(0x7f0000000500)={0x5, 0xf, 0xbc, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x14, 0x1, 0x3, 0x40}, @ssp_cap={0x20, 0x10, 0xa, 0x4, 0x5, 0x9e8, 0xf00, 0x8, [0x3f30, 0x0, 0xc000, 0xff0180, 0x0]}, @ssp_cap={0x1c, 0x10, 0xa, 0x4, 0x4, 0x1, 0xf000, 0x200, [0x30, 0xff0000, 0x3f3f, 0xc0]}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x2, 0x5, 0x80}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x1, 0x3}, @generic={0x66, 0x10, 0x0, "4e0dd1078cc8b3c067a4fb8334eda2873f1e4f617aed3c7c32608d0d75c867078f41d0f210768004d774aee12770c31c974bfe76e07e6d603edecd7c243e555d1e1f9e8ad7668c28517aee620f75170839425780be0b9221d9df85d17655bcc9d2d89d"}]}, 0x2, [{0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x404}}, {0x41, &(0x7f0000000600)=@string={0x41, 0x3, "27c13b48dae8b316336fd42bae6a60ac4960bad8dc24759464c8b952e20a5206a2f6a23f4a77799ea336600c6c838c1270cbf7746f180d91dbb54efbc1224d"}}]}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 17:53:45 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x208200) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) dup(0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) 17:53:45 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x208200) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) getpid() read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) 17:53:45 executing program 3: io_uring_enter(0xffffffffffffffff, 0x2, 0x8000000, 0x7, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0xf06, 0x48df, 0x1, &(0x7f0000000000)={[0x5]}, 0x8) 17:53:45 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x20}) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r0, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e20, 0x7, @private2, 0x8}}}, &(0x7f0000000040)=0x84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000180), 0x0) 17:53:45 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x208200) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, 0xffffffffffffffff, 0x0) getpid() read(0xffffffffffffffff, &(0x7f0000000180)=""/19, 0xfffffe47) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) 17:53:45 executing program 3: r0 = syz_io_uring_setup(0x9a, &(0x7f0000000000)={0x0, 0xd577, 0x10, 0xffffffff}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_enter(r0, 0x0, 0x0, 0x7, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x20000, 0x28) [ 313.634384][ T37] audit: type=1804 audit(1618682025.129:139): pid=14275 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/106/file0/bus" dev="ramfs" ino=41409 res=1 errno=0 [ 313.687288][ T37] audit: type=1804 audit(1618682025.159:140): pid=14278 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/116/file0/bus" dev="ramfs" ino=40678 res=1 errno=0 [ 313.713431][ T37] audit: type=1804 audit(1618682025.159:141): pid=14277 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir150283135/syzkaller.bC4w7w/108/file0/bus" dev="ramfs" ino=41411 res=1 errno=0 [ 313.789371][ T37] audit: type=1804 audit(1618682025.279:142): pid=14278 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/116/file0/bus" dev="ramfs" ino=40678 res=1 errno=0 [ 313.853450][T14275] overlayfs: unrecognized mount option "context=staff_u" or missing value 17:53:45 executing program 3: r0 = syz_io_uring_setup(0x9a, &(0x7f0000000140)={0x0, 0x0, 0x12}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) r2 = syz_io_uring_setup(0x2ed5, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r5 = syz_io_uring_setup(0x2de5, &(0x7f0000000240)={0x0, 0xfffffffc}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r6}}, 0x0) r7 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x101000, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x40082406, &(0x7f0000000400)='sit\x00') r9 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x80200, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r11, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r12}]}}}]}, 0x38}}, 0x0) sendto(r10, &(0x7f00000001c0), 0x0, 0x0, &(0x7f00000002c0)=@nfc={0x27, 0x0, 0x2, 0x3}, 0x80) r13 = accept$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @local}, &(0x7f0000000200)=0x10) io_uring_register$IORING_REGISTER_FILES(r9, 0x2, &(0x7f0000000340)=[r8, 0xffffffffffffffff, r2, r10, r13], 0x5) syz_io_uring_submit(r1, r4, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd_index=0x8, 0x4, {0x0, r7}, 0xb8, 0x2, 0x0, {0x0, 0x0, r8}}, 0x8) io_uring_enter(r0, 0x0, 0x0, 0x7, 0x0, 0x0) [ 313.994666][ T37] audit: type=1804 audit(1618682025.319:143): pid=14278 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/116/file0/bus" dev="ramfs" ino=40678 res=1 errno=0 [ 314.031059][ T5] usb 2-1: new high-speed USB device number 23 using dummy_hcd 17:53:45 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x208200) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, 0xffffffffffffffff, 0x0) getpid() read(0xffffffffffffffff, &(0x7f0000000180)=""/19, 0xfffffe47) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) 17:53:45 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x20}) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r0, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e20, 0x7, @private2, 0x8}}}, &(0x7f0000000040)=0x84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000180), 0x0) 17:53:45 executing program 3: r0 = syz_io_uring_setup(0x9a, &(0x7f0000000140)={0x0, 0x0, 0x12}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_enter(r0, 0x0, 0x0, 0x7, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x40400, 0x0) preadv(r1, &(0x7f0000000480)=[{&(0x7f0000000040)=""/29, 0x1d}, {&(0x7f0000000080)}, {&(0x7f00000001c0)=""/250, 0xfa}, {&(0x7f00000002c0)=""/253, 0xfd}, {&(0x7f00000003c0)=""/175, 0xaf}], 0x5, 0x9, 0x0) [ 314.409772][ T5] usb 2-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=ce.99 [ 314.435988][ T5] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.448770][ T5] usb 2-1: config 0 descriptor?? [ 314.532522][ T5] gspca_main: STV06xx-2.14.0 probing 046d:0840 17:53:46 executing program 3: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ocfs2_control\x00', 0x113000, 0x0) r1 = syz_io_uring_setup(0xd5d, &(0x7f0000000040)={0x0, 0x7, 0x1, 0x0, 0x161, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000000)) io_uring_enter(r1, 0x0, 0x0, 0x7, 0x0, 0x0) [ 314.650379][T14303] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 315.418724][T14278] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 315.457796][T14329] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 315.647278][T14282] udc-core: couldn't find an available UDC or it's busy [ 315.655508][T14282] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 315.906558][T14282] udc-core: couldn't find an available UDC or it's busy [ 315.914451][T14282] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 316.665305][ T5] usb 2-1: USB disconnect, device number 23 [ 316.990038][ T3219] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.996381][ T3219] ieee802154 phy1 wpan1: encryption failed: -22 17:53:48 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x40, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, &(0x7f0000001040)={0x24, &(0x7f0000000ec0)={0x20, 0xf, 0xb0, {0xb0, 0x21, "c2e9f16f984c103ab1130963504f00ac1619191cad7c722b07a9acc127af82c8eac8d0d63581911e7cd1d9ac4d73d8fc91a038f18eb12efec9b0611f3f16af37a53362adadacac18bd16324b13ae804f760d80ffff8e0729a0a54bfdc73f2f6166f9adda8592c286a3dc5ac69c17269e59c78c7baa708c47f14358ad4183be5bc27b2175dd3f8bbaac6902b07815a4e5af35a4ac50ec4a82afed680562eadd3fe70755a5ac338bf0d5f4e4e7c7fd"}}, &(0x7f0000000f80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44f}}, &(0x7f0000000fc0)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0x9, "30adcab6"}, @local=@item_4={0x3, 0x2, 0x2, "eadd7df7"}]}}, &(0x7f0000001000)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x48, 0x1, {0x22, 0xe4f}}}}, &(0x7f00000012c0)={0x2c, &(0x7f0000001080)={0x20, 0xa, 0xb2, "236fddfbb349ff0d7a11ef25bd52e95533d4b9e3556718212d5438613c60f0e0aa09eacb095d97ea3b7b7e9eec28a392082ee0e60cc2710a3fcdbc69afd9d132225380c54df6bd58b2dd9d1cb02f33043b96cc460582b932e8594bb243f6fe611d19167884486f6a86c6fcd5a571aef780b9035254eb11688754ebf4d94770ca651d2234982829b5bdf71cc28a9c1af1d514a7c66a8c030b6677567031acf1f9b25e13f7f4899534dcb431738cbca227286e"}, &(0x7f0000001140)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000001180)={0x0, 0x8, 0x1, 0x45}, &(0x7f00000011c0)={0x20, 0x1, 0x7b, "de8a93a63b9b504f65a2cc93fb98a0e59edc7c8d4af516e174263031cd2928f19fad3f2b3b7ec5394e625c7fa9c110453ab7ea4ed59f2fbed92b8ca8268d65984781ed584190435de215205ba8d982efd24394743965c9dbf64f9ecd490320fd9d0aa18ff53eb86cdd9f640bf531137b36b58b43e516ac948c4db4"}, &(0x7f0000001280)={0x20, 0x3, 0x1, 0x4}}) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="201179000000790e91c778eee281205fe5a796a30199906c3b65d756cfce2965c03d1874a1921f21191850263501f7ec83267fc8666d5c3bbf82786ef75b44b3216b62ad99291694dac32641ec02050e4d7ca7d9fe925dc7a2f35eff252d8ebd73d083e023068ee5f465398322b2c03d86ab2a6ebec568a013aa4b8456f7e4"], &(0x7f00000000c0)={0x0, 0x3, 0x58, @string={0x58, 0x3, "23338a983878ab91423fc18c82577ac14263492cd336b5e9e9c8986709127ffaaa291b884a3918ee1e026044a53fafaeb6730d578bf675387d35ec9a2c3bcb572850f02a4f662810d884b3b8d1c7e6e81d38bef44578"}}}, &(0x7f0000000440)={0x34, &(0x7f0000000180)={0x40, 0x15, 0x7f, "4893800f6206ae753bcdfaf908f35f297d154182bedcdd74767ecb5583942f4a1d32e262538b094f8e9d8686ad8236d68092aec10e244c4b5e0ccff9108709ea3ac6556dabc87d18b112df13e6ce5d03dfd0d8f37e6759e7cbb6ed906868c4679079b5d86c313590226375f1680b5b996313b5437d50dffc2b52469e6a3680"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0xe0}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000002c0)={0x20, 0x0, 0xf6, {0xf4, "93b4c18e929213f997b6b9c946cd309a860b21242da6837b3d4fa7defdb288f8a6581b20a789697ca88846a1306d76183443543a972df58ff995e451ca76226784ffb2f475ddebd0b97fd069a032f397ff3baef0dcea4258349fcd143a73092f9b9987da83b43a9781420dc3b6e21ce5047b502837afd203ac2c0e3746d326e4f9e1f711c4313a00372f8cb633d13a423eec329c90fe64918760c2f6d1ee298acdc952f51d0e5ca1336dc7e8bb1c143bd59d21aa9f78a758aca424674196690c60fa0ee6128edd8037873c06cd6cc0668b4eef08f1bd019c624e22a60ea06a5d32d3a4ba4b2043e50837d40bc4b4eeb82b2b8ba4"}}, &(0x7f00000003c0)={0x20, 0x1, 0x1, 0x8}, &(0x7f0000000400)={0x20, 0x0, 0x1}}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 17:53:48 executing program 3: r0 = syz_io_uring_setup(0x9a, &(0x7f0000000140)={0x0, 0x0, 0x12}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_enter(r0, 0x0, 0x0, 0x7, 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x280001, 0x0) syz_io_uring_setup(0x29fb, &(0x7f0000000040)={0x0, 0xbeee, 0x1, 0x2, 0x40, 0x0, r1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) getsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000240), &(0x7f0000000280)=0xe) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000002c0)=[@in={0x2, 0x4e23, @multicast1}, @in6={0xa, 0x4e22, 0x5, @mcast1, 0x6}], 0x2c) 17:53:48 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x208200) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, 0xffffffffffffffff, 0x0) getpid() read(0xffffffffffffffff, &(0x7f0000000180)=""/19, 0xfffffe47) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) 17:53:48 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x20}) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e20, 0x7, @private2, 0x8}}}, &(0x7f0000000040)=0x84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000180), 0x0) 17:53:48 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x208200) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) dup(0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) 17:53:48 executing program 4: r0 = syz_io_uring_setup(0x9a, &(0x7f0000000140)={0x0, 0x0, 0x12}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) r2 = syz_io_uring_setup(0x2ed5, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r5 = syz_io_uring_setup(0x2de5, &(0x7f0000000240)={0x0, 0xfffffffc}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r6}}, 0x0) r7 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x101000, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x40082406, &(0x7f0000000400)='sit\x00') r9 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x80200, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r11, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r12}]}}}]}, 0x38}}, 0x0) sendto(r10, &(0x7f00000001c0), 0x0, 0x0, &(0x7f00000002c0)=@nfc={0x27, 0x0, 0x2, 0x3}, 0x80) r13 = accept$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @local}, &(0x7f0000000200)=0x10) io_uring_register$IORING_REGISTER_FILES(r9, 0x2, &(0x7f0000000340)=[r8, 0xffffffffffffffff, r2, r10, r13], 0x5) syz_io_uring_submit(r1, r4, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd_index=0x8, 0x4, {0x0, r7}, 0xb8, 0x2, 0x0, {0x0, 0x0, r8}}, 0x8) io_uring_enter(r0, 0x0, 0x0, 0x7, 0x0, 0x0) [ 317.220458][ T37] kauditd_printk_skb: 3 callbacks suppressed [ 317.220472][ T37] audit: type=1804 audit(1618682028.719:147): pid=14358 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/108/file0/bus" dev="ramfs" ino=40758 res=1 errno=0 17:53:48 executing program 3: r0 = syz_io_uring_setup(0x9a, &(0x7f0000000140)={0x0, 0x0, 0x12}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_enter(r0, 0x0, 0x0, 0x7, 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/219, 0xdb}, {&(0x7f0000000000)=""/60, 0x3c}], 0x2, 0xf57, 0xffffffff) 17:53:48 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x208200) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, 0xffffffffffffffff, 0x0) getpid() read(0xffffffffffffffff, &(0x7f0000000180)=""/19, 0xfffffe47) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) [ 317.386936][ T37] audit: type=1804 audit(1618682028.749:148): pid=14367 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/117/file0/bus" dev="ramfs" ino=41460 res=1 errno=0 17:53:49 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x20}) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e20, 0x7, @private2, 0x8}}}, &(0x7f0000000040)=0x84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000180), 0x0) [ 317.491998][ T37] audit: type=1804 audit(1618682028.819:149): pid=14367 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/117/file0/bus" dev="ramfs" ino=41460 res=1 errno=0 17:53:49 executing program 3: r0 = syz_io_uring_setup(0x9d, &(0x7f0000000140)={0x0, 0x0, 0x12, 0xfffffffc}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_enter(r0, 0x0, 0x0, 0x7, 0x0, 0x0) [ 317.609355][ T9506] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 317.708152][ T37] audit: type=1804 audit(1618682028.919:150): pid=14381 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir150283135/syzkaller.bC4w7w/110/file0/bus" dev="ramfs" ino=41473 res=1 errno=0 17:53:49 executing program 3: r0 = syz_io_uring_setup(0x6f6a, &(0x7f0000000140)={0x0, 0x0, 0x12}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(r0, 0x0, 0x0, 0x7, 0x0, 0x0) r1 = syz_io_uring_setup(0x2ed5, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r5 = syz_io_uring_setup(0x2de5, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x0) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x8050, r0, 0x10000000) syz_io_uring_submit(r6, 0x0, &(0x7f0000000200)=@IORING_OP_STATX={0x15, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000001c0)='./file0\x00', 0x20, 0x1000, 0x0, {0x0, r4}}, 0x6) r9 = syz_io_uring_setup(0x2ed5, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) r12 = syz_io_uring_setup(0x2de5, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r13 = io_uring_register$IORING_REGISTER_PERSONALITY(r12, 0x9, 0x0, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd=r9, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r13}}, 0x0) syz_io_uring_submit(r6, r11, &(0x7f0000000440)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x2, 0x0, 0x0, 0x8}, 0x2) r14 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r8, &(0x7f00000000c0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000040)={0x80000, 0x1, 0x4}, &(0x7f0000000080)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r14}}, 0x25fd6e99) [ 317.829000][T14358] overlayfs: unrecognized mount option "context=staff_u" or missing value 17:53:49 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x20}) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e20, 0x7, @private2, 0x8}}}, &(0x7f0000000040)=0x84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000180), 0x0) [ 317.990124][ T9506] usb 2-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=ce.99 [ 317.999030][T14381] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 318.015438][ T9506] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.054621][ T9506] usb 2-1: config 0 descriptor?? [ 318.111645][ T9506] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 318.288609][T14367] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 319.241803][T14374] udc-core: couldn't find an available UDC or it's busy [ 319.248785][T14374] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 320.220637][ T9506] usb 2-1: USB disconnect, device number 24 17:53:52 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x40, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, &(0x7f0000001040)={0x24, &(0x7f0000000ec0)={0x20, 0xf, 0xb0, {0xb0, 0x21, "c2e9f16f984c103ab1130963504f00ac1619191cad7c722b07a9acc127af82c8eac8d0d63581911e7cd1d9ac4d73d8fc91a038f18eb12efec9b0611f3f16af37a53362adadacac18bd16324b13ae804f760d80ffff8e0729a0a54bfdc73f2f6166f9adda8592c286a3dc5ac69c17269e59c78c7baa708c47f14358ad4183be5bc27b2175dd3f8bbaac6902b07815a4e5af35a4ac50ec4a82afed680562eadd3fe70755a5ac338bf0d5f4e4e7c7fd"}}, &(0x7f0000000f80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44f}}, &(0x7f0000000fc0)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0x9, "30adcab6"}, @local=@item_4={0x3, 0x2, 0x2, "eadd7df7"}]}}, &(0x7f0000001000)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x48, 0x1, {0x22, 0xe4f}}}}, &(0x7f00000012c0)={0x2c, &(0x7f0000001080)={0x20, 0xa, 0xb2, "236fddfbb349ff0d7a11ef25bd52e95533d4b9e3556718212d5438613c60f0e0aa09eacb095d97ea3b7b7e9eec28a392082ee0e60cc2710a3fcdbc69afd9d132225380c54df6bd58b2dd9d1cb02f33043b96cc460582b932e8594bb243f6fe611d19167884486f6a86c6fcd5a571aef780b9035254eb11688754ebf4d94770ca651d2234982829b5bdf71cc28a9c1af1d514a7c66a8c030b6677567031acf1f9b25e13f7f4899534dcb431738cbca227286e"}, &(0x7f0000001140)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000001180)={0x0, 0x8, 0x1, 0x45}, &(0x7f00000011c0)={0x20, 0x1, 0x7b, "de8a93a63b9b504f65a2cc93fb98a0e59edc7c8d4af516e174263031cd2928f19fad3f2b3b7ec5394e625c7fa9c110453ab7ea4ed59f2fbed92b8ca8268d65984781ed584190435de215205ba8d982efd24394743965c9dbf64f9ecd490320fd9d0aa18ff53eb86cdd9f640bf531137b36b58b43e516ac948c4db4"}, &(0x7f0000001280)={0x20, 0x3, 0x1, 0x4}}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 17:53:52 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x208200) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) getpid() read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) 17:53:52 executing program 4: r0 = syz_io_uring_setup(0x6f6a, &(0x7f0000000140)={0x0, 0x0, 0x12}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(r0, 0x0, 0x0, 0x7, 0x0, 0x0) r1 = syz_io_uring_setup(0x2ed5, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r5 = syz_io_uring_setup(0x2de5, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x0) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x8050, r0, 0x10000000) syz_io_uring_submit(r6, 0x0, &(0x7f0000000200)=@IORING_OP_STATX={0x15, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000001c0)='./file0\x00', 0x20, 0x1000, 0x0, {0x0, r4}}, 0x6) r9 = syz_io_uring_setup(0x2ed5, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) r12 = syz_io_uring_setup(0x2de5, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r13 = io_uring_register$IORING_REGISTER_PERSONALITY(r12, 0x9, 0x0, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd=r9, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r13}}, 0x0) syz_io_uring_submit(r6, r11, &(0x7f0000000440)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x2, 0x0, 0x0, 0x8}, 0x2) r14 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r8, &(0x7f00000000c0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000040)={0x80000, 0x1, 0x4}, &(0x7f0000000080)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r14}}, 0x25fd6e99) 17:53:52 executing program 3: r0 = syz_io_uring_setup(0x9a, &(0x7f0000000140)={0x0, 0x0, 0x12}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_enter(r0, 0x0, 0x0, 0x7, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000000, 0x8010, r0, 0x0) r2 = syz_io_uring_setup(0x2ed5, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r5 = syz_io_uring_setup(0x2de5, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r6}}, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2007, @fd_index, 0x1000, 0x7, 0x7, 0x0, 0x67b3d3e2aeb6390e, {0x0, r7}}, 0x1) 17:53:52 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x20}) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e20, 0x7, @private2, 0x8}}}, &(0x7f0000000040)=0x84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000180), 0x0) 17:53:52 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x208200) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) dup(0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 320.772364][ T37] audit: type=1804 audit(1618682032.269:151): pid=14446 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/118/file0/bus" dev="ramfs" ino=41535 res=1 errno=0 [ 320.903456][ T37] audit: type=1804 audit(1618682032.299:152): pid=14447 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/109/file0/bus" dev="ramfs" ino=41537 res=1 errno=0 17:53:52 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x208200) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) 17:53:52 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x101000, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000400)='sit\x00') openat(r0, &(0x7f0000000000)='./file0\x00', 0x20000, 0x81) r1 = syz_io_uring_setup(0x9a, &(0x7f0000000140)={0x0, 0x0, 0x12}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_enter(r1, 0x0, 0x0, 0x7, 0x0, 0x0) [ 321.060010][ T37] audit: type=1804 audit(1618682032.299:153): pid=14447 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/109/file0/bus" dev="ramfs" ino=41537 res=1 errno=0 17:53:52 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x20}) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e20, 0x7, @private2, 0x8}}}, &(0x7f0000000040)=0x84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000180), 0x0) [ 321.129072][ T3620] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 321.223159][ T37] audit: type=1804 audit(1618682032.299:154): pid=14447 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/109/file0/bus" dev="ramfs" ino=41537 res=1 errno=0 17:53:52 executing program 3: r0 = syz_io_uring_setup(0x9a, &(0x7f0000000140)={0x0, 0x0, 0x12}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_enter(r0, 0x0, 0x0, 0x7, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000)={0x6d5, 0x3, 0x30, 0x100, 0x6, 0xe53, 0x3f, 0x400}, &(0x7f0000000040)={0x9, 0x8, 0x1, 0xb8, 0x1, 0xfffffffeffffffff, 0x3, 0x800}, &(0x7f0000000080)={0x8, 0x4, 0x5, 0x1, 0xfffffffffffffffc, 0x6, 0x380000000000, 0x5}, &(0x7f0000000200)={r1, r2+60000000}, &(0x7f0000000280)={&(0x7f0000000240)={[0x7]}, 0x8}) [ 321.297982][ T37] audit: type=1804 audit(1618682032.599:155): pid=14471 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir150283135/syzkaller.bC4w7w/112/file0/bus" dev="ramfs" ino=40829 res=1 errno=0 17:53:52 executing program 3: r0 = syz_io_uring_setup(0x9a, &(0x7f0000000140)={0x0, 0x0, 0x12, 0xffffffff}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x4376, &(0x7f0000000000)={0x0, 0x68c4, 0x1, 0x2, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) io_uring_enter(r0, 0x0, 0x0, 0x7, 0x0, 0x0) [ 321.472924][ T37] audit: type=1804 audit(1618682032.669:156): pid=14471 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir150283135/syzkaller.bC4w7w/112/file0/bus" dev="ramfs" ino=40829 res=1 errno=0 [ 321.519289][ T3620] usb 2-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=ce.99 [ 321.578127][ T3620] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 17:53:53 executing program 3: r0 = syz_io_uring_setup(0x9a, &(0x7f0000000140)={0x0, 0x0, 0x12}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r2 = syz_io_uring_setup(0x2ed5, &(0x7f00000002c0)={0x0, 0x0, 0x4, 0x0, 0x0, 0x0, r1}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r5 = syz_io_uring_setup(0x2de5, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) fcntl$addseals(r0, 0x409, 0x1) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x4007, @fd_index=0x5, 0x9, 0xffffffffffffffff, 0x6, 0x0, 0x1, {0x1}}, 0x5) io_uring_enter(r0, 0x0, 0x0, 0x7, 0x0, 0x0) [ 321.656448][ T3620] usb 2-1: config 0 descriptor?? [ 321.746049][ T3620] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 321.914238][T14447] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 322.162804][T14512] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 322.231328][T14524] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 322.850541][T14458] udc-core: couldn't find an available UDC or it's busy [ 322.857527][T14458] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 323.619221][ T3620] gspca_stv06xx: I2C: Read error writing address: -71 [ 323.628246][ T3620] usb 2-1: USB disconnect, device number 25 17:53:55 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x40, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, &(0x7f0000001040)={0x24, &(0x7f0000000ec0)={0x20, 0xf, 0xb0, {0xb0, 0x21, "c2e9f16f984c103ab1130963504f00ac1619191cad7c722b07a9acc127af82c8eac8d0d63581911e7cd1d9ac4d73d8fc91a038f18eb12efec9b0611f3f16af37a53362adadacac18bd16324b13ae804f760d80ffff8e0729a0a54bfdc73f2f6166f9adda8592c286a3dc5ac69c17269e59c78c7baa708c47f14358ad4183be5bc27b2175dd3f8bbaac6902b07815a4e5af35a4ac50ec4a82afed680562eadd3fe70755a5ac338bf0d5f4e4e7c7fd"}}, &(0x7f0000000f80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44f}}, &(0x7f0000000fc0)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0x9, "30adcab6"}, @local=@item_4={0x3, 0x2, 0x2, "eadd7df7"}]}}, &(0x7f0000001000)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x48, 0x1, {0x22, 0xe4f}}}}, &(0x7f00000012c0)={0x2c, &(0x7f0000001080)={0x20, 0xa, 0xb2, "236fddfbb349ff0d7a11ef25bd52e95533d4b9e3556718212d5438613c60f0e0aa09eacb095d97ea3b7b7e9eec28a392082ee0e60cc2710a3fcdbc69afd9d132225380c54df6bd58b2dd9d1cb02f33043b96cc460582b932e8594bb243f6fe611d19167884486f6a86c6fcd5a571aef780b9035254eb11688754ebf4d94770ca651d2234982829b5bdf71cc28a9c1af1d514a7c66a8c030b6677567031acf1f9b25e13f7f4899534dcb431738cbca227286e"}, &(0x7f0000001140)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000001180)={0x0, 0x8, 0x1, 0x45}, &(0x7f00000011c0)={0x20, 0x1, 0x7b, "de8a93a63b9b504f65a2cc93fb98a0e59edc7c8d4af516e174263031cd2928f19fad3f2b3b7ec5394e625c7fa9c110453ab7ea4ed59f2fbed92b8ca8268d65984781ed584190435de215205ba8d982efd24394743965c9dbf64f9ecd490320fd9d0aa18ff53eb86cdd9f640bf531137b36b58b43e516ac948c4db4"}, &(0x7f0000001280)={0x20, 0x3, 0x1, 0x4}}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 17:53:55 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x20}) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e20, 0x7, @private2, 0x8}}}, &(0x7f0000000040)=0x84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000180), 0x0) 17:53:55 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={r2}, &(0x7f00000000c0)=0xc) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000000)={r2, @in6={{0xa, 0x4e24, 0x2, @local, 0x8}}}, &(0x7f00000001c0)=0x84) r3 = syz_io_uring_setup(0x9b, &(0x7f0000000140)={0x0, 0x0, 0x12}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_enter(r3, 0x0, 0x0, 0x7, 0x0, 0x0) 17:53:55 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x208200) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) getpid() read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) 17:53:55 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x208200) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) dup(0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) 17:53:55 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x208200) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) [ 324.191531][ T37] kauditd_printk_skb: 2 callbacks suppressed [ 324.191545][ T37] audit: type=1804 audit(1618682035.679:159): pid=14541 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/119/file0/bus" dev="ramfs" ino=41585 res=1 errno=0 [ 324.260497][ T37] audit: type=1804 audit(1618682035.749:160): pid=14545 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/110/file0/bus" dev="ramfs" ino=40895 res=1 errno=0 [ 324.347310][ T37] audit: type=1804 audit(1618682035.749:161): pid=14545 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/110/file0/bus" dev="ramfs" ino=40895 res=1 errno=0 [ 324.381887][ T37] audit: type=1804 audit(1618682035.749:162): pid=14544 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir150283135/syzkaller.bC4w7w/113/file0/bus" dev="ramfs" ino=41589 res=1 errno=0 [ 324.436684][ T37] audit: type=1804 audit(1618682035.799:163): pid=14545 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/110/file0/bus" dev="ramfs" ino=40895 res=1 errno=0 [ 324.508132][ T37] audit: type=1804 audit(1618682035.999:164): pid=14541 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/119/file0/bus" dev="ramfs" ino=41585 res=1 errno=0 [ 324.555552][ T9475] usb 2-1: new high-speed USB device number 26 using dummy_hcd 17:53:56 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x20}) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, 0x0, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e20, 0x7, @private2, 0x8}}}, &(0x7f0000000040)=0x84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000180), 0x0) [ 324.592408][ T37] audit: type=1804 audit(1618682035.999:165): pid=14544 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir150283135/syzkaller.bC4w7w/113/file0/bus" dev="ramfs" ino=41589 res=1 errno=0 [ 324.623554][ T37] audit: type=1804 audit(1618682035.999:166): pid=14544 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir150283135/syzkaller.bC4w7w/113/file0/bus" dev="ramfs" ino=41589 res=1 errno=0 [ 324.979486][ T9475] usb 2-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=ce.99 [ 324.988587][ T9475] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.094627][T14545] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 325.100564][ T9475] usb 2-1: config 0 descriptor?? 17:53:56 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x20}) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, 0x0, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e20, 0x7, @private2, 0x8}}}, &(0x7f0000000040)=0x84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000180), 0x0) [ 325.185820][ T9475] gspca_main: STV06xx-2.14.0 probing 046d:0840 17:53:56 executing program 3: seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x9a, &(0x7f0000000140)={0x0, 0x0, 0x12}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_enter(r0, 0x0, 0x0, 0x7, 0x0, 0x0) [ 325.380744][ T37] audit: type=1326 audit(1618682036.879:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14575 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=231 compat=0 ip=0x466459 code=0x0 17:53:57 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x208200) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) getpid() read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) [ 325.473478][T14586] overlayfs: unrecognized mount option "context=staff_u" or missing value 17:53:57 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x20}) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, 0x0, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e20, 0x7, @private2, 0x8}}}, &(0x7f0000000040)=0x84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000180), 0x0) [ 325.604720][ T37] audit: type=1804 audit(1618682037.099:168): pid=14590 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/111/file0/bus" dev="ramfs" ino=41627 res=1 errno=0 [ 325.706081][T14544] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 325.731480][T14590] overlayfs: unrecognized mount option "context=staff_u" or missing value 17:53:57 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x208200) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, 0xffffffffffffffff, 0x0) read(0xffffffffffffffff, &(0x7f0000000180)=""/19, 0xfffffe47) dup(0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 326.230318][T14550] udc-core: couldn't find an available UDC or it's busy [ 326.237304][T14550] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 326.237880][T14599] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 326.990782][ T9475] gspca_stv06xx: I2C: Read error writing address: -71 [ 327.004277][ T9475] usb 2-1: USB disconnect, device number 26 17:53:59 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x40, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, &(0x7f0000001040)={0x24, &(0x7f0000000ec0)={0x20, 0xf, 0xb0, {0xb0, 0x21, "c2e9f16f984c103ab1130963504f00ac1619191cad7c722b07a9acc127af82c8eac8d0d63581911e7cd1d9ac4d73d8fc91a038f18eb12efec9b0611f3f16af37a53362adadacac18bd16324b13ae804f760d80ffff8e0729a0a54bfdc73f2f6166f9adda8592c286a3dc5ac69c17269e59c78c7baa708c47f14358ad4183be5bc27b2175dd3f8bbaac6902b07815a4e5af35a4ac50ec4a82afed680562eadd3fe70755a5ac338bf0d5f4e4e7c7fd"}}, &(0x7f0000000f80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44f}}, &(0x7f0000000fc0)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0x9, "30adcab6"}, @local=@item_4={0x3, 0x2, 0x2, "eadd7df7"}]}}, &(0x7f0000001000)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x48, 0x1, {0x22, 0xe4f}}}}, &(0x7f00000012c0)={0x2c, &(0x7f0000001080)={0x20, 0xa, 0xb2, "236fddfbb349ff0d7a11ef25bd52e95533d4b9e3556718212d5438613c60f0e0aa09eacb095d97ea3b7b7e9eec28a392082ee0e60cc2710a3fcdbc69afd9d132225380c54df6bd58b2dd9d1cb02f33043b96cc460582b932e8594bb243f6fe611d19167884486f6a86c6fcd5a571aef780b9035254eb11688754ebf4d94770ca651d2234982829b5bdf71cc28a9c1af1d514a7c66a8c030b6677567031acf1f9b25e13f7f4899534dcb431738cbca227286e"}, &(0x7f0000001140)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000001180)={0x0, 0x8, 0x1, 0x45}, &(0x7f00000011c0)={0x20, 0x1, 0x7b, "de8a93a63b9b504f65a2cc93fb98a0e59edc7c8d4af516e174263031cd2928f19fad3f2b3b7ec5394e625c7fa9c110453ab7ea4ed59f2fbed92b8ca8268d65984781ed584190435de215205ba8d982efd24394743965c9dbf64f9ecd490320fd9d0aa18ff53eb86cdd9f640bf531137b36b58b43e516ac948c4db4"}, &(0x7f0000001280)={0x20, 0x3, 0x1, 0x4}}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 17:53:59 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x208200) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) getpid() read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) 17:53:59 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x20}) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e20, 0x7, @private2, 0x8}}}, &(0x7f0000000040)=0x84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000180), 0x0) 17:53:59 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x208200) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) 17:53:59 executing program 3: r0 = syz_io_uring_setup(0x9a, &(0x7f0000000140)={0x0, 0x0, 0x12}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) r2 = syz_io_uring_setup(0x3034, &(0x7f0000000040)={0x0, 0x28f4, 0x1, 0x1, 0x283}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r4 = eventfd(0x48) r5 = syz_io_uring_setup(0x2ed5, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) r8 = syz_io_uring_setup(0x2de5, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r9}}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000280)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r4, 0x1f, 0x0, 0x2, 0x4, 0x0, {0x0, r9}}, 0x600) io_uring_enter(r0, 0x0, 0x0, 0x7, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2549, 0xd770, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_enter(r2, 0x5049, 0xe621, 0x0, &(0x7f0000000240)={[0x4]}, 0x8) 17:53:59 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x208200) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, 0xffffffffffffffff, 0x0) read(0xffffffffffffffff, &(0x7f0000000180)=""/19, 0xfffffe47) dup(0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 327.703994][T14641] overlayfs: unrecognized mount option "context=staff_u" or missing value 17:53:59 executing program 3: r0 = syz_io_uring_setup(0x9a, &(0x7f0000000140)={0x0, 0x0, 0x12}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd_index=0x4, 0x4, 0x5, 0x0, 0x2, 0x1, {0x2}}, 0x6) io_uring_enter(r0, 0x0, 0x0, 0x7, 0x0, 0x0) 17:53:59 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x20}) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e20, 0x7, @private2, 0x8}}}, &(0x7f0000000040)=0x84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000180), 0x0) [ 327.898807][T12215] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 327.968315][T14631] overlayfs: unrecognized mount option "context=staff_u" or missing value 17:53:59 executing program 3: r0 = syz_io_uring_setup(0x9a, &(0x7f0000000140)={0x0, 0x0, 0x8}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_enter(r0, 0x0, 0x0, 0x7, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x4cf4, 0xe989, 0x3, &(0x7f0000000040)={[0xe3]}, 0x8) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000004, 0x50, r0, 0x8000000) r2 = syz_io_uring_setup(0x2ed5, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r5}}, 0x0) r6 = syz_io_uring_setup(0x2ed5, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) r9 = syz_io_uring_setup(0x2de5, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd=r6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r10}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2000, @fd_index=0x8, 0x3, &(0x7f0000000340)=[{&(0x7f0000000200)=""/17, 0x11}], 0x1, 0x0, 0x1, {0x0, r10}}, 0x7) r11 = syz_io_uring_setup(0x5446, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r11, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r12}}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000080)={0x0, 0x989680}}, 0x4) 17:53:59 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x208200) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) getpid() read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) [ 328.269145][T12215] usb 2-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=ce.99 [ 328.324312][T12215] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 17:53:59 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x20}) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e20, 0x7, @private2, 0x8}}}, &(0x7f0000000040)=0x84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000180), 0x0) 17:53:59 executing program 3: r0 = syz_io_uring_setup(0x7655, &(0x7f0000000100)={0x0, 0x0, 0x12, 0x3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000000)) io_uring_enter(r0, 0x0, 0x0, 0x7, 0x0, 0x0) [ 328.374388][T12215] usb 2-1: config 0 descriptor?? [ 328.461196][T12215] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 328.635023][T14674] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 329.106537][T14695] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 329.590477][T14639] udc-core: couldn't find an available UDC or it's busy [ 329.597491][T14639] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 330.338567][T12215] gspca_stv06xx: I2C: Read error writing address: -71 [ 330.349676][T12215] usb 2-1: USB disconnect, device number 27 17:54:02 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x40, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="201179000000790e91c778eee281205fe5a796a30199906c3b65d756cfce2965c03d1874a1921f21191850263501f7ec83267fc8666d5c3bbf82786ef75b44b3216b62ad99291694dac32641ec02050e4d7ca7d9fe925dc7a2f35eff252d8ebd73d083e023068ee5f465398322b2c03d86ab2a6ebec568a013aa4b8456f7e4"], &(0x7f00000000c0)={0x0, 0x3, 0x58, @string={0x58, 0x3, "23338a983878ab91423fc18c82577ac14263492cd336b5e9e9c8986709127ffaaa291b884a3918ee1e026044a53fafaeb6730d578bf675387d35ec9a2c3bcb572850f02a4f662810d884b3b8d1c7e6e81d38bef44578"}}}, &(0x7f0000000440)={0x34, &(0x7f0000000180)={0x40, 0x15, 0x7f, "4893800f6206ae753bcdfaf908f35f297d154182bedcdd74767ecb5583942f4a1d32e262538b094f8e9d8686ad8236d68092aec10e244c4b5e0ccff9108709ea3ac6556dabc87d18b112df13e6ce5d03dfd0d8f37e6759e7cbb6ed906868c4679079b5d86c313590226375f1680b5b996313b5437d50dffc2b52469e6a3680"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0xe0}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000002c0)={0x20, 0x0, 0xf6, {0xf4, "93b4c18e929213f997b6b9c946cd309a860b21242da6837b3d4fa7defdb288f8a6581b20a789697ca88846a1306d76183443543a972df58ff995e451ca76226784ffb2f475ddebd0b97fd069a032f397ff3baef0dcea4258349fcd143a73092f9b9987da83b43a9781420dc3b6e21ce5047b502837afd203ac2c0e3746d326e4f9e1f711c4313a00372f8cb633d13a423eec329c90fe64918760c2f6d1ee298acdc952f51d0e5ca1336dc7e8bb1c143bd59d21aa9f78a758aca424674196690c60fa0ee6128edd8037873c06cd6cc0668b4eef08f1bd019c624e22a60ea06a5d32d3a4ba4b2043e50837d40bc4b4eeb82b2b8ba4"}}, &(0x7f00000003c0)={0x20, 0x1, 0x1, 0x8}, &(0x7f0000000400)={0x20, 0x0, 0x1}}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 17:54:02 executing program 3: r0 = syz_io_uring_setup(0x9a, &(0x7f0000000140)={0x0, 0x0, 0x12}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) io_uring_enter(r0, 0x0, 0x0, 0x7, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x8, 0x0, &(0x7f00000001c0)="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", 0x9, 0x0, 0x1, {0x3}}, 0x100) 17:54:02 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x208200) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) getpid() read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) 17:54:02 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x208200) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, 0xffffffffffffffff, 0x0) read(0xffffffffffffffff, &(0x7f0000000180)=""/19, 0xfffffe47) dup(0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) 17:54:02 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x20}) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e20, 0x7, @private2, 0x8}}}, &(0x7f0000000040)=0x84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000180), 0x0) 17:54:02 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x208200) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, 0xffffffffffffffff, 0x0) read(0xffffffffffffffff, &(0x7f0000000180)=""/19, 0xfffffe47) dup(0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 330.893555][ T37] kauditd_printk_skb: 13 callbacks suppressed [ 330.893569][ T37] audit: type=1804 audit(1618682042.390:182): pid=14711 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir150283135/syzkaller.bC4w7w/115/file0/bus" dev="ramfs" ino=41723 res=1 errno=0 [ 331.067745][T14727] overlayfs: unrecognized mount option "context=staff_u" or missing value 17:54:02 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x20}) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e20, 0x7, @private2, 0x8}}}, &(0x7f0000000040)=0x84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000180), 0x0) 17:54:02 executing program 3: r0 = syz_io_uring_setup(0x97, &(0x7f0000000140)={0x0, 0x6, 0x12}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x101000, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000400)='sit\x00') r2 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r2, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r4, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r8}]}}}]}, 0x38}}, 0x0) sendto(r6, &(0x7f00000001c0), 0x0, 0x0, &(0x7f00000002c0)=@nfc={0x27, 0x0, 0x2, 0x3}, 0x80) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000000)=[r2, r3, r0, r0, r4, r5, r0, r6, r0], 0x9) io_uring_enter(r0, 0x0, 0x0, 0x7, 0x0, 0x0) [ 331.209812][ T37] audit: type=1804 audit(1618682042.400:183): pid=14714 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/122/file0/bus" dev="ramfs" ino=42040 res=1 errno=0 [ 331.318570][T12215] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 331.345187][ T37] audit: type=1804 audit(1618682042.400:184): pid=14715 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/114/file0/bus" dev="ramfs" ino=42041 res=1 errno=0 [ 331.401594][T14714] overlayfs: unrecognized mount option "context=staff_u" or missing value 17:54:03 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x20}) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e20, 0x7, @private2, 0x8}}}, &(0x7f0000000040)=0x84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000180), 0x0) [ 331.583104][ T37] audit: type=1804 audit(1618682042.500:185): pid=14715 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/114/file0/bus" dev="ramfs" ino=42041 res=1 errno=0 17:54:03 executing program 3: r0 = syz_io_uring_setup(0x9a, &(0x7f0000000140)={0x0, 0x0, 0x12}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)=0x0) io_uring_enter(r0, 0x0, 0x0, 0x7, 0x0, 0x0) r2 = syz_io_uring_setup(0x2ed5, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r5 = syz_io_uring_setup(0x2de5, &(0x7f0000000240)={0x0, 0x0, 0x32dc7e4aedd0a69b}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000200)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r6}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x6, 0xab}) r8 = socket$phonet(0x23, 0x2, 0x1) syz_io_uring_submit(r3, r1, &(0x7f0000000040)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x5, 0x0, r7, 0x0, r8, 0x2, 0x0, 0x1}, 0x81) fsetxattr$trusted_overlay_upper(r8, &(0x7f0000000080)='trusted.overlay.upper\x00', &(0x7f00000001c0)={0x0, 0xfb, 0x3e, 0x2, 0x20, "31153711fd749e0c3563d375c547d311", "7afa9fde053913dd880a6d3f3ad9469880262a5cbb3006c4a50780fceddd29250f78c49cb2417195bc"}, 0x3e, 0x1) 17:54:03 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x208200) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) getpid() read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) [ 331.656951][T14711] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 331.688639][T12215] usb 2-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=ce.99 17:54:03 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x208200) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) dup(0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 331.721772][T12215] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.774394][T12215] usb 2-1: config 0 descriptor?? [ 331.820428][T12215] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 331.888917][ T37] audit: type=1804 audit(1618682043.390:186): pid=14766 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/115/file0/bus" dev="ramfs" ino=41770 res=1 errno=0 [ 331.950208][T14769] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 331.989389][ T37] audit: type=1804 audit(1618682043.490:187): pid=14767 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/123/file0/bus" dev="ramfs" ino=42062 res=1 errno=0 [ 332.040175][ T37] audit: type=1804 audit(1618682043.490:188): pid=14767 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/123/file0/bus" dev="ramfs" ino=42062 res=1 errno=0 [ 332.071370][ T37] audit: type=1804 audit(1618682043.490:189): pid=14767 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/123/file0/bus" dev="ramfs" ino=42062 res=1 errno=0 [ 332.139293][ T37] audit: type=1804 audit(1618682043.620:190): pid=14766 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/115/file0/bus" dev="ramfs" ino=41770 res=1 errno=0 [ 332.146570][T14767] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 332.920769][T14728] udc-core: couldn't find an available UDC or it's busy [ 332.927752][T14728] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 333.901158][T12215] usb 2-1: USB disconnect, device number 28 17:54:05 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x40, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="201179000000790e91c778eee281205fe5a796a30199906c3b65d756cfce2965c03d1874a1921f21191850263501f7ec83267fc8666d5c3bbf82786ef75b44b3216b62ad99291694dac32641ec02050e4d7ca7d9fe925dc7a2f35eff252d8ebd73d083e023068ee5f465398322b2c03d86ab2a6ebec568a013aa4b8456f7e4"], &(0x7f00000000c0)={0x0, 0x3, 0x58, @string={0x58, 0x3, "23338a983878ab91423fc18c82577ac14263492cd336b5e9e9c8986709127ffaaa291b884a3918ee1e026044a53fafaeb6730d578bf675387d35ec9a2c3bcb572850f02a4f662810d884b3b8d1c7e6e81d38bef44578"}}}, &(0x7f0000000440)={0x34, &(0x7f0000000180)={0x40, 0x15, 0x7f, "4893800f6206ae753bcdfaf908f35f297d154182bedcdd74767ecb5583942f4a1d32e262538b094f8e9d8686ad8236d68092aec10e244c4b5e0ccff9108709ea3ac6556dabc87d18b112df13e6ce5d03dfd0d8f37e6759e7cbb6ed906868c4679079b5d86c313590226375f1680b5b996313b5437d50dffc2b52469e6a3680"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0xe0}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000002c0)={0x20, 0x0, 0xf6, {0xf4, "93b4c18e929213f997b6b9c946cd309a860b21242da6837b3d4fa7defdb288f8a6581b20a789697ca88846a1306d76183443543a972df58ff995e451ca76226784ffb2f475ddebd0b97fd069a032f397ff3baef0dcea4258349fcd143a73092f9b9987da83b43a9781420dc3b6e21ce5047b502837afd203ac2c0e3746d326e4f9e1f711c4313a00372f8cb633d13a423eec329c90fe64918760c2f6d1ee298acdc952f51d0e5ca1336dc7e8bb1c143bd59d21aa9f78a758aca424674196690c60fa0ee6128edd8037873c06cd6cc0668b4eef08f1bd019c624e22a60ea06a5d32d3a4ba4b2043e50837d40bc4b4eeb82b2b8ba4"}}, &(0x7f00000003c0)={0x20, 0x1, 0x1, 0x8}, &(0x7f0000000400)={0x20, 0x0, 0x1}}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 17:54:05 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x208200) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) getpid() read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) 17:54:05 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x20}) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e20, 0x7, @private2, 0x8}}}, &(0x7f0000000040)=0x84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000180), 0x0) 17:54:05 executing program 3: r0 = syz_io_uring_setup(0x9a, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)=0x0) r2 = syz_io_uring_setup(0x2ed5, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_WRITEV={0x2, 0x2, 0x6000, @fd_index=0x8, 0x3f, &(0x7f0000000040)=[{&(0x7f0000000340)="27d302a52ddbc1fe34151607f90853c0b549f79328150db3ce23455bdce3b65114fe148eab27e120085fc0f4d299d37ee0dd77743911e710750b485bba796472a18cffb6139990eeabedbbf226d4dbeccb52acc60eeeb2d141b910b3b8adac3d33ff54c946051a58cf170479805958d8f8d38b4fd5dd94a155ff6fdede499eaf6fc99da1cc051d44c843cff20593b235baee93a77d2cb64bc48ea35102f6b2b775c6e9edd3fe1677d9d9c33b91", 0xad}], 0x1, 0x17, 0x1, {0x3}}, 0xfffffffd) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r6 = syz_io_uring_setup(0x2de5, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="03000069080000020000000001000000000000400000000000000000", @ANYRES32=r11, @ANYBLOB], 0x38}}, 0x0) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r12}}, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000400)=@IORING_OP_POLL_ADD={0x6, 0x3, 0x0, @fd_index=0x2, 0x0, 0x0, 0x0, {0x8081}, 0x1, {0x0, r5}}, 0xffffffff) sendto(r9, &(0x7f00000001c0), 0x0, 0x0, &(0x7f00000002c0)=@nfc={0x27, 0x0, 0x2, 0x3}, 0x80) syz_io_uring_submit(0x0, r4, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd, 0x0, 0x0, 0x100, 0x8, 0x1, {0x0, r8, r9}}, 0x8) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x0) syz_io_uring_submit(r3, r1, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x7, 0x0, 0x0) 17:54:05 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x208200) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) dup(0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) 17:54:05 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x208200) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) getpid() read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) [ 334.428525][ T9438] Bluetooth: hci3: command 0x0406 tx timeout [ 334.487702][ T37] audit: type=1804 audit(1618682045.980:191): pid=14792 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/124/file0/bus" dev="ramfs" ino=41804 res=1 errno=0 [ 334.523212][T14794] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 334.582075][T14794] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 17:54:06 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x20}) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e20, 0x7, @private2, 0x8}}}, &(0x7f0000000040)=0x84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000180), 0x0) [ 334.655828][T14803] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 334.665238][T14808] overlayfs: unrecognized mount option "context=staff_u" or missing value 17:54:06 executing program 3: r0 = syz_io_uring_setup(0x9a, &(0x7f0000000140)={0x0, 0x0, 0x12}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000002, 0x40010, r0, 0x10000000) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x101000, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000400)='sit\x00') r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x10400, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x0, 0x0, r3, 0x0, r4}, 0x1) io_uring_enter(r0, 0x0, 0x0, 0x7, 0x0, 0x0) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x101000, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000400)='sit\x00') ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000080)={'sit0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x4, 0x20, 0xd0, 0x2, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, 0x80, 0x10, 0x3b5, 0x8000}}) [ 334.868188][ T9438] usb 2-1: new high-speed USB device number 29 using dummy_hcd 17:54:06 executing program 3: r0 = syz_io_uring_setup(0x9a, &(0x7f0000000140)={0x0, 0x0, 0x12}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000c, 0x13, r0, 0x10000000) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x101000, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000400)='sit\x00') r4 = syz_io_uring_setup(0x2ed5, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) r7 = syz_io_uring_setup(0x2de5, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) r9 = accept4$rose(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x800) preadv(r9, &(0x7f0000000440)=[{&(0x7f0000000380)=""/127, 0x7f}], 0x1, 0x1, 0x7) r10 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r10, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x40082406, &(0x7f0000000200)='-&\x00') syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd=r4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_OPENAT2={0x1c, 0x7, 0x0, r3, &(0x7f0000000000)={0x2, 0x100, 0x13}, &(0x7f0000000040)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r8}}, 0xf8) io_uring_enter(r0, 0x0, 0x0, 0x7, 0x0, 0x0) read$usbfs(r3, &(0x7f00000001c0)=""/1, 0x1) 17:54:06 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x20}) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e20, 0x7, @private2, 0x8}}}, &(0x7f0000000040)=0x84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000180), 0x0) [ 335.240920][T14792] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 335.259392][ T9438] usb 2-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=ce.99 [ 335.279532][ T9438] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.310076][ T9438] usb 2-1: config 0 descriptor?? 17:54:06 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x208200) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, 0xffffffffffffffff, 0x0) read(0xffffffffffffffff, &(0x7f0000000180)=""/19, 0xfffffe47) dup(0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 335.355032][ T9438] gspca_main: STV06xx-2.14.0 probing 046d:0840 17:54:06 executing program 3: r0 = syz_io_uring_setup(0x9b, &(0x7f0000000000)={0x0, 0x0, 0x12, 0x20, 0x4000}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) r1 = syz_open_dev$vcsu(&(0x7f0000000080)='/dev/vcsu#\x00', 0x9, 0x153880) fcntl$dupfd(r1, 0x406, r0) io_uring_enter(r0, 0x0, 0x0, 0x7, 0x0, 0x0) [ 335.713694][T14842] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 336.469624][T14801] udc-core: couldn't find an available UDC or it's busy [ 336.476601][T14801] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 337.455699][ T9438] usb 2-1: USB disconnect, device number 29 17:54:09 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x40, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="201179000000790e91c778eee281205fe5a796a30199906c3b65d756cfce2965c03d1874a1921f21191850263501f7ec83267fc8666d5c3bbf82786ef75b44b3216b62ad99291694dac32641ec02050e4d7ca7d9fe925dc7a2f35eff252d8ebd73d083e023068ee5f465398322b2c03d86ab2a6ebec568a013aa4b8456f7e4"], &(0x7f00000000c0)={0x0, 0x3, 0x58, @string={0x58, 0x3, "23338a983878ab91423fc18c82577ac14263492cd336b5e9e9c8986709127ffaaa291b884a3918ee1e026044a53fafaeb6730d578bf675387d35ec9a2c3bcb572850f02a4f662810d884b3b8d1c7e6e81d38bef44578"}}}, &(0x7f0000000440)={0x34, &(0x7f0000000180)={0x40, 0x15, 0x7f, "4893800f6206ae753bcdfaf908f35f297d154182bedcdd74767ecb5583942f4a1d32e262538b094f8e9d8686ad8236d68092aec10e244c4b5e0ccff9108709ea3ac6556dabc87d18b112df13e6ce5d03dfd0d8f37e6759e7cbb6ed906868c4679079b5d86c313590226375f1680b5b996313b5437d50dffc2b52469e6a3680"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0xe0}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000002c0)={0x20, 0x0, 0xf6, {0xf4, "93b4c18e929213f997b6b9c946cd309a860b21242da6837b3d4fa7defdb288f8a6581b20a789697ca88846a1306d76183443543a972df58ff995e451ca76226784ffb2f475ddebd0b97fd069a032f397ff3baef0dcea4258349fcd143a73092f9b9987da83b43a9781420dc3b6e21ce5047b502837afd203ac2c0e3746d326e4f9e1f711c4313a00372f8cb633d13a423eec329c90fe64918760c2f6d1ee298acdc952f51d0e5ca1336dc7e8bb1c143bd59d21aa9f78a758aca424674196690c60fa0ee6128edd8037873c06cd6cc0668b4eef08f1bd019c624e22a60ea06a5d32d3a4ba4b2043e50837d40bc4b4eeb82b2b8ba4"}}, &(0x7f00000003c0)={0x20, 0x1, 0x1, 0x8}, &(0x7f0000000400)={0x20, 0x0, 0x1}}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 17:54:09 executing program 3: r0 = syz_io_uring_setup(0x9a, &(0x7f0000000140)={0x0, 0x0, 0x12}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x101000, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000400)='sit\x00') io_uring_enter(r1, 0x3c46, 0xffdf, 0x1, &(0x7f0000000000)={[0x120000000000]}, 0x8) io_uring_enter(r0, 0x0, 0x0, 0x7, 0x0, 0x0) 17:54:09 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x20}) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, 0xffffffffffffffff, 0x0, 0x8}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e20, 0x7, @private2, 0x8}}}, &(0x7f0000000040)=0x84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000180), 0x0) 17:54:09 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x208200) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) dup(0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) 17:54:09 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x208200) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) getpid() read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) 17:54:09 executing program 4: r0 = syz_io_uring_setup(0x9a, &(0x7f0000000140)={0x0, 0x0, 0x12}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000c, 0x13, r0, 0x10000000) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x101000, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000400)='sit\x00') r4 = syz_io_uring_setup(0x2ed5, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) r7 = syz_io_uring_setup(0x2de5, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) r9 = accept4$rose(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x800) preadv(r9, &(0x7f0000000440)=[{&(0x7f0000000380)=""/127, 0x7f}], 0x1, 0x1, 0x7) r10 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r10, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x40082406, &(0x7f0000000200)='-&\x00') syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd=r4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_OPENAT2={0x1c, 0x7, 0x0, r3, &(0x7f0000000000)={0x2, 0x100, 0x13}, &(0x7f0000000040)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r8}}, 0xf8) io_uring_enter(r0, 0x0, 0x0, 0x7, 0x0, 0x0) read$usbfs(r3, &(0x7f00000001c0)=""/1, 0x1) [ 337.990744][ T37] kauditd_printk_skb: 8 callbacks suppressed [ 337.990757][ T37] audit: type=1804 audit(1618682049.490:200): pid=14874 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/125/file0/bus" dev="ramfs" ino=42146 res=1 errno=0 17:54:09 executing program 3: r0 = syz_io_uring_setup(0xd0e, &(0x7f0000000140)={0x0, 0x0, 0x12, 0x0, 0xfffffffe}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x554, &(0x7f0000000000)={0x0, 0xb57b, 0x34, 0x2, 0x2a5}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000200)='./file0\x00', 0x110, 0x10000, 0x12345}, 0x6f23) io_uring_enter(r0, 0x0, 0x0, 0x7, 0x0, 0x0) [ 338.165137][ T37] audit: type=1804 audit(1618682049.490:201): pid=14874 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/125/file0/bus" dev="ramfs" ino=42146 res=1 errno=0 17:54:09 executing program 4: r0 = syz_io_uring_setup(0x9a, &(0x7f0000000140)={0x0, 0x0, 0x12}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000c, 0x13, r0, 0x10000000) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x101000, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000400)='sit\x00') r4 = syz_io_uring_setup(0x2ed5, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) r7 = syz_io_uring_setup(0x2de5, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) r9 = accept4$rose(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x800) preadv(r9, &(0x7f0000000440)=[{&(0x7f0000000380)=""/127, 0x7f}], 0x1, 0x1, 0x7) r10 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r10, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x40082406, &(0x7f0000000200)='-&\x00') syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd=r4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_OPENAT2={0x1c, 0x7, 0x0, r3, &(0x7f0000000000)={0x2, 0x100, 0x13}, &(0x7f0000000040)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r8}}, 0xf8) io_uring_enter(r0, 0x0, 0x0, 0x7, 0x0, 0x0) read$usbfs(r3, &(0x7f00000001c0)=""/1, 0x1) 17:54:09 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x20}) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, 0xffffffffffffffff, 0x0, 0x8}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e20, 0x7, @private2, 0x8}}}, &(0x7f0000000040)=0x84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000180), 0x0) [ 338.269318][ T37] audit: type=1804 audit(1618682049.490:202): pid=14874 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/125/file0/bus" dev="ramfs" ino=42146 res=1 errno=0 17:54:09 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = accept(r0, &(0x7f0000000040)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f00000001c0)=0x80) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}]}, 0x20}, 0x1, 0x0, 0x0, 0x44810}, 0x4040044) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000000)=0x4, 0x4) r2 = syz_io_uring_setup(0x2009a, &(0x7f0000000140)={0x0, 0x40000, 0x10}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_enter(r2, 0x0, 0x0, 0x7, 0x0, 0x0) [ 338.339789][ T37] audit: type=1804 audit(1618682049.590:203): pid=14881 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/117/file0/bus" dev="ramfs" ino=41872 res=1 errno=0 [ 338.407950][ T3620] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 338.446771][ T37] audit: type=1804 audit(1618682049.690:204): pid=14896 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/117/file0/bus" dev="ramfs" ino=41872 res=1 errno=0 17:54:10 executing program 4: r0 = syz_io_uring_setup(0x9a, &(0x7f0000000140)={0x0, 0x0, 0x12}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000c, 0x13, r0, 0x10000000) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x101000, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000400)='sit\x00') r4 = syz_io_uring_setup(0x2ed5, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) r7 = syz_io_uring_setup(0x2de5, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) r9 = accept4$rose(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x800) preadv(r9, &(0x7f0000000440)=[{&(0x7f0000000380)=""/127, 0x7f}], 0x1, 0x1, 0x7) r10 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r10, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x40082406, &(0x7f0000000200)='-&\x00') syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd=r4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_OPENAT2={0x1c, 0x7, 0x0, r3, &(0x7f0000000000)={0x2, 0x100, 0x13}, &(0x7f0000000040)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r8}}, 0xf8) io_uring_enter(r0, 0x0, 0x0, 0x7, 0x0, 0x0) read$usbfs(r3, &(0x7f00000001c0)=""/1, 0x1) [ 338.569399][ T37] audit: type=1804 audit(1618682049.690:205): pid=14896 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/117/file0/bus" dev="ramfs" ino=41872 res=1 errno=0 17:54:10 executing program 3: r0 = syz_io_uring_setup(0x9e, &(0x7f0000000140)={0x0, 0x0, 0x12}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000440)=0x0) r2 = syz_io_uring_setup(0x2ed5, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r5 = syz_io_uring_setup(0x2de5, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(r3, r1, &(0x7f0000000040)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x4007, @fd_index=0x8, 0x100000001, &(0x7f0000000000)=""/16, 0x10, 0x2, 0x1}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE, 0x0) r9 = syz_io_uring_setup(0x2ed5, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) r12 = syz_io_uring_setup(0x2de5, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r13 = io_uring_register$IORING_REGISTER_PERSONALITY(r12, 0x9, 0x0, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd=r9, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r13}}, 0x0) syz_io_uring_submit(0x0, r11, &(0x7f00000003c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x562f9c0d, 0x3, &(0x7f0000000380)="5e403de04a0bce29f9", 0xc43a, 0x0, 0x0, {0x1}}, 0x7f) r14 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x80000000, 0x44e501) syz_io_uring_submit(r6, r7, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x1, 0x0, r14, 0x80, &(0x7f00000001c0)=@llc={0x1a, 0x33a, 0x8, 0x7, 0x5, 0x0, @multicast}, 0x0, 0x0, 0x1}, 0x6) r15 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x101000, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r15, 0x40082406, &(0x7f0000000400)='sit\x00') io_uring_register$IORING_UNREGISTER_FILES(r15, 0x3, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x7, 0x0, 0x0) [ 338.708112][T14874] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 338.801323][ T3620] usb 2-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=ce.99 [ 338.821927][ T3620] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.866286][ T3620] usb 2-1: config 0 descriptor?? [ 338.907507][T14881] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 338.930885][ T3620] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 341.009751][ T3620] usb 2-1: USB disconnect, device number 30 17:54:13 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x40, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="201179000000790e91c778eee281205fe5a796a30199906c3b65d756cfce2965c03d1874a1921f21191850263501f7ec83267fc8666d5c3bbf82786ef75b44b3216b62ad99291694dac32641ec02050e4d7ca7d9fe925dc7a2f35eff252d8ebd73d083e023068ee5f465398322b2c03d86ab2a6ebec568a013aa4b8456f7e4"], &(0x7f00000000c0)={0x0, 0x3, 0x58, @string={0x58, 0x3, "23338a983878ab91423fc18c82577ac14263492cd336b5e9e9c8986709127ffaaa291b884a3918ee1e026044a53fafaeb6730d578bf675387d35ec9a2c3bcb572850f02a4f662810d884b3b8d1c7e6e81d38bef44578"}}}, &(0x7f0000000440)={0x34, &(0x7f0000000180)={0x40, 0x15, 0x7f, "4893800f6206ae753bcdfaf908f35f297d154182bedcdd74767ecb5583942f4a1d32e262538b094f8e9d8686ad8236d68092aec10e244c4b5e0ccff9108709ea3ac6556dabc87d18b112df13e6ce5d03dfd0d8f37e6759e7cbb6ed906868c4679079b5d86c313590226375f1680b5b996313b5437d50dffc2b52469e6a3680"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0xe0}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000002c0)={0x20, 0x0, 0xf6, {0xf4, "93b4c18e929213f997b6b9c946cd309a860b21242da6837b3d4fa7defdb288f8a6581b20a789697ca88846a1306d76183443543a972df58ff995e451ca76226784ffb2f475ddebd0b97fd069a032f397ff3baef0dcea4258349fcd143a73092f9b9987da83b43a9781420dc3b6e21ce5047b502837afd203ac2c0e3746d326e4f9e1f711c4313a00372f8cb633d13a423eec329c90fe64918760c2f6d1ee298acdc952f51d0e5ca1336dc7e8bb1c143bd59d21aa9f78a758aca424674196690c60fa0ee6128edd8037873c06cd6cc0668b4eef08f1bd019c624e22a60ea06a5d32d3a4ba4b2043e50837d40bc4b4eeb82b2b8ba4"}}, &(0x7f00000003c0)={0x20, 0x1, 0x1, 0x8}, &(0x7f0000000400)={0x20, 0x0, 0x1}}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 17:54:13 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x20}) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, 0xffffffffffffffff, 0x0, 0x8}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e20, 0x7, @private2, 0x8}}}, &(0x7f0000000040)=0x84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000180), 0x0) 17:54:13 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x208200) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) getpid() read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) dup(0xffffffffffffffff) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) 17:54:13 executing program 3: r0 = syz_io_uring_setup(0x78a0, &(0x7f0000000140)={0x0, 0x0, 0x12, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)=0x0) r2 = syz_io_uring_setup(0x2ed5, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r5 = syz_io_uring_setup(0x2de5, &(0x7f0000000400)={0x0, 0xffffffff, 0x1, 0x0, 0x3bc, 0x0, r0}, &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000280), &(0x7f00000003c0)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r6}}, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r1, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x1, {0x2, r7}}, 0x8000) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x101000, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x40082406, &(0x7f0000000400)='sit\x00') io_uring_enter(r8, 0x0, 0x0, 0x7, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/143, 0x8f}], 0x1) r9 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bsg\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r9, 0x1, 0x0, 0x0) 17:54:13 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x208200) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) dup(0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) 17:54:13 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) getpid() read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) [ 341.555179][ T37] audit: type=1804 audit(1618682053.050:206): pid=14960 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/118/file0/bus" dev="ramfs" ino=41923 res=1 errno=0 [ 341.631215][ T37] audit: type=1804 audit(1618682053.130:207): pid=14965 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/126/file0/bus" dev="ramfs" ino=42221 res=1 errno=0 [ 341.716876][ T37] audit: type=1804 audit(1618682053.130:208): pid=14966 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir150283135/syzkaller.bC4w7w/121/file0/bus" dev="ramfs" ino=42222 res=1 errno=0 17:54:13 executing program 3: r0 = syz_io_uring_setup(0x9a, &(0x7f0000000140)={0x0, 0x0, 0x12}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)=0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x11, r2, 0xb01a0000) io_uring_enter(r0, 0x0, 0x0, 0x7, 0x0, 0x0) r3 = syz_io_uring_setup(0x2ed5, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x101000, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000400)='sit\x00') io_uring_enter(r6, 0xafb, 0xa844, 0x2, &(0x7f00000001c0)={[0x4]}, 0x8) r7 = syz_io_uring_setup(0x2de5, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000140)) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r11, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="03000000000000001800128008000100736974000c00028008000100", @ANYRES32=r12, @ANYBLOB="f85af07ac89abfc08d204d7912fbe1567ddf9e153ed71b29de5ee9d06f41621dce0cb562550e9104d07fdf8010f23ef3a7957255586c6fab763c049f5f00158d9fe66e5c2f2588a8673a9ba4f752c08c24d5b72450da493e0e8ee81d368ce7bdd9aab0f4"], 0x38}}, 0x0) sendto(r10, &(0x7f00000001c0), 0x0, 0x0, &(0x7f00000002c0)=@nfc={0x27, 0x0, 0x2, 0x3}, 0x80) syz_io_uring_submit(r4, r1, &(0x7f0000000080)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x1, &(0x7f0000000040)=[r9, r2, r2, r2, r10], 0x5}, 0xfffffffa) [ 341.823664][T14965] overlayfs: unrecognized mount option "context=staff_u" or missing value 17:54:13 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x20}) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e20, 0x7, @private2, 0x8}}}, &(0x7f0000000040)=0x84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000180), 0x0) [ 341.895070][ T37] audit: type=1804 audit(1618682053.130:209): pid=14965 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/126/file0/bus" dev="ramfs" ino=42221 res=1 errno=0 [ 341.951235][ T9506] usb 2-1: new high-speed USB device number 31 using dummy_hcd 17:54:13 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x208200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) dup(0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 342.125374][T14981] syz-executor.3 (14981) used greatest stack depth: 23664 bytes left 17:54:13 executing program 3: r0 = syz_io_uring_setup(0x98, &(0x7f0000000140)={0x0, 0x1377, 0x2, 0x2, 0x78}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_enter(r0, 0x0, 0x0, 0x7, 0x0, 0x0) [ 342.328753][ T9506] usb 2-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=ce.99 [ 342.330247][T15004] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 342.350454][ T9506] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.401874][ T9506] usb 2-1: config 0 descriptor?? 17:54:14 executing program 3: r0 = syz_io_uring_setup(0x9c, &(0x7f0000000140)={0x0, 0x10, 0x1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000280), &(0x7f0000000100)) io_uring_enter(r0, 0x0, 0x0, 0x7, 0x0, 0x0) rt_sigtimedwait(&(0x7f0000000000)={[0x6]}, &(0x7f0000000200), &(0x7f00000001c0), 0x8) r1 = dup(r0) io_uring_enter(r1, 0x3ed1, 0x483e, 0x1, &(0x7f0000000080)={[0xcc75]}, 0x8) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x1, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) [ 342.491982][ T9506] gspca_main: STV06xx-2.14.0 probing 046d:0840 17:54:14 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x20}) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e20, 0x7, @private2, 0x8}}}, &(0x7f0000000040)=0x84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000180), 0x0) [ 344.528166][ T9506] gspca_stv06xx: I2C: Read error writing address: -71 [ 344.536718][ T9506] usb 2-1: USB disconnect, device number 31 17:54:16 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x40, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="201179000000790e91c778eee281205fe5a796a30199906c3b65d756cfce2965c03d1874a1921f21191850263501f7ec83267fc8666d5c3bbf82786ef75b44b3216b62ad99291694dac32641ec02050e4d7ca7d9fe925dc7a2f35eff252d8ebd73d083e023068ee5f465398322b2c03d86ab2a6ebec568a013aa4b8456f7e4"], &(0x7f00000000c0)={0x0, 0x3, 0x58, @string={0x58, 0x3, "23338a983878ab91423fc18c82577ac14263492cd336b5e9e9c8986709127ffaaa291b884a3918ee1e026044a53fafaeb6730d578bf675387d35ec9a2c3bcb572850f02a4f662810d884b3b8d1c7e6e81d38bef44578"}}}, &(0x7f0000000440)={0x34, &(0x7f0000000180)={0x40, 0x15, 0x7f, "4893800f6206ae753bcdfaf908f35f297d154182bedcdd74767ecb5583942f4a1d32e262538b094f8e9d8686ad8236d68092aec10e244c4b5e0ccff9108709ea3ac6556dabc87d18b112df13e6ce5d03dfd0d8f37e6759e7cbb6ed906868c4679079b5d86c313590226375f1680b5b996313b5437d50dffc2b52469e6a3680"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0xe0}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000002c0)={0x20, 0x0, 0xf6, {0xf4, "93b4c18e929213f997b6b9c946cd309a860b21242da6837b3d4fa7defdb288f8a6581b20a789697ca88846a1306d76183443543a972df58ff995e451ca76226784ffb2f475ddebd0b97fd069a032f397ff3baef0dcea4258349fcd143a73092f9b9987da83b43a9781420dc3b6e21ce5047b502837afd203ac2c0e3746d326e4f9e1f711c4313a00372f8cb633d13a423eec329c90fe64918760c2f6d1ee298acdc952f51d0e5ca1336dc7e8bb1c143bd59d21aa9f78a758aca424674196690c60fa0ee6128edd8037873c06cd6cc0668b4eef08f1bd019c624e22a60ea06a5d32d3a4ba4b2043e50837d40bc4b4eeb82b2b8ba4"}}, &(0x7f00000003c0)={0x20, 0x1, 0x1, 0x8}, &(0x7f0000000400)={0x20, 0x0, 0x1}}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 17:54:16 executing program 3: r0 = syz_io_uring_setup(0x9a, &(0x7f0000000140)={0x0, 0x0, 0x12}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x35cd, &(0x7f0000000040)={0x0, 0xd902, 0x10, 0x3, 0x3b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) io_uring_enter(r0, 0x0, 0x0, 0x7, 0x0, 0x0) 17:54:16 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) getpid() read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) 17:54:16 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x208200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) dup(0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) 17:54:16 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x20}) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e20, 0x7, @private2, 0x8}}}, &(0x7f0000000040)=0x84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000180), 0x0) 17:54:16 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x208200) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) getpid() read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) [ 345.065536][ T37] kauditd_printk_skb: 7 callbacks suppressed [ 345.065550][ T37] audit: type=1804 audit(1618682056.561:217): pid=15054 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir150283135/syzkaller.bC4w7w/122/file0/bus" dev="ramfs" ino=42283 res=1 errno=0 17:54:16 executing program 3: r0 = syz_io_uring_setup(0x14e1, &(0x7f0000000140)={0x0, 0x0, 0x12}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000000)) io_uring_enter(r0, 0x0, 0x0, 0x7, 0x0, 0x0) [ 345.195926][ T37] audit: type=1804 audit(1618682056.611:218): pid=15050 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/119/file0/bus" dev="ramfs" ino=43024 res=1 errno=0 [ 345.272532][ T37] audit: type=1804 audit(1618682056.631:219): pid=15060 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/128/file0/bus" dev="ramfs" ino=43026 res=1 errno=0 [ 345.312116][T15065] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 345.461692][ T37] audit: type=1804 audit(1618682056.651:220): pid=15054 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir150283135/syzkaller.bC4w7w/122/file0/bus" dev="ramfs" ino=42283 res=1 errno=0 [ 345.486965][ T9682] usb 2-1: new high-speed USB device number 32 using dummy_hcd 17:54:17 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x20}) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e20, 0x7, @private2, 0x8}}}, &(0x7f0000000040)=0x84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000180), 0x0) 17:54:17 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) statx(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x800, 0x800, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f00000045c0)={0x0, 'veth1_to_bond\x00', {0x4}, 0x40}) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x100) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) r6 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r6, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) open$dir(&(0x7f0000004440)='./file0\x00', 0x200, 0x0) perf_event_open(0x0, r6, 0xd, 0xffffffffffffffff, 0x0) r7 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000001e80)='/dev/dri/renderD128\x00', 0x1b9001, 0x0) sendto$inet(r2, &(0x7f0000000140)="1ab06e48f0fc76ba", 0x8, 0x20000800, &(0x7f0000000180)={0x2, 0x4e22, @multicast1}, 0x10) sendmsg$netlink(r0, &(0x7f0000004400)={&(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfd, 0x200000}, 0xc, &(0x7f0000004340)=[{&(0x7f00000002c0)={0x364, 0x10, 0x400, 0x70bd27, 0x25dfdbfd, "", [@generic="7b300a36520ac75257ddfd579bd1b23b1caa825110222c644d9bf783913b363cec2c92b13a9d460ab7df4f63f6d5", @generic="1438b88c91c2b2b8727ce481af532527468520f2938543a82a1b8e54dfcf2a362c9584672dadb2ef9ae758e5d6244900eccd5c0d9cad3319601349bfae8712530d4715d3c77137c27b9a2c3c6ff09205304c32e311269bae1102634765f9a0bf56cec4c3e60c9eda0c184a2bef1690ad7d4d1f78f576aa21febf52aa7ae762783e3cbf480b621d32d42f99f17f11c24a1c2f287337e470dcc37a", @typed={0x8, 0x51, 0x0, 0x0, @uid=r1}, @nested={0x10e, 0x2d, 0x0, 0x1, [@typed={0x8, 0x26, 0x0, 0x0, @u32=0xffffffff}, @typed={0xa8, 0x4f, 0x0, 0x0, @binary="c868b62caf38c2855aa51b488b2db63e14785bc989fb9cee829d7a02443969f70297a18f2d699700df51bd0fc5b92f60c1037963604da8d7bf5fb9a1785fe07b1b1c6a644f131cef20fa507676eb944624f4dc2caeab57089222f2969c75b21ef99b08b5bb2af87a284fd0f99ff78109a0469e68252e5683384ceb8849e810705fb754e7574f2ea11c46b533cbbe7ece403330db857fc3feb3febfaa89d33f0c29685a3b"}, @typed={0x5, 0x23, 0x0, 0x0, @str='\x00'}, @generic="75f659f147735890353b457e7ae43dc6aea775c5d3b99d3f465139449b752b220ec333dc653a2774deb36d1fbf7c1c4accf54e01662ece60ec08575ef0edd5f11f0a93dfb95bb1fff91e", @typed={0x8, 0x12, 0x0, 0x0, @ipv4=@broadcast}]}, @nested={0x87, 0x45, 0x0, 0x1, [@generic="59dbf28833bfec4c4d6f73c20003484863c3bf537e5ef50d440cfc0fa9e58bd42a3585d05ae37256f1bf967dc4063a90c3d7cb6aa7ce73f968bbeae5ce2b3ca5d3c8860dc1ab728fd4b03fe78d447f4f8448d713f828b07b5719b20067c2c36409b22c8844bb59b91a4da6ddaaa9609370a93c7c95b307e27075ac", @typed={0x8, 0x34, 0x0, 0x0, @pid}]}, @generic="8c06966fec3f43c86e845795ba67e6654dac930b1692bca22e3b72c33a08fb8a3d7a5669b7d0ea5680dd2ba2c04f66cc94977d834ce52c455ce5a01a389e70b02a85b21ceb88d46bdf122697312f6e8d3d2577d9c2093b2b8d8ade5403e255af0ee1cee8e469fa8c64b87b13f673a56af0afe89006b864898683258cd0dd710673ac6e73a3ed0d4b53de5faf6dab9d3993a2ce49e7c53c5566977b1acf1c389bdeda336b0344273c8d64148670c7064eadcb326f3210849fa9a07e6f3f74468530017fc42239063c19cf4c2e6a2bbe8193beb1ce1590c93fa8c0b1b2dfb880d329c3e18c494835bc1a68f6"]}, 0x364}, {&(0x7f0000000640)={0x21c, 0xfffd, 0x1, 0x70bd25, 0x25dfdbfb, "", [@typed={0xc, 0x3e, 0x0, 0x0, @str='&\'--+:%\x00'}, @nested={0x1ff, 0x84, 0x0, 0x1, [@generic="9a975215", @generic="1508cbdca99ece375e1b3afec4be4654e21003c5447b2a8936054d81c9d3d2e89d4961e1d4544a5dd39c226672032429e87471a17f2aba6c3978248def2fe23ffc00feb1a6344f04b9d7409a204c26110ccdc76f282ca4bcad03676102ba513e232d433b899a2562fcf1f68fda2c89cc2ed3f58f2ec4edcde5aad234294f63fe", @typed={0xa4, 0x2d, 0x0, 0x0, @binary="612389b2840e8654ab8c924d31b37322455211302d0a9e0d4ca5d05a986a8dab08af933c6fbc9e267cb0e5ba84d79a26d8d73b32850bab86271b6a60c78c9def9170420d2382af310dbbab18b8675abe935e15b1dc19039e123699e394816e419231cd735805164b716d3a3b9f5b1a642d0fa2207ad05195475aff0a97117a4f52ca3e40cdf44e2c3c373292e68322ea21d06eb0fe891c51955b5bffe211ef83"}, @generic="8acc85d4a40f5c46e7111678d029d30f8069529c4340792138cd0fa2113b140f8559e69fcbded3c0b4e45cf3b70cd4fb7debdfee06595c1249eb28df3bc4c48c69b0b722908c7d7a120ad2c578be968459938b71a224389238d55abac52f08c78875530db557c68bbd634cd0962da09159d9320b3b00f9ceec07c4139cf8f6696004a5c7c0a077d0056c853b1a97", @typed={0xf, 0x2c, 0x0, 0x0, @binary="466d420aaa5527a58ba9d5"}, @generic="64472abfc8015ae9154477e9ed7c452d2b42a659ab5fc3e9789c1554970473bd17bb8dc230b467ecd745015d2635b7c63ad1983b83"]}]}, 0x21c}, {&(0x7f0000000880)={0x5c, 0x35, 0x400, 0x70bd25, 0x25dfdbfc, "", [@typed={0x8, 0xb, 0x0, 0x0, @fd}, @typed={0x8, 0x77, 0x0, 0x0, @fd}, @typed={0x8, 0x34, 0x0, 0x0, @u32=0x4}, @generic="dbeee221b1fe60b70b81b1246a31e39217966df2b20eac62d6cb928c76dbe95017347144c99de77ef9ca340b9b5d91710b"]}, 0x5c}, {&(0x7f0000000900)={0x29c, 0x29, 0x20, 0x70bd2a, 0x25dfdbfe, "", [@nested={0xc, 0x5, 0x0, 0x1, [@typed={0x8, 0x40, 0x0, 0x0, @ipv4=@remote}]}, @nested={0x185, 0x81, 0x0, 0x1, [@typed={0x8, 0x2a, 0x0, 0x0, @pid=0xffffffffffffffff}, @generic="b973ce7e6b5493a71bc8b7992e408e765a36e0b4a5502f1e81e22ac05d4798af2dd45ab33ee1992171aedf2736fd70ea4c457d1f639f843abddca0a26bd4c7ad66d10f5d5e869ae06282f8df6207038c61f03ce494d783f6c29b775c83259653d53e53e225c0635269fcb0b5f7cadac1b969eb8e288939690112c1cc0d9b5e65bcc90a5553876722241c381cfdbf50d2b0877d09a0dc0c244d42d316c977fad2189d372e5b9f379bd321d1622ead426e9dac68e74b67774b147ec93e1bff7585feb7f4", @generic="f2d814c51064bff1b579f1b9bc983f1050b495f30692fa33a48b927aa0ca4fc5d0badf60157e", @typed={0x5, 0x56, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x33, 0x0, 0x0, @u32=0x3288}, @typed={0x14, 0x50, 0x0, 0x0, @ipv6=@ipv4={[], [], @broadcast}}, @generic="c497e4596d11cf9552e8974699612f31c4cd863ecf17efa4fcd427184144de2c56f0d346092a2e0fccee6f927c092cf49190d75fb86faf24da6be65ca8342fce0849e74358c0fb93d7f00e61f6e3ae0f630183968cac3a986b59d7eaaf91149351a56ea9027f896cb4ed2551"]}, @generic="d5451a3282c045ebe10ad744270bf5091ef3b20a262d6833c7dfa9", @generic="af5089577269d73123eb8c9acfecdb", @generic="9721aad07993923a9a5e40ed4b4127ce44933d648bee46a1ff47e0a3b3daa9c43d4a637a8197270b9cffede5b238f4516b5cdb3caca430784af0da8b12057d22887702fabb6effc2b8a1da9ce9b967397acd26e03862d6921c26686046e611aaeff10bb0715047bc0927250fcabd865b3b2487cff6d20914e593a6010693e12fbc41f6253b120b33cca3339cee", @generic="8251f598cf8fd47b61610c40c39fc20ffc2cf35f8a78dc739926ea1e8f65aebcee38727642debd974d56f9a6118269", @nested={0x10, 0x80, 0x0, 0x1, [@typed={0xc, 0x56, 0x0, 0x0, @u64=0x80}]}]}, 0x29c}, {&(0x7f0000000bc0)={0x1210, 0x27, 0x4, 0x70bd25, 0x25dfdbfd, "", [@typed={0x8, 0x76, 0x0, 0x0, @fd=r3}, @typed={0xc, 0x11, 0x0, 0x0, @u64=0x7}, @typed={0x6f, 0x70, 0x0, 0x0, @binary="3ed414fabffe4f6f22ad0a93760fcd7693a6f7324829be6e656df0ef4d0f3a383dddb716609aa0adc6e7a1bffff5fd733a520ddce252ffa3a9e9ff42c0456456d9b73ccbb0a2455e50aa01f542af57e888aaa808c4002f5123261b9ed3b3f26e48c47fe57dff603e055c21"}, @typed={0x14, 0x44, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @typed={0x8, 0x33, 0x0, 0x0, @uid=r5}, @nested={0x156, 0x5c, 0x0, 0x1, [@generic="6472d0880d47230ac4df99f703c9c1d96c3dde36d77da8cff3eb66acf004708156a6703719b203f13bb2110a9fd6edc356b20eb752da26286554a3c9beaae0d80e8e857e7dcdf4b38d5aece4a2a899a928e9af5a29542fda404895e008dcfd620e04b8994ff7a90ddb8df87a006eb8d33ff63060d90bc88f635741139d8f3a0f74da2a53c0e05cbc81986868ce300d4ec9ebc152ceb3857d008dcbbe6e81efbd59d87918", @generic="a301ed248ae764ca4eae89d1c0853a7da4c211e3a5058b04720d6224b234fc1fbf1d34de1fb0948344e6f128cffb44a02528f77f7ef74acb7a509cceeabae519f875838fae02e489714bba9009feb933b160f699f7f6075f2e3d4be638a3dee7a1827d7620b06c6024213672e6d2228348b82b5dfd74568cd285952d83dde8e6e4ec84b6bd01bb69b3d285e71d0bc14c428f", @typed={0x14, 0x41, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @typed={0x8, 0x5a, 0x0, 0x0, @u32=0x3f}]}, @generic="b7725d7a452101dfdaf0da6380953dd31af2df501c38332d53fbcc2110bd0b6d6cc3cc8d8ffbe8a1cf310ae6df95e89d5ee5019e87295dbfb87dd0fcd63a731a7360bcaf0effaadbbb412ce4b7cdbe304e2e72f33043e22acd1ff4c2d9ed211cabfef0685ba9d3ed5908d9aecd9fb9304956a88e26b4bb1dd379328ca21a846056a397d519f5dd0185ff0d05f1b265ce8ee5393c0c5ce0831b3178497eecff4a033f947e9c85ff34e6262ee5f3386a2a55f1d08c92225b3ead87d7d4b776fc39a42882190e7295259b64cf80be6d4494a65f171199ff984c0fba1cb8893027e7dc560657f2642296c38b8b144a3811e0ec49977055db476f3fe27e88299efa7df53149e10a0302df278561723893df1fa690df9a597cf97e87a9e3c6ca2c8642439b4985c15452e53044367e331a5ce25a2f197f9b464ec3c8f8975e8aa854937d36f48f2306a62bb36c0b2be8badd1cb31c89a55f6928ff0a9682757a97d59a2db13c76acca93d9d3dbfa82bb54ee8fd57e3ee799bc83deb5e96c31f0e03c496a59ca83b979759c7990fbcaf40ae8b46da46d83966bc3918703009ad0b020e6be4b3f12b625f13615bf32656d08d4641551ee1e4f5c0a3ab18be940c9983df52ec8ff32b14556585e6ca40cb3d62690bde90e7342de6edac5c08cc7ff3c648f6020afb3e084ba7e65082fa04838330b714ea1c1e8fc63dbc974eb82ae412e18401b86e2578d7e2557e164fcff494f67dd19527f53f0d62562703e8ccf350736ab791675c8dc59e1656c96677d882e42acf76dcf6dde5f143272d300eed16c2f4bfad68cdfb582f702461e6254a72ee277ec706f84bb0a21c7460ba7083ea0948f1196cec6614903efe5fa020bb76af08d0d0259afdff7e6d5a0fd0b3fc7c15b53a20ccde2815e5210bfcf4bc7d97d9b2e6cf752ac16392d1a4a8dd20568245b1529547c8241467fd3b4e7b7678ee06f14303f7056984fbe550a820c538f257f6206ba4ac8234a64438b3ab6df82c9874bd75626e76d632ad290f8462637377c3455bf27691fdff3d9d3c57e79640bf275995cbc0fc007d5afde51ad8d4783364b05cc3d47e8314901f85adfba186c840a10a81905b3cc2bac2fb61c72fb83f38f603261f1e916718932f0fcf913caad96c28ab0756129689b82241f98a46f0a98b24e60338f74229fbd871d3900b25978e36a2b672624c2da81cf47014e242314c1cd7b72879a32a628b8433ae75d46256facef4bbfdfd1add2abc42f91f9ae8bd692c3ad02c4282b0b1e30269ca91c8a6c21a7143144264ba81e59f31b6cfbd222fb1b585241ec9a2676758ce285d8789ecfb3e5ab4051155529614e3d290e2051a6eb3aea72239a508c3d60421ffbfda0ed53064b02004dafbc2b971ccc34e0165a0f9f5c0adcbacd5aed510eeca521a1d856932cb167f6da6d952f9a4bc93eb4ac13e100f71d95e243bfb661ab98873a241c9a5222e2d5eb382377f80d9a4c0a43595e5c0b2a98513b69f2998b40dd9ed474405fc3db3216faef395ea32acd45766a342fdf8f70ca226c58cbb0e0583a74365c966b3e978b3f365f6719f374fec6c2b8e64c7ca43f7dce9150b6023d6740216b49adfda2e4b48879421d09bf3ce474cca4a1453d433a284d5dd3a5a5f9a600a20c16f69bfe0c0d0193cbf41661f9015d9629466c6a0b730022fde4e8429280d663730833a5ce7eb42c7714ea0f6d95142eae30370f583419b92db61b23aa56ca32d147c3985ccc04229d729e0a6ed0d4649e12c01dfa840415b7faa0d7680626d98a2426479f6055766a02cf751d5a97daac851bdd91d52410095ffa7d2403ab30bf4c2818ef964fdbe10d9f4184ec3fe4b6666d0fa118a6407f5972a2302ac6c186ddba909861a02915bf959cc63d9420529daef7957354445118c42a02862b3c048f6dc278b0b3db02fbe62577bb1e8ee06d37f16afa4ecbeb24031c17cb758511f9ab5a5bf0c9144445636fc8310a82ba363093e0ae9c43efb3cc49ed59d6f60d3cc86163d3cdbc686c58f45ad990172eb5b4221b450eb4ec43d8818c6127825903c73cb10dc2254611a5b6be050771951a30ece9096512739d8396ffb855f4ff5c03e3d487c61368b98daee757588f5afc53e2c88368ae3e27dfbfb28201198ae9bbde76eea07111891d9bf2c15968c6244b9cbd2c43da4fe3a19e280205d82bc1da453fe0124d1e2ab0a1685fed1d545a9db55550d86ed7dfae8c958b3741e504152a3a393472755f6fccb2d086d09e41aa157de9708dce37616df2596a468749771c8dc40e9f0e8fcc713de386225a9a71b0822e115f748a360a41120e4170b6586f15e1f25c66382e4776762781afaa4ae6c34d89555522e437e40991ce5dec4d2a83190d3f6ebdf942b42188b5857d07eacebb9f7d9dc1a6cd2bb770fb56c541f4587bad27a761429e43454774fefd42450b425d78288378e5d72a4eb46f38fee574634b831c32da680bcc5cf6393c9f3e0b21e49ab90eb333ae89636e86f5fa5ff0ca1633a35488d8c10f192a60f753c65177119d55faccb01bc924cd70f9ca191b7259baef39f20e343d31b40863d0337a589940033a4d5bf73291be6417f2f9815a7275e175e91c5d69f0d554a52110af3f4eec6d1537d8d3d8a911f5c5894a75d360db909eac7ec88a3417cba32709f2b1d418ff090cf174e914466f82b26047d10af36d13ccbaf780f7c5a7dec5f988bb2272b6d8da5f713c38ae5f6a3ae34864779f15ebbeaa757829e46b0ce4e29ed75e5e5732e7fbc8e05e8d44f240809b8297a17984e61e894a4551688db7abeea746994cab7e5969b9ca596da9579e36d557a2be8bf34117e2ac09eb9fccdf9410a63a37e97cc7c1e1c26a33019e0211d9dd4d0711020d0d3ea192243a1816a5fe7e02777bd61539e991722e273405d3139c57affbb08bb5233bbae8a1e6b3238084cc5873d0f2c7893130100c46a4ba406b02fa91e834b250c2ebbab8fabb7ce909b09dc0359b9e5e837abf0f8398fe4fb060768bb02a992d406f3540624776b9aeafbe313cd581cd6360d8a6e866e905fff342b0aa7550620768a10c3708b02040e2d21ba061452ec1dcc9bd090033bc2e97d226a48d2ff80dd6ef097fb8cdb8f146d77659b104e0bfb12de32972a7ac776dee24a425df4f03b827b6a3c3aeace10b2caf8f2730978cb508c0fdcc8de103acd17bf2f4cf913b7903b8901aebc02aadc4a2c3d74aa9b00af639c94ff9a15015f7312b31e94a9747e83bec6dbeb0567b0eadde2ec47e39f858652e719152252564b919195a805d8f6f716d4048318bc5db27e188b504d8aaf3e6875b166e04a1fe32dbdbbe24806b6daf4a52c59fdb2410adc496be16be48e1b517ea85921dac052698f6aab789e37212d6d50f0fed055a433bccf4befbb169ff5a7db9d0749de8b1407013b2826cc3a9d962bf8346032d8f0ba2a8e1216b809306b86322962157bb37fdcb35041581ebcdb83f82a99bad09fe7866d909039c7954f58b2d9482e483f4213c39f78a5454ec1c247cc47676fb15180ff396723ad916ea95b99f4e1ff86a86a8275c3494ceba8688b054ba84acda6431083f9ae43e9cd87e635f3f99834d3950748d1b16db1c67275700a748df2cf41147d7dc3a28bb87ef5552cffff4cc677809d0a28610101d18d7ec72d0e31383d324dacb39c70fa315a0d44950ce69f96b620dc349bfc61c6bbda83b8a7bfa9dbd808eb46d0cb25b2ba3ece23613bad2d55fa9e383f9cbbde803959527db3cd2df3c29b70ba718aae9ac679c010bcef0ef2f78e3534fb37dfe3e9ccc11b8a407fa44e39278094d93a32b85409415c4bef26acddb247a4f82a26cd334e18d56d65c4eb0c3250583cb08f0e21f265d3497a5a7493f43fec0cbae39dc52b3205976ef9f99d0313dbbd621236f06262170657b165b377f72e2c70bd59b716abf5aafb56a0326f19dceed42b64826e029390a5c3fdf2fa464f6699170a936b6f235521a0f25bbfe404dc3149ec4eeccec050b441400ff92ddec6a34d1617e7f8f1cfcff04bed86284dd9dff1c84bdedc3d7e3150e9edd84c9e2fb63404d99ec14a5b4a21b6c03fd130fbfbebcd2a06cb6ace3e755c876ef5979700c811ffa8f15417e500e570248b26b5c100e29fa4f41f596533dcb992878e760dc757142c4e29484f5c8da6ccadbaacaec02df9bffec94622b7bb05142c25b13337e5095ed58ab82d4b1b3ae913c64d415c018d95a7a84018de53123d6fcda92dbf5f63d63622a2855a058b23f9e7b799b22d7c504f3916c28710c5c790a9f7a5967269c9632c318479c82dbcb852a45eaa1f7f32da2bd25e5b97f8511be560e70ec52f530dea19fe366427ba8f859829625f28dbaaa13718b129a7a10eb5c713fd8153be9e10514ffdb863bd9a9c88123d41f8077e915c4245b3853a61d0a654d53d6096ac72709eb54a8821b20a2605ec380e61c394df6282f3783df197b3617be631a8099abbe2bbe31029fabe168c65e511fef5c7db98720b0de1259cf8334fc80fadd62c5c9bb2d080561381cfd00b0bfc2102ddbffe6028c242c90f71687943e6a17f98a52e3b92f1d5df51e86b71f6087a8a72b80e27e9436a85df94dd7ab5540b5974c643db79d3dcbeea6c33e4391f74932531a58ce84ac02f31c79b837efe87ea8fa8cb10c048466c79e42a6dea7bab15bf0b6831478a6551a08cdb1bed5d98183781974967da58a948a5ffe530c7953647647462ca5867968c308bc7378a6ae1420031124e2cbb7cbc17e95afdf3c5c5a47802a5a1306adbb70d356bf468a40d199ca2e288129f1750a4d1c9579b632a3d18349ca844ce7128934d108fa36d8518c67054eeb36c32cdc8fd5dbad2f0785a5f0d22bbdc4df8b15163927ddd0ae0b587dbd46f81362eff7cea0b9ba6dbdb546dad75a0a8ccf4333803d4d49abd6b6e17e1b530689373b4fb5d25a35ab20c3dc71a7ab301f77d6662a08d71af09cea257b8f3a80dde813ba095c01a5a482ab2d9fa10951c6b5b24e8239af8556dadeb648e2323b4e87acbd087c98d3eed5130b2607615d4747c1dbd1c1f67494135dddc46836c309e2baef1d8dca973053058506fea6ba53a165266654f4906fdb7d8ccce89fdfe525f4e25e2b94397d9a408149751d815cd557461be5bb4b766e20738f1cad35df8bd8005b754eb3732cfdf67e84aead92e848837b396e8baa95d443b5e98b452c4540951f5ac495b5e0ecc3177a9fc9fb22209e1c68ea1797110c9aa4cb5967966da80c39ea59a754b9c4d07dd8f69a9f306c55452176c22435e4bf322f80dd26ad71a49244bd3466e524ad0aae53d6e5a2b27166743675b545cc810830d8aecfcb593f2c895af6094c1aa3ad9c40189236b897ee06dcfb83074774e8cdaa0eb3fed2af4f33f8719683b6dd9d4a6e5667de7ec3459dbb02eae85f65efe0377fba3c664893f0217d1d3b3edec042fc6d6c66db08c7c9e20a4dc7a06ac2be9ce38542482964a9e6ecd9a12f97e49b6c4ce1d8416e9b961b7cb82695cc325579a2e723749aedfa8d76fdd15ed7f7a394538bf993a5b2194b2734f7a5166b150154382773a782ce45e7de0e0b1b8ae28f12bf9508495293d36b44c901f0d53c5c6a81c7e39e33cb472774f1598cc5ffde5f1452de7c63f830e4e725528fffa55a208b143bb971da9b2df4c8076808fcb3cdc43936a6769a3ef40db8718cb25899899a117f42474221667c3beabc5434ee9c8d5ae06f7953662aa515a59761f395547a822d8637a7c04ab8384d", @typed={0x8, 0x30, 0x0, 0x0, @ipv4=@remote}]}, 0x1210}, {&(0x7f0000001e00)={0x44, 0x3b, 0x401, 0x70bd2a, 0x25dfdbfb, "", [@nested={0x34, 0x1f, 0x0, 0x1, [@typed={0x8, 0x57, 0x0, 0x0, @ipv4=@local}, @typed={0x14, 0x18, 0x0, 0x0, @ipv6=@mcast2}, @typed={0x14, 0x2e, 0x0, 0x0, @ipv6=@remote}]}]}, 0x44}, {&(0x7f0000001ec0)={0x1138, 0x33, 0x2, 0x70bd29, 0x25dfdbfb, "", [@typed={0x8, 0x88, 0x0, 0x0, @pid=r6}, @typed={0x8, 0x4c, 0x0, 0x0, @ipv4=@loopback}, @typed={0x8, 0x8e, 0x0, 0x0, @str='+@[\x00'}, @generic="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", @nested={0x10d, 0x63, 0x0, 0x1, [@generic="9ef5334b6068637d4c6114ab8e725eb79938d7eb215a166f9dfd47b06fbd4b9ed248705c3d8a3942d8829eac2778d32196c6314ef89f9660863a81bf65de56a18f96f00fbe78d7b82d02e7e2f412eda940a631ceab8fddcd418f5158272276871859cb586771e27f3ad3c76aaa3f1f2030cb029fc462a25e46d469fec9a681d2f43d01358e4eb13a63cd92c9134f5bddaca46820d575713a1422e93b71027c0596514a12ea522e7c5c88ce2693999a27c20e67ddcfd06c42760be2bb3c19bf9d89c6e5366c5486d75de09186a9926aa2ff4ea2c261b431dcb151301ede7ad390edd3116ff0fa5f86ba5f75083df0d191bc", @typed={0x5, 0x96, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x80, 0x0, 0x0, @fd=r7}, @typed={0x8, 0x5b, 0x0, 0x0, @uid=0xee00}]}]}, 0x1138}, {&(0x7f0000003000)={0x1d4, 0x19, 0x200, 0x70bd2d, 0x25dfdbfd, "", [@generic="1860b5027450a2e96898adf1280b105ebca4ca60be69344c923aef2e2b96cab2d6b1c5c4fec9a825d168b56fe504e22a7258d538f408ef43324f843afef3236318338bbc84c0ba52bb797ca66dcb3141a36b910282be6e3ce5abddeeca1d7f35d407fc57a711f651457e37c5c642b7c146031e2aca041f7c92626a8144d14191ec3615debf97969905f6ec75e08a5fb01d5f054b2db338b0115050b67d2020b389879a79a2c9e0b06f8a7affec3cc1ded51b5a29800df43e0cfc265487eddc9fc8d7717e6d564bab3b0689dd6cf2e4e5a02fefaa83f502b9c27b3eb7e4999ea911abf6db8faf92d4ff", @generic="291788bab82256c1bf674e0baf5b9bfdd75fb9e8d894cf82d9d0294aae0b4f5e7d9739f958b55efcb2e40dee883ae11d4e65", @generic="9426680ce6e2086e2801207c233661135deb468363a7fec661fea57fa47db9e39f5abc1ae81bdced72f5b508aa82003059c3dc14ace230d9d3d248ffd53c14c0dd3f596d2dfe8e5d1676e08d8e7f21941bdc665571b8772439bb38fa549169fbaad0b1f3dd547b5a3e07d3a21a47b2cc0059fe19319a129e9c473788cadd8d2c79e8d372c14dd2d8d45eb8944cf08cf600927c35dee2a04ef8506035599148b5", @typed={0x5, 0x4c, 0x0, 0x0, @str='\x00'}]}, 0x1d4}, {&(0x7f0000003200)={0x1114, 0x28, 0x800, 0x70bd2c, 0x25dfdbfd, "", [@nested={0x14, 0x7d, 0x0, 0x1, [@typed={0x8, 0x88, 0x0, 0x0, @u32=0x393}, @typed={0x8, 0x22, 0x0, 0x0, @ipv4=@multicast2}]}, @generic="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", @generic="b0714d5a453c0a40da5366f27a3f18131454d3bfa16b21cc747a74c01334f1010d007da79a8bd6a619767d2773411349560a76b630c4a076e67a95e4c7dfea79620c19189c832cda4433fd0b2a88865a987830ed6e8fa362873b7b0647dcdfa57a0ed24c8810b195963aed0c3ecd31c5249c88ce4f7fb14e0e76ab40b9479478c9cc022b48d2f5a59a61c990f6fbd0bd36e16ceaab090ddc990f17ce2a4866233a0ad864d1d6eb82f57704fe91aa160d04fcc4bcbf039f586febe1f7935bbc2c0f7fc6e6e8b0134de6fc71614dad011d14c08db680225729ecfd86e4a265958c49d97ce0a23f783d4eec6c6c67e657"]}, 0x1114}], 0x9, 0x0, 0x0, 0x4a000}, 0x20000884) r8 = syz_io_uring_setup(0x9a, &(0x7f0000004480)={0x0, 0x0, 0x8, 0xfffffffe, 0x0, 0x0, r3}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50}, 0x50) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004540)={0x50, 0x0, 0x0, {0x7, 0x21, 0x7, 0x680020, 0x8, 0x1, 0x10001, 0x80000001}}, 0x50) io_uring_enter(r8, 0x0, 0x0, 0x7, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000004500)="286f490f", 0x4, 0xcc090, 0x0, 0x0) [ 345.619401][ T37] audit: type=1804 audit(1618682056.701:221): pid=15060 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/128/file0/bus" dev="ramfs" ino=43026 res=1 errno=0 [ 345.741698][ T37] audit: type=1804 audit(1618682056.771:222): pid=15050 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/119/file0/bus" dev="ramfs" ino=43024 res=1 errno=0 17:54:17 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x208200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) dup(0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) 17:54:17 executing program 3: r0 = syz_io_uring_setup(0x9c, &(0x7f0000000000)={0x0, 0x2000, 0x12, 0x200002}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_enter(r0, 0x0, 0x0, 0x7, 0x0, 0x0) [ 345.887933][ T9682] usb 2-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=ce.99 [ 345.903941][ T9682] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.982270][ T37] audit: type=1804 audit(1618682057.031:223): pid=15050 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/119/file0/bus" dev="ramfs" ino=43024 res=1 errno=0 [ 345.990982][ T9682] usb 2-1: config 0 descriptor?? 17:54:17 executing program 3: r0 = syz_io_uring_setup(0x9a, &(0x7f0000000140)={0x0, 0x0, 0x12}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_enter(r0, 0x0, 0x0, 0x7, 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x101000, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000400)='sit\x00') io_uring_enter(r1, 0x27e3, 0x44e5, 0x2, &(0x7f0000000000)={[0x4]}, 0x8) [ 346.059671][ T9682] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 346.143850][ T37] audit: type=1804 audit(1618682057.381:224): pid=15054 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir150283135/syzkaller.bC4w7w/122/file0/bus" dev="ramfs" ino=42283 res=1 errno=0 [ 346.227173][T15114] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 346.268716][ T37] audit: type=1804 audit(1618682057.571:225): pid=15103 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/129/file0/bus" dev="ramfs" ino=42316 res=1 errno=0 [ 346.394128][ T37] audit: type=1804 audit(1618682057.621:226): pid=15103 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/129/file0/bus" dev="ramfs" ino=42316 res=1 errno=0 [ 346.888580][T15121] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 348.131764][ T9682] gspca_stv06xx: I2C: Read error writing address: -71 [ 348.140701][ T9682] usb 2-1: USB disconnect, device number 32 17:54:20 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x40, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="201179000000790e91c778eee281205fe5a796a30199906c3b65d756cfce2965c03d1874a1921f21191850263501f7ec83267fc8666d5c3bbf82786ef75b44b3216b62ad99291694dac32641ec02050e4d7ca7d9fe925dc7a2f35eff252d8ebd73d083e023068ee5f465398322b2c03d86ab2a6ebec568a013aa4b8456f7e4"], &(0x7f00000000c0)={0x0, 0x3, 0x58, @string={0x58, 0x3, "23338a983878ab91423fc18c82577ac14263492cd336b5e9e9c8986709127ffaaa291b884a3918ee1e026044a53fafaeb6730d578bf675387d35ec9a2c3bcb572850f02a4f662810d884b3b8d1c7e6e81d38bef44578"}}}, &(0x7f0000000440)={0x34, &(0x7f0000000180)={0x40, 0x15, 0x7f, "4893800f6206ae753bcdfaf908f35f297d154182bedcdd74767ecb5583942f4a1d32e262538b094f8e9d8686ad8236d68092aec10e244c4b5e0ccff9108709ea3ac6556dabc87d18b112df13e6ce5d03dfd0d8f37e6759e7cbb6ed906868c4679079b5d86c313590226375f1680b5b996313b5437d50dffc2b52469e6a3680"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0xe0}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000002c0)={0x20, 0x0, 0xf6, {0xf4, "93b4c18e929213f997b6b9c946cd309a860b21242da6837b3d4fa7defdb288f8a6581b20a789697ca88846a1306d76183443543a972df58ff995e451ca76226784ffb2f475ddebd0b97fd069a032f397ff3baef0dcea4258349fcd143a73092f9b9987da83b43a9781420dc3b6e21ce5047b502837afd203ac2c0e3746d326e4f9e1f711c4313a00372f8cb633d13a423eec329c90fe64918760c2f6d1ee298acdc952f51d0e5ca1336dc7e8bb1c143bd59d21aa9f78a758aca424674196690c60fa0ee6128edd8037873c06cd6cc0668b4eef08f1bd019c624e22a60ea06a5d32d3a4ba4b2043e50837d40bc4b4eeb82b2b8ba4"}}, &(0x7f00000003c0)={0x20, 0x1, 0x1, 0x8}, &(0x7f0000000400)={0x20, 0x0, 0x1}}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 17:54:20 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x20}) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8}) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e20, 0x7, @private2, 0x8}}}, &(0x7f0000000040)=0x84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000180), 0x0) 17:54:20 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)=ANY=[@ANYBLOB="48040000", @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="2c04330050800000fffffffbffff080211000001505050505050"], 0x448}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, r4, 0x2, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x8, 0x56}}}}, [""]}, 0x28}}, 0x4040000) r6 = syz_mount_image$ufs(&(0x7f0000000000)='ufs\x00', &(0x7f0000000040)='./file0\x00', 0xa26, 0x3, &(0x7f0000000240)=[{&(0x7f0000000080)="35c2daec61d56653366005", 0xb, 0x9}, {&(0x7f00000001c0)="159cfa84c72477e4", 0x8, 0x7}, {&(0x7f0000000200)="a60c8b6586", 0x5, 0xfffffffffffffff9}], 0x200080, &(0x7f00000002c0)={[{'-\x9d%.%'}, {}, {}], [{@fowner_lt={'fowner<', 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, '(@/'}}, {@fowner_gt={'fowner>'}}, {@subj_user={'subj_user'}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}]}) openat(r6, &(0x7f0000000340)='./file0\x00', 0x111080, 0x21) r7 = syz_io_uring_setup(0x9a, &(0x7f0000000140)={0x0, 0x0, 0x12}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_enter(r7, 0x0, 0x0, 0x7, 0x0, 0x0) 17:54:20 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) getpid() read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) 17:54:20 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r0, 0x0) read(r0, &(0x7f0000000180)=""/19, 0xfffffe47) dup(0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) 17:54:20 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) getpid() read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) [ 348.763334][T15143] loop3: detected capacity change from 0 to 16383 [ 348.766709][T15148] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 348.916278][T15143] ufs: ufs was compiled with read-only support, can't be mounted as read-write 17:54:20 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r0, 0x0) read(r0, &(0x7f0000000180)=""/19, 0xfffffe47) dup(0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) 17:54:20 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x20}) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8}) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000180), 0x0) [ 349.057530][ T3620] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 349.085667][T15151] loop3: detected capacity change from 0 to 16383 [ 349.095157][T15151] ufs: ufs was compiled with read-only support, can't be mounted as read-write 17:54:20 executing program 3: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f00000001c0)={0x20, 0x24, 0xea, {0xea, 0x6, "c65e2eda14a2a6e19c18a2579f2052e3a18ed96d17be3de73b19cfd2bc88cb02f4b820f6ffe69f05621779036dfb007e05f02314997152563a4901d00ccc283395f4f57d567e7ecfcccc9ad04bddf117787d7bc3cad5136108ed9618fd30c787375a5c5de0187f3852d8297c7b9c9f8350cd86e6bfa10fadb0126a37d18da40c31ad988ac2b56d33f95d41b3b1901d6cb54aacd57ef9240c7f6492c45973e3b078f25242492f1fa4e2a2bd6f00701da790c4699b7a2f05998dd3eaf382228b5bfda51cf292d9364707c1c9fe959744ea8a76b0ad7121a6418544b00323be5798d2a03e806e2b58a3"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xd04c}}, &(0x7f0000000040)={0x0, 0xf, 0xf, {0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x53, 0x19, 0x7}]}}, &(0x7f0000000080)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x4, 0x4, 0x96, "8adf4b77", "1e71064c"}}, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7f, 0x10, 0x3, 0x0, 0x4, 0x3, 0x9}}}, &(0x7f0000000780)={0x84, &(0x7f0000000340)={0x40, 0x0, 0x3b, "d659e1c66b4a0b5a99128eb16c7998691dd7598743654673d70606100480655d766020615763c50778faaf05563aebb0c22c96c118554891941b45"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x24}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0xe0}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x6}}, &(0x7f0000000480)={0x20, 0x0, 0x8, {0x4, 0x2, [0xf0f0]}}, &(0x7f00000004c0)={0x40, 0x7, 0x2, 0x7}, &(0x7f0000000500)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000540)={0x40, 0xb, 0x2, "e183"}, &(0x7f0000000580)={0x40, 0xf, 0x2, 0x1}, &(0x7f00000005c0)={0x40, 0x13, 0x6, @local}, &(0x7f0000000600)={0x40, 0x17, 0x6, @random="c7a2074a142f"}, &(0x7f0000000640)={0x40, 0x19, 0x2, "ed22"}, &(0x7f0000000680)={0x40, 0x1a, 0x2, 0x7f}, &(0x7f00000006c0)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000000700)={0x40, 0x1e, 0x1, 0x7f}, &(0x7f0000000740)={0x40, 0x21, 0x1, 0x3f}}) r1 = syz_io_uring_setup(0x9a, &(0x7f0000000140)={0x0, 0x0, 0x12}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_enter(r1, 0x0, 0x0, 0x7, 0x0, 0x0) 17:54:20 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r0, 0x0) read(r0, &(0x7f0000000180)=""/19, 0xfffffe47) dup(0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) 17:54:20 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x208200) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) dup(0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 349.428139][ T3620] usb 2-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=ce.99 [ 349.451943][ T3620] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.517637][ T3620] usb 2-1: config 0 descriptor?? 17:54:21 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x20}) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8}) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000180), 0x0) [ 349.559503][ T3620] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 349.627503][ T36] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 349.793098][T15184] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 349.827516][ T36] usb 4-1: device descriptor read/64, error 18 [ 350.127453][ T36] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 350.347318][ T36] usb 4-1: device descriptor read/64, error 18 [ 350.477552][ T36] usb usb4-port1: attempt power cycle [ 351.217283][ T36] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 351.417412][ T36] usb 4-1: device descriptor read/8, error -61 [ 351.617323][ T3620] gspca_stv06xx: I2C: Read error writing address: -71 [ 351.625528][ T3620] usb 2-1: USB disconnect, device number 33 [ 351.707379][ T36] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 351.897703][ T36] usb 4-1: device descriptor read/8, error -61 [ 352.017489][ T36] usb usb4-port1: unable to enumerate USB device 17:54:23 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x40, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="201179000000790e91c778eee281205fe5a796a30199906c3b65d756cfce2965c03d1874a1921f21191850263501f7ec83267fc8666d5c3bbf82786ef75b44b3216b62ad99291694dac32641ec02050e4d7ca7d9fe925dc7a2f35eff252d8ebd73d083e023068ee5f465398322b2c03d86ab2a6ebec568a013aa4b8456f7e4"], &(0x7f00000000c0)={0x0, 0x3, 0x58, @string={0x58, 0x3, "23338a983878ab91423fc18c82577ac14263492cd336b5e9e9c8986709127ffaaa291b884a3918ee1e026044a53fafaeb6730d578bf675387d35ec9a2c3bcb572850f02a4f662810d884b3b8d1c7e6e81d38bef44578"}}}, &(0x7f0000000440)={0x34, &(0x7f0000000180)={0x40, 0x15, 0x7f, "4893800f6206ae753bcdfaf908f35f297d154182bedcdd74767ecb5583942f4a1d32e262538b094f8e9d8686ad8236d68092aec10e244c4b5e0ccff9108709ea3ac6556dabc87d18b112df13e6ce5d03dfd0d8f37e6759e7cbb6ed906868c4679079b5d86c313590226375f1680b5b996313b5437d50dffc2b52469e6a3680"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0xe0}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000002c0)={0x20, 0x0, 0xf6, {0xf4, "93b4c18e929213f997b6b9c946cd309a860b21242da6837b3d4fa7defdb288f8a6581b20a789697ca88846a1306d76183443543a972df58ff995e451ca76226784ffb2f475ddebd0b97fd069a032f397ff3baef0dcea4258349fcd143a73092f9b9987da83b43a9781420dc3b6e21ce5047b502837afd203ac2c0e3746d326e4f9e1f711c4313a00372f8cb633d13a423eec329c90fe64918760c2f6d1ee298acdc952f51d0e5ca1336dc7e8bb1c143bd59d21aa9f78a758aca424674196690c60fa0ee6128edd8037873c06cd6cc0668b4eef08f1bd019c624e22a60ea06a5d32d3a4ba4b2043e50837d40bc4b4eeb82b2b8ba4"}}, &(0x7f00000003c0)={0x20, 0x1, 0x1, 0x8}, &(0x7f0000000400)={0x20, 0x0, 0x1}}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 17:54:23 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x208200) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) dup(0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) 17:54:23 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x208200) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) getpid() read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) 17:54:23 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x208200) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) dup(0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) 17:54:23 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x20}) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8}) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000180), 0x0) [ 352.202857][ T37] kauditd_printk_skb: 18 callbacks suppressed [ 352.202871][ T37] audit: type=1804 audit(1618682063.701:245): pid=15214 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir150283135/syzkaller.bC4w7w/124/file0/bus" dev="ramfs" ino=42397 res=1 errno=0 [ 352.302543][ T37] audit: type=1804 audit(1618682063.711:246): pid=15215 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/121/file0/bus" dev="ramfs" ino=42399 res=1 errno=0 17:54:23 executing program 3: r0 = syz_io_uring_setup(0x9a, &(0x7f0000000140)={0x0, 0x0, 0x12}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000040)) io_uring_enter(r0, 0x0, 0x0, 0x7, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000000), 0x1) [ 352.469012][T15214] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 352.470391][ T37] audit: type=1804 audit(1618682063.781:247): pid=15216 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/134/bus" dev="sda1" ino=14778 res=1 errno=0 [ 352.529863][T15216] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 352.540682][ T3620] usb 2-1: new high-speed USB device number 34 using dummy_hcd 17:54:24 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x20}) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8}) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000180), 0x0) [ 352.666600][ T37] audit: type=1804 audit(1618682063.791:248): pid=15214 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir150283135/syzkaller.bC4w7w/124/file0/bus" dev="ramfs" ino=42397 res=1 errno=0 17:54:24 executing program 3: r0 = syz_io_uring_setup(0x9a, &(0x7f0000000040)={0x0, 0xffffffff, 0x12, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000004, 0x20010, r0, 0x10000000) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x101000, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000400)='sit\x00') r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = syz_io_uring_setup(0x2ed5, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) r7 = syz_io_uring_setup(0x2de5, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd=r4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000340)=""/190, 0xbe}], 0x2) r9 = syz_io_uring_setup(0x2ed5, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) r12 = syz_io_uring_setup(0x2de5, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r13 = io_uring_register$IORING_REGISTER_PERSONALITY(r12, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd_index=0x3, 0x4, &(0x7f0000001440)="5fb116e34bdf0b8083654cc17d86cc9e7c2fcbbaeb5b8d247e0d794c25b0967642fd1a6355f8570e586b2a5a5ea7234cabeaef699799c17f9323b0b724ce9488c5ce238411d831af35a8460d4f0a80f46a3d3714371e1d90d24621e25a9b8f592ed29e9eb23dfa5a16d74a1eb88aec4ce49f98f9a21d27baa8b34e34056df8f0d6512200c578c2f387ac38111317e0891da48c3cea28ed731e58d62589", 0x9d, 0x9, 0x1, {0x0, r8}}, 0x4) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd=r9, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r13}}, 0x0) syz_io_uring_submit(r10, r1, &(0x7f0000000140)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r2, &(0x7f00000000c0)={0x20002010}, r3, 0x1, 0x0, 0x0, {0x0, r8}}, 0x400) io_uring_enter(r0, 0x0, 0x0, 0x7, 0x0, 0x0) 17:54:24 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x208200) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) dup(0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) 17:54:24 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x20}) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8}) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e20, 0x7, @private2, 0x8}}}, &(0x7f0000000040)=0x84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000180), 0x0) [ 352.773243][ T37] audit: type=1804 audit(1618682063.801:249): pid=15216 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/134/bus" dev="sda1" ino=14778 res=1 errno=0 [ 352.866700][ T37] audit: type=1804 audit(1618682063.801:250): pid=15216 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/134/bus" dev="sda1" ino=14778 res=1 errno=0 [ 352.984320][ T37] audit: type=1804 audit(1618682063.831:251): pid=15214 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir150283135/syzkaller.bC4w7w/124/file0/bus" dev="ramfs" ino=42397 res=1 errno=0 [ 353.009729][ T3620] usb 2-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=ce.99 [ 353.041198][ T3620] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.106421][ T3620] usb 2-1: config 0 descriptor?? 17:54:24 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x20}) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8}) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000180), 0x0) 17:54:24 executing program 3: r0 = syz_io_uring_setup(0x9a, &(0x7f0000000140)={0x0, 0x0, 0x12}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_enter(r0, 0x3589, 0x94cb, 0x3, &(0x7f0000000000)={[0x5]}, 0x8) io_uring_enter(r0, 0x0, 0x0, 0x7, 0x0, 0x0) [ 353.177704][T15252] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 353.183176][ T3620] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 353.224704][ T37] audit: type=1804 audit(1618682064.541:252): pid=15252 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/135/file0/bus" dev="ramfs" ino=42436 res=1 errno=0 [ 353.313387][ T37] audit: type=1804 audit(1618682064.551:253): pid=15252 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/135/file0/bus" dev="ramfs" ino=42436 res=1 errno=0 [ 353.389754][ T37] audit: type=1804 audit(1618682064.561:254): pid=15252 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/135/file0/bus" dev="ramfs" ino=42436 res=1 errno=0 [ 354.147112][T15281] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 355.207137][ T3620] gspca_stv06xx: I2C: Read error writing address: -71 [ 355.216008][ T3620] usb 2-1: USB disconnect, device number 34 17:54:27 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x40, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="201179000000790e91c778eee281205fe5a796a30199906c3b65d756cfce2965c03d1874a1921f21191850263501f7ec83267fc8666d5c3bbf82786ef75b44b3216b62ad99291694dac32641ec02050e4d7ca7d9fe925dc7a2f35eff252d8ebd73d083e023068ee5f465398322b2c03d86ab2a6ebec568a013aa4b8456f7e4"], &(0x7f00000000c0)={0x0, 0x3, 0x58, @string={0x58, 0x3, "23338a983878ab91423fc18c82577ac14263492cd336b5e9e9c8986709127ffaaa291b884a3918ee1e026044a53fafaeb6730d578bf675387d35ec9a2c3bcb572850f02a4f662810d884b3b8d1c7e6e81d38bef44578"}}}, &(0x7f0000000440)={0x34, &(0x7f0000000180)={0x40, 0x15, 0x7f, "4893800f6206ae753bcdfaf908f35f297d154182bedcdd74767ecb5583942f4a1d32e262538b094f8e9d8686ad8236d68092aec10e244c4b5e0ccff9108709ea3ac6556dabc87d18b112df13e6ce5d03dfd0d8f37e6759e7cbb6ed906868c4679079b5d86c313590226375f1680b5b996313b5437d50dffc2b52469e6a3680"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0xe0}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000002c0)={0x20, 0x0, 0xf6, {0xf4, "93b4c18e929213f997b6b9c946cd309a860b21242da6837b3d4fa7defdb288f8a6581b20a789697ca88846a1306d76183443543a972df58ff995e451ca76226784ffb2f475ddebd0b97fd069a032f397ff3baef0dcea4258349fcd143a73092f9b9987da83b43a9781420dc3b6e21ce5047b502837afd203ac2c0e3746d326e4f9e1f711c4313a00372f8cb633d13a423eec329c90fe64918760c2f6d1ee298acdc952f51d0e5ca1336dc7e8bb1c143bd59d21aa9f78a758aca424674196690c60fa0ee6128edd8037873c06cd6cc0668b4eef08f1bd019c624e22a60ea06a5d32d3a4ba4b2043e50837d40bc4b4eeb82b2b8ba4"}}, &(0x7f00000003c0)={0x20, 0x1, 0x1, 0x8}, &(0x7f0000000400)={0x20, 0x0, 0x1}}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 17:54:27 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r0, 0x208200) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) dup(0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) 17:54:27 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x20}) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e20, 0x7, @private2, 0x8}}}, &(0x7f0000000040)=0x84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000180), 0x0) 17:54:27 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x20}) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8}) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000180), 0x0) 17:54:27 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x40, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="201179000000790e91c778eee281205fe5a796a30199906c3b65d756cfce2965c03d1874a1921f21191850263501f7ec83267fc8666d5c3bbf82786ef75b44b3216b62ad99291694dac32641ec02050e4d7ca7d9fe925dc7a2f35eff252d8ebd73d083e023068ee5f465398322b2c03d86ab2a6ebec568a013aa4b8456f7e4"], &(0x7f00000000c0)={0x0, 0x3, 0x58, @string={0x58, 0x3, "23338a983878ab91423fc18c82577ac14263492cd336b5e9e9c8986709127ffaaa291b884a3918ee1e026044a53fafaeb6730d578bf675387d35ec9a2c3bcb572850f02a4f662810d884b3b8d1c7e6e81d38bef44578"}}}, &(0x7f0000000440)={0x34, &(0x7f0000000180)={0x40, 0x15, 0x7f, "4893800f6206ae753bcdfaf908f35f297d154182bedcdd74767ecb5583942f4a1d32e262538b094f8e9d8686ad8236d68092aec10e244c4b5e0ccff9108709ea3ac6556dabc87d18b112df13e6ce5d03dfd0d8f37e6759e7cbb6ed906868c4679079b5d86c313590226375f1680b5b996313b5437d50dffc2b52469e6a3680"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0xe0}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000002c0)={0x20, 0x0, 0xf6, {0xf4, "93b4c18e929213f997b6b9c946cd309a860b21242da6837b3d4fa7defdb288f8a6581b20a789697ca88846a1306d76183443543a972df58ff995e451ca76226784ffb2f475ddebd0b97fd069a032f397ff3baef0dcea4258349fcd143a73092f9b9987da83b43a9781420dc3b6e21ce5047b502837afd203ac2c0e3746d326e4f9e1f711c4313a00372f8cb633d13a423eec329c90fe64918760c2f6d1ee298acdc952f51d0e5ca1336dc7e8bb1c143bd59d21aa9f78a758aca424674196690c60fa0ee6128edd8037873c06cd6cc0668b4eef08f1bd019c624e22a60ea06a5d32d3a4ba4b2043e50837d40bc4b4eeb82b2b8ba4"}}, &(0x7f00000003c0)={0x20, 0x1, 0x1, 0x8}, &(0x7f0000000400)={0x20, 0x0, 0x1}}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 17:54:27 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x208200) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) getpid() read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) [ 355.900088][T15315] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 356.009437][ T4818] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 356.117726][ T5] usb 2-1: new high-speed USB device number 35 using dummy_hcd 17:54:27 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x20}) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8}) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000180), 0x0) 17:54:27 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = fcntl$dupfd(r0, 0x0, r0) connect$netlink(r1, &(0x7f0000000000)=@proc, 0xc) [ 356.387705][ T4818] usb 4-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=ce.99 [ 356.416608][ T4818] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.477460][ T5] usb 2-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=ce.99 [ 356.486541][ T5] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.510200][ T4818] usb 4-1: config 0 descriptor?? [ 356.549561][ T4818] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 356.607298][ T5] usb 2-1: config 0 descriptor?? [ 356.680190][ T5] gspca_main: STV06xx-2.14.0 probing 046d:0840 17:54:28 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x20}) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8}) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000180), 0x0) 17:54:28 executing program 4: r0 = shmat(0x0, &(0x7f0000002000/0x3000)=nil, 0x6000) shmdt(r0) shmat(0x0, &(0x7f0000005000/0x3000)=nil, 0x4000) 17:54:28 executing program 4: clock_gettime(0x4ef505a7ffd92c63, 0x0) 17:54:28 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r0, 0x208200) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) dup(0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 357.560457][T15353] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 358.166075][T15321] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 358.607112][ T4818] gspca_stv06xx: I2C: Read error writing address: -71 [ 358.623488][ T4818] usb 4-1: USB disconnect, device number 8 [ 358.727121][ T5] gspca_stv06xx: I2C: Read error writing address: -71 [ 358.735404][ T5] usb 2-1: USB disconnect, device number 35 17:54:30 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x40, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="201179000000790e91c778eee281205fe5a796a30199906c3b65d756cfce2965c03d1874a1921f21191850263501f7ec83267fc8666d5c3bbf82786ef75b44b3216b62ad99291694dac32641ec02050e4d7ca7d9fe925dc7a2f35eff252d8ebd73d083e023068ee5f465398322b2c03d86ab2a6ebec568a013aa4b8456f7e4"], &(0x7f00000000c0)={0x0, 0x3, 0x58, @string={0x58, 0x3, "23338a983878ab91423fc18c82577ac14263492cd336b5e9e9c8986709127ffaaa291b884a3918ee1e026044a53fafaeb6730d578bf675387d35ec9a2c3bcb572850f02a4f662810d884b3b8d1c7e6e81d38bef44578"}}}, &(0x7f0000000440)={0x34, &(0x7f0000000180)={0x40, 0x15, 0x7f, "4893800f6206ae753bcdfaf908f35f297d154182bedcdd74767ecb5583942f4a1d32e262538b094f8e9d8686ad8236d68092aec10e244c4b5e0ccff9108709ea3ac6556dabc87d18b112df13e6ce5d03dfd0d8f37e6759e7cbb6ed906868c4679079b5d86c313590226375f1680b5b996313b5437d50dffc2b52469e6a3680"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0xe0}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000002c0)={0x20, 0x0, 0xf6, {0xf4, "93b4c18e929213f997b6b9c946cd309a860b21242da6837b3d4fa7defdb288f8a6581b20a789697ca88846a1306d76183443543a972df58ff995e451ca76226784ffb2f475ddebd0b97fd069a032f397ff3baef0dcea4258349fcd143a73092f9b9987da83b43a9781420dc3b6e21ce5047b502837afd203ac2c0e3746d326e4f9e1f711c4313a00372f8cb633d13a423eec329c90fe64918760c2f6d1ee298acdc952f51d0e5ca1336dc7e8bb1c143bd59d21aa9f78a758aca424674196690c60fa0ee6128edd8037873c06cd6cc0668b4eef08f1bd019c624e22a60ea06a5d32d3a4ba4b2043e50837d40bc4b4eeb82b2b8ba4"}}, &(0x7f00000003c0)={0x20, 0x1, 0x1, 0x8}, &(0x7f0000000400)={0x20, 0x0, 0x1}}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 17:54:30 executing program 4: request_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0) 17:54:30 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r0, 0x208200) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) dup(0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) 17:54:30 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x20}) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8}) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000180), 0x0) 17:54:30 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/autofs\x00', 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x0) 17:54:30 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x208200) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) getpid() read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) 17:54:30 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x20000000}) [ 359.295793][ T37] kauditd_printk_skb: 5 callbacks suppressed [ 359.295807][ T37] audit: type=1804 audit(1618682070.791:260): pid=15386 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/123/file0/bus" dev="ramfs" ino=43257 res=1 errno=0 17:54:30 executing program 4: r0 = socket(0x11, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) [ 359.450037][ T37] audit: type=1804 audit(1618682070.811:261): pid=15386 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/123/file0/bus" dev="ramfs" ino=43257 res=1 errno=0 [ 359.486438][T15398] overlayfs: unrecognized mount option "context=staff_u" or missing value 17:54:31 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xd, 0x20, 0x4, 0x4, 0x4}, 0x40) [ 359.658256][ T9682] usb 2-1: new high-speed USB device number 36 using dummy_hcd 17:54:31 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002440)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000002480)={0x2020}, 0x2020) 17:54:31 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x9, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x61}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 359.918110][ T37] audit: type=1804 audit(1618682071.401:262): pid=15386 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/123/file0/bus" dev="ramfs" ino=43257 res=1 errno=0 17:54:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000600)='ethtool\x00', 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000000100)=ANY=[@ANYBLOB="24020000", @ANYRES16=r1, @ANYBLOB="0f0925bd7000fbdbdf250b0000000c00018008000300000000004400018008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000300020000001400020064756d6d793000000000000000000000140002006261746164765f736c6176655f3000000c00018008000100", @ANYRES32, @ANYBLOB="64000180080003000000000008000100", @ANYRES32, @ANYBLOB='\b'], 0x224}}, 0x0) [ 360.037371][ T9682] usb 2-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=ce.99 [ 360.066545][ T9682] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.149638][ T9682] usb 2-1: config 0 descriptor?? [ 360.239112][ T9682] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 360.500265][T15421] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 362.296839][ T9682] gspca_stv06xx: I2C: Read error writing address: -71 [ 362.305964][ T9682] usb 2-1: USB disconnect, device number 36 17:54:34 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x40, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="201179000000790e91c778eee281205fe5a796a30199906c3b65d756cfce2965c03d1874a1921f21191850263501f7ec83267fc8666d5c3bbf82786ef75b44b3216b62ad99291694dac32641ec02050e4d7ca7d9fe925dc7a2f35eff252d8ebd73d083e023068ee5f465398322b2c03d86ab2a6ebec568a013aa4b8456f7e4"], &(0x7f00000000c0)={0x0, 0x3, 0x58, @string={0x58, 0x3, "23338a983878ab91423fc18c82577ac14263492cd336b5e9e9c8986709127ffaaa291b884a3918ee1e026044a53fafaeb6730d578bf675387d35ec9a2c3bcb572850f02a4f662810d884b3b8d1c7e6e81d38bef44578"}}}, &(0x7f0000000440)={0x34, &(0x7f0000000180)={0x40, 0x15, 0x7f, "4893800f6206ae753bcdfaf908f35f297d154182bedcdd74767ecb5583942f4a1d32e262538b094f8e9d8686ad8236d68092aec10e244c4b5e0ccff9108709ea3ac6556dabc87d18b112df13e6ce5d03dfd0d8f37e6759e7cbb6ed906868c4679079b5d86c313590226375f1680b5b996313b5437d50dffc2b52469e6a3680"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0xe0}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000002c0)={0x20, 0x0, 0xf6, {0xf4, "93b4c18e929213f997b6b9c946cd309a860b21242da6837b3d4fa7defdb288f8a6581b20a789697ca88846a1306d76183443543a972df58ff995e451ca76226784ffb2f475ddebd0b97fd069a032f397ff3baef0dcea4258349fcd143a73092f9b9987da83b43a9781420dc3b6e21ce5047b502837afd203ac2c0e3746d326e4f9e1f711c4313a00372f8cb633d13a423eec329c90fe64918760c2f6d1ee298acdc952f51d0e5ca1336dc7e8bb1c143bd59d21aa9f78a758aca424674196690c60fa0ee6128edd8037873c06cd6cc0668b4eef08f1bd019c624e22a60ea06a5d32d3a4ba4b2043e50837d40bc4b4eeb82b2b8ba4"}}, &(0x7f00000003c0)={0x20, 0x1, 0x1, 0x8}, &(0x7f0000000400)={0x20, 0x0, 0x1}}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 17:54:34 executing program 3: set_mempolicy(0x3, &(0x7f0000000000)=0x1, 0x5) socket$nl_generic(0x10, 0x3, 0x10) 17:54:34 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x20}) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8}) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000180), 0x0) 17:54:34 executing program 4: syz_open_dev$evdev(&(0x7f0000002580)='/dev/input/event#\x00', 0x376, 0x200003) 17:54:34 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x208200) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r0, 0x0) read(r0, &(0x7f0000000180)=""/19, 0xfffffe47) dup(0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) 17:54:34 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x208200) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) getpid() read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) 17:54:34 executing program 3: shmat(0x0, &(0x7f0000ffb000/0x3000)=nil, 0xa000) 17:54:34 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x208200) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r0, 0x0) read(r0, &(0x7f0000000180)=""/19, 0xfffffe47) dup(0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) 17:54:34 executing program 4: clock_gettime(0x258c154e7c7de4d1, 0x0) 17:54:34 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x28, 0x1, &(0x7f0000000040)=@raw=[@alu], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 17:54:34 executing program 4: pipe2(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_wait(r0, &(0x7f0000000000)=[{}], 0x1, 0xe3) [ 363.227096][ T9438] usb 2-1: new high-speed USB device number 37 using dummy_hcd 17:54:34 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x208200) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r0, 0x0) read(r0, &(0x7f0000000180)=""/19, 0xfffffe47) dup(0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 363.647461][ T9438] usb 2-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=ce.99 [ 363.674166][ T9438] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.745485][ T9438] usb 2-1: config 0 descriptor?? [ 363.789212][T15461] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 363.808899][ T9438] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 365.856617][ T9438] gspca_stv06xx: I2C: Read error writing address: -71 [ 365.867406][ T9438] usb 2-1: USB disconnect, device number 37 17:54:37 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1a}, 0x40) 17:54:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000001c0)='team\x00', 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000006c0)={0x20, r1, 0xd91, 0x0, 0x0, {}, [{{0x8}, {0x4}}]}, 0x20}}, 0x0) 17:54:37 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x208200) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) dup(0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) 17:54:37 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x40, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="201179000000790e91c778eee281205fe5a796a30199906c3b65d756cfce2965c03d1874a1921f21191850263501f7ec83267fc8666d5c3bbf82786ef75b44b3216b62ad99291694dac32641ec02050e4d7ca7d9fe925dc7a2f35eff252d8ebd73d083e023068ee5f465398322b2c03d86ab2a6ebec568a013aa4b8456f7e4"], &(0x7f00000000c0)={0x0, 0x3, 0x58, @string={0x58, 0x3, "23338a983878ab91423fc18c82577ac14263492cd336b5e9e9c8986709127ffaaa291b884a3918ee1e026044a53fafaeb6730d578bf675387d35ec9a2c3bcb572850f02a4f662810d884b3b8d1c7e6e81d38bef44578"}}}, &(0x7f0000000440)={0x34, &(0x7f0000000180)={0x40, 0x15, 0x7f, "4893800f6206ae753bcdfaf908f35f297d154182bedcdd74767ecb5583942f4a1d32e262538b094f8e9d8686ad8236d68092aec10e244c4b5e0ccff9108709ea3ac6556dabc87d18b112df13e6ce5d03dfd0d8f37e6759e7cbb6ed906868c4679079b5d86c313590226375f1680b5b996313b5437d50dffc2b52469e6a3680"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0xe0}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000002c0)={0x20, 0x0, 0xf6, {0xf4, "93b4c18e929213f997b6b9c946cd309a860b21242da6837b3d4fa7defdb288f8a6581b20a789697ca88846a1306d76183443543a972df58ff995e451ca76226784ffb2f475ddebd0b97fd069a032f397ff3baef0dcea4258349fcd143a73092f9b9987da83b43a9781420dc3b6e21ce5047b502837afd203ac2c0e3746d326e4f9e1f711c4313a00372f8cb633d13a423eec329c90fe64918760c2f6d1ee298acdc952f51d0e5ca1336dc7e8bb1c143bd59d21aa9f78a758aca424674196690c60fa0ee6128edd8037873c06cd6cc0668b4eef08f1bd019c624e22a60ea06a5d32d3a4ba4b2043e50837d40bc4b4eeb82b2b8ba4"}}, &(0x7f00000003c0)={0x20, 0x1, 0x1, 0x8}, &(0x7f0000000400)={0x20, 0x0, 0x1}}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 17:54:37 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x20}) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8}) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000180), 0x0) 17:54:37 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x208200) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) getpid() read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) [ 366.444567][ T37] audit: type=1804 audit(1618682077.942:263): pid=15496 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/142/bus" dev="sda1" ino=14855 res=1 errno=0 [ 366.525909][ T37] audit: type=1804 audit(1618682078.022:264): pid=15496 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/142/bus" dev="sda1" ino=14855 res=1 errno=0 17:54:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) 17:54:38 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x8001}) [ 366.714467][T15496] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 366.736387][ T36] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 366.752841][ T37] audit: type=1804 audit(1618682078.082:265): pid=15496 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/142/bus" dev="sda1" ino=14855 res=1 errno=0 17:54:38 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$input_event(r0, 0x0, 0x0) 17:54:38 executing program 3: socketpair(0xa, 0x0, 0x0, &(0x7f00000002c0)) 17:54:38 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x208200) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) dup(0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) 17:54:38 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540)='/dev/bsg\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f00000004c0)='/dev/bsg\x00', &(0x7f0000000500)='./file0\x00', r1) [ 367.109775][ T36] usb 2-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=ce.99 [ 367.136477][ T36] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.213107][ T36] usb 2-1: config 0 descriptor?? [ 367.298954][ T36] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 367.333781][ T37] audit: type=1804 audit(1618682078.832:266): pid=15529 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/143/bus" dev="sda1" ino=14855 res=1 errno=0 17:54:38 executing program 4: fspick(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0) 17:54:39 executing program 3: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000500)='/proc/self/net/pfkey\x00', 0x200000, 0x0) [ 367.455122][T15533] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 367.571858][ T37] audit: type=1804 audit(1618682078.972:267): pid=15529 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/143/bus" dev="sda1" ino=14855 res=1 errno=0 17:54:39 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x208200) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) dup(0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 367.900388][ T37] audit: type=1804 audit(1618682079.402:268): pid=15541 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/144/bus" dev="sda1" ino=14835 res=1 errno=0 [ 367.977307][ T37] audit: type=1804 audit(1618682079.462:269): pid=15541 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/144/bus" dev="sda1" ino=14835 res=1 errno=0 [ 367.977366][ T37] audit: type=1804 audit(1618682079.472:270): pid=15541 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/144/bus" dev="sda1" ino=14835 res=1 errno=0 [ 368.025687][T15499] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 368.124963][T15541] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 369.334006][ T36] gspca_stv06xx: I2C: Read error writing address: -71 [ 369.342505][ T36] usb 2-1: USB disconnect, device number 38 17:54:41 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x66, 0xd9f, 0x0) io_submit(0x0, 0x0, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002) 17:54:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00', 0xffffffffffffffff) 17:54:41 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x20}) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8}) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000180), 0x0) 17:54:41 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x208200) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) getpid() read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) 17:54:41 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x40, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="201179000000790e91c778eee281205fe5a796a30199906c3b65d756cfce2965c03d1874a1921f21191850263501f7ec83267fc8666d5c3bbf82786ef75b44b3216b62ad99291694dac32641ec02050e4d7ca7d9fe925dc7a2f35eff252d8ebd73d083e023068ee5f465398322b2c03d86ab2a6ebec568a013aa4b8456f7e4"], &(0x7f00000000c0)={0x0, 0x3, 0x58, @string={0x58, 0x3, "23338a983878ab91423fc18c82577ac14263492cd336b5e9e9c8986709127ffaaa291b884a3918ee1e026044a53fafaeb6730d578bf675387d35ec9a2c3bcb572850f02a4f662810d884b3b8d1c7e6e81d38bef44578"}}}, &(0x7f0000000440)={0x34, &(0x7f0000000180)={0x40, 0x15, 0x7f, "4893800f6206ae753bcdfaf908f35f297d154182bedcdd74767ecb5583942f4a1d32e262538b094f8e9d8686ad8236d68092aec10e244c4b5e0ccff9108709ea3ac6556dabc87d18b112df13e6ce5d03dfd0d8f37e6759e7cbb6ed906868c4679079b5d86c313590226375f1680b5b996313b5437d50dffc2b52469e6a3680"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0xe0}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000002c0)={0x20, 0x0, 0xf6, {0xf4, "93b4c18e929213f997b6b9c946cd309a860b21242da6837b3d4fa7defdb288f8a6581b20a789697ca88846a1306d76183443543a972df58ff995e451ca76226784ffb2f475ddebd0b97fd069a032f397ff3baef0dcea4258349fcd143a73092f9b9987da83b43a9781420dc3b6e21ce5047b502837afd203ac2c0e3746d326e4f9e1f711c4313a00372f8cb633d13a423eec329c90fe64918760c2f6d1ee298acdc952f51d0e5ca1336dc7e8bb1c143bd59d21aa9f78a758aca424674196690c60fa0ee6128edd8037873c06cd6cc0668b4eef08f1bd019c624e22a60ea06a5d32d3a4ba4b2043e50837d40bc4b4eeb82b2b8ba4"}}, &(0x7f00000003c0)={0x20, 0x1, 0x1, 0x8}, &(0x7f0000000400)={0x20, 0x0, 0x1}}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 17:54:41 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x208200) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) dup(0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 369.913427][T15564] futex_wake_op: syz-executor.3 tries to shift op by 256; fix this program [ 369.952951][ T37] audit: type=1804 audit(1618682081.452:271): pid=15566 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/145/file0/bus" dev="sda1" ino=14878 res=1 errno=0 17:54:41 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000a, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) [ 370.039801][T15575] futex_wake_op: syz-executor.3 tries to shift op by 256; fix this program [ 370.063107][T15576] overlayfs: unrecognized mount option "context=staff_u" or missing value 17:54:41 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x208200) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) dup(0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) 17:54:41 executing program 3: r0 = add_key$keyring(&(0x7f0000001200)='keyring\x00', &(0x7f0000001240)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000001200)='keyring\x00', &(0x7f0000001240)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$revoke(0x3, r0) [ 370.177027][ T37] audit: type=1804 audit(1618682081.582:272): pid=15566 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/145/file0/bus" dev="sda1" ino=14878 res=1 errno=0 [ 370.236557][ T4818] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 370.264059][T15579] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 17:54:42 executing program 3: pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, &(0x7f00000001c0), 0x0) [ 370.612837][T15585] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 370.677338][ T4818] usb 2-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=ce.99 [ 370.709133][ T4818] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 17:54:42 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={r0}, 0xc) [ 370.782151][ T4818] usb 2-1: config 0 descriptor?? [ 370.889073][ T4818] gspca_main: STV06xx-2.14.0 probing 046d:0840 17:54:42 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}}, &(0x7f00000001c0)=""/188, 0x1a, 0xbc, 0x1}, 0x20) 17:54:42 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x208200) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) dup(0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 371.098166][T15590] overlayfs: unrecognized mount option "context=staff_u" or missing value 17:54:42 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x20}) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8}) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000180), 0x0) 17:54:42 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg(r0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[{0x10}], 0x10}, 0x0) [ 371.516753][T15619] overlayfs: unrecognized mount option "context=staff_u" or missing value 17:54:43 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x208200) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) getpid() read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) [ 372.946250][ T4818] gspca_stv06xx: I2C: Read error writing address: -71 [ 372.954703][ T4818] usb 2-1: USB disconnect, device number 39 17:54:44 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x40, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="201179000000790e91c778eee281205fe5a796a30199906c3b65d756cfce2965c03d1874a1921f21191850263501f7ec83267fc8666d5c3bbf82786ef75b44b3216b62ad99291694dac32641ec02050e4d7ca7d9fe925dc7a2f35eff252d8ebd73d083e023068ee5f465398322b2c03d86ab2a6ebec568a013aa4b8456f7e4"], &(0x7f00000000c0)={0x0, 0x3, 0x58, @string={0x58, 0x3, "23338a983878ab91423fc18c82577ac14263492cd336b5e9e9c8986709127ffaaa291b884a3918ee1e026044a53fafaeb6730d578bf675387d35ec9a2c3bcb572850f02a4f662810d884b3b8d1c7e6e81d38bef44578"}}}, &(0x7f0000000440)={0x34, &(0x7f0000000180)={0x40, 0x15, 0x7f, "4893800f6206ae753bcdfaf908f35f297d154182bedcdd74767ecb5583942f4a1d32e262538b094f8e9d8686ad8236d68092aec10e244c4b5e0ccff9108709ea3ac6556dabc87d18b112df13e6ce5d03dfd0d8f37e6759e7cbb6ed906868c4679079b5d86c313590226375f1680b5b996313b5437d50dffc2b52469e6a3680"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0xe0}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000002c0)={0x20, 0x0, 0xf6, {0xf4, "93b4c18e929213f997b6b9c946cd309a860b21242da6837b3d4fa7defdb288f8a6581b20a789697ca88846a1306d76183443543a972df58ff995e451ca76226784ffb2f475ddebd0b97fd069a032f397ff3baef0dcea4258349fcd143a73092f9b9987da83b43a9781420dc3b6e21ce5047b502837afd203ac2c0e3746d326e4f9e1f711c4313a00372f8cb633d13a423eec329c90fe64918760c2f6d1ee298acdc952f51d0e5ca1336dc7e8bb1c143bd59d21aa9f78a758aca424674196690c60fa0ee6128edd8037873c06cd6cc0668b4eef08f1bd019c624e22a60ea06a5d32d3a4ba4b2043e50837d40bc4b4eeb82b2b8ba4"}}, &(0x7f00000003c0)={0x20, 0x1, 0x1, 0x8}, &(0x7f0000000400)={0x20, 0x0, 0x1}}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 17:54:44 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x17, 0x0, 0x9, 0x9}, 0x40) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r0, &(0x7f0000000040)}, 0x20) 17:54:44 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f00000000c0)=0x3f) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000b40)='cgroup.subtree_control\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) 17:54:44 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x208200) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) getpid() read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) 17:54:44 executing program 5: mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x208200) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) dup(0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) 17:54:44 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x20}) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8}) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) [ 373.539333][ T37] kauditd_printk_skb: 6 callbacks suppressed [ 373.539346][ T37] audit: type=1804 audit(1618682085.042:279): pid=15648 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/148/bus" dev="sda1" ino=14892 res=1 errno=0 17:54:45 executing program 3: socketpair(0x1e, 0x0, 0x5, &(0x7f0000000080)) 17:54:45 executing program 4: pipe(&(0x7f0000000280)={0xffffffffffffffff}) accept$inet(r0, 0x0, 0x0) [ 373.700921][T15648] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 373.701047][ T37] audit: type=1804 audit(1618682085.112:280): pid=15655 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/148/bus" dev="sda1" ino=14892 res=1 errno=0 17:54:45 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x20}) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8}) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 17:54:45 executing program 4: r0 = socket(0x1, 0x5, 0x0) setsockopt(r0, 0x0, 0x0, 0x0, 0x0) 17:54:45 executing program 3: r0 = socket(0x18, 0x2, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x1}, 0xc) 17:54:45 executing program 5: mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x208200) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) dup(0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 373.901662][ T37] audit: type=1804 audit(1618682085.112:281): pid=15655 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/148/bus" dev="sda1" ino=14892 res=1 errno=0 [ 373.926703][ T5] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 374.071829][ T37] audit: type=1804 audit(1618682085.572:282): pid=15678 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/149/bus" dev="sda1" ino=14887 res=1 errno=0 [ 374.149517][ T37] audit: type=1804 audit(1618682085.652:283): pid=15678 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/149/bus" dev="sda1" ino=14887 res=1 errno=0 [ 374.232870][ T37] audit: type=1804 audit(1618682085.652:284): pid=15678 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/149/bus" dev="sda1" ino=14887 res=1 errno=0 [ 374.265635][T15684] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 374.286530][ T5] usb 2-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=ce.99 [ 374.314150][ T5] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.409889][ T5] usb 2-1: config 0 descriptor?? [ 374.458289][ T5] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 376.496123][ T5] gspca_stv06xx: I2C: Read error writing address: -71 [ 376.504335][ T5] usb 2-1: USB disconnect, device number 40 17:54:48 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x40, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="201179000000790e91c778eee281205fe5a796a30199906c3b65d756cfce2965c03d1874a1921f21191850263501f7ec83267fc8666d5c3bbf82786ef75b44b3216b62ad99291694dac32641ec02050e4d7ca7d9fe925dc7a2f35eff252d8ebd73d083e023068ee5f465398322b2c03d86ab2a6ebec568a013aa4b8456f7e4"], &(0x7f00000000c0)={0x0, 0x3, 0x58, @string={0x58, 0x3, "23338a983878ab91423fc18c82577ac14263492cd336b5e9e9c8986709127ffaaa291b884a3918ee1e026044a53fafaeb6730d578bf675387d35ec9a2c3bcb572850f02a4f662810d884b3b8d1c7e6e81d38bef44578"}}}, &(0x7f0000000440)={0x34, &(0x7f0000000180)={0x40, 0x15, 0x7f, "4893800f6206ae753bcdfaf908f35f297d154182bedcdd74767ecb5583942f4a1d32e262538b094f8e9d8686ad8236d68092aec10e244c4b5e0ccff9108709ea3ac6556dabc87d18b112df13e6ce5d03dfd0d8f37e6759e7cbb6ed906868c4679079b5d86c313590226375f1680b5b996313b5437d50dffc2b52469e6a3680"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0xe0}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000002c0)={0x20, 0x0, 0xf6, {0xf4, "93b4c18e929213f997b6b9c946cd309a860b21242da6837b3d4fa7defdb288f8a6581b20a789697ca88846a1306d76183443543a972df58ff995e451ca76226784ffb2f475ddebd0b97fd069a032f397ff3baef0dcea4258349fcd143a73092f9b9987da83b43a9781420dc3b6e21ce5047b502837afd203ac2c0e3746d326e4f9e1f711c4313a00372f8cb633d13a423eec329c90fe64918760c2f6d1ee298acdc952f51d0e5ca1336dc7e8bb1c143bd59d21aa9f78a758aca424674196690c60fa0ee6128edd8037873c06cd6cc0668b4eef08f1bd019c624e22a60ea06a5d32d3a4ba4b2043e50837d40bc4b4eeb82b2b8ba4"}}, &(0x7f00000003c0)={0x20, 0x1, 0x1, 0x8}, &(0x7f0000000400)={0x20, 0x0, 0x1}}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 17:54:48 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000680)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) 17:54:48 executing program 4: syz_emit_ethernet(0x36, &(0x7f00000000c0)={@remote, @broadcast, @val, {@ipv6}}, 0x0) 17:54:48 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x208200) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) getpid() read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) 17:54:48 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendto$unix(r0, &(0x7f0000000300)="9b847eae58b2669885cfbef55484b192e38492f87a24cbb9aa935c376b9202822acbbb050d8c61207d937f36d6fd28c5b26667d619395d0b0952a737f3de462cae246235ebb6f8d2cf14f797386bc67844ebf269c2b1849e6b4df343b7fd0e81a46ba27e70e65be993735aea8b6fb44691a7c6d09409f115bdf02065d656041ef833f875e85f949b264020fbd8bf74dad7", 0x91, 0x0, 0x0, 0x0) 17:54:48 executing program 5: mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x208200) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) dup(0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) 17:54:48 executing program 0: timer_create(0x0, 0x0, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x77359400}}, 0x0) [ 377.050010][ T37] audit: type=1804 audit(1618682088.552:285): pid=15709 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/150/bus" dev="sda1" ino=14177 res=1 errno=0 17:54:48 executing program 3: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20060080, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) 17:54:48 executing program 4: socket(0x2, 0x0, 0x7fff) [ 377.138977][ T37] audit: type=1804 audit(1618682088.602:286): pid=15709 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/150/bus" dev="sda1" ino=14177 res=1 errno=0 17:54:48 executing program 4: r0 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r0, 0x0, 0xffffffffffffffff) 17:54:48 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'macvlan0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x2e, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) 17:54:48 executing program 0: timer_create(0x9, 0x0, &(0x7f0000000040)) [ 377.278449][T15709] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 377.329960][ T37] audit: type=1804 audit(1618682088.622:287): pid=15709 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/150/bus" dev="sda1" ino=14177 res=1 errno=0 [ 377.456035][ T9475] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 377.876137][ T9475] usb 2-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=ce.99 [ 377.885200][ T9475] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.896252][ T9475] usb 2-1: config 0 descriptor?? [ 377.945142][ T9475] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 378.426887][ T3219] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.433215][ T3219] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.985831][ T9475] gspca_stv06xx: I2C: Read error writing address: -71 [ 379.994477][ T9475] usb 2-1: USB disconnect, device number 41 17:54:51 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x40, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="201179000000790e91c778eee281205fe5a796a30199906c3b65d756cfce2965c03d1874a1921f21191850263501f7ec83267fc8666d5c3bbf82786ef75b44b3216b62ad99291694dac32641ec02050e4d7ca7d9fe925dc7a2f35eff252d8ebd73d083e023068ee5f465398322b2c03d86ab2a6ebec568a013aa4b8456f7e4"], &(0x7f00000000c0)={0x0, 0x3, 0x58, @string={0x58, 0x3, "23338a983878ab91423fc18c82577ac14263492cd336b5e9e9c8986709127ffaaa291b884a3918ee1e026044a53fafaeb6730d578bf675387d35ec9a2c3bcb572850f02a4f662810d884b3b8d1c7e6e81d38bef44578"}}}, &(0x7f0000000440)={0x34, &(0x7f0000000180)={0x40, 0x15, 0x7f, "4893800f6206ae753bcdfaf908f35f297d154182bedcdd74767ecb5583942f4a1d32e262538b094f8e9d8686ad8236d68092aec10e244c4b5e0ccff9108709ea3ac6556dabc87d18b112df13e6ce5d03dfd0d8f37e6759e7cbb6ed906868c4679079b5d86c313590226375f1680b5b996313b5437d50dffc2b52469e6a3680"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0xe0}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000002c0)={0x20, 0x0, 0xf6, {0xf4, "93b4c18e929213f997b6b9c946cd309a860b21242da6837b3d4fa7defdb288f8a6581b20a789697ca88846a1306d76183443543a972df58ff995e451ca76226784ffb2f475ddebd0b97fd069a032f397ff3baef0dcea4258349fcd143a73092f9b9987da83b43a9781420dc3b6e21ce5047b502837afd203ac2c0e3746d326e4f9e1f711c4313a00372f8cb633d13a423eec329c90fe64918760c2f6d1ee298acdc952f51d0e5ca1336dc7e8bb1c143bd59d21aa9f78a758aca424674196690c60fa0ee6128edd8037873c06cd6cc0668b4eef08f1bd019c624e22a60ea06a5d32d3a4ba4b2043e50837d40bc4b4eeb82b2b8ba4"}}, &(0x7f00000003c0)={0x20, 0x1, 0x1, 0x8}, &(0x7f0000000400)={0x20, 0x0, 0x1}}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 17:54:51 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sysvipc/sem\x00', 0x0, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 17:54:51 executing program 4: unshare(0x40000400) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000180)=ANY=[@ANYBLOB="6d616e676c65000000000000000000000000000000000000000000000000000002"], 0x48) 17:54:51 executing program 5: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x208200) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) dup(0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) 17:54:51 executing program 3: socketpair(0x9, 0x0, 0x0, &(0x7f00000011c0)) 17:54:51 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x208200) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) getpid() read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) 17:54:52 executing program 3: openat$procfs(0xffffffffffffff9c, &(0x7f0000000d00)='/proc/bus/input/handlers\x00', 0x0, 0x0) [ 380.545226][T15764] IPVS: ftp: loaded support on port[0] = 21 [ 380.564259][ T37] audit: type=1804 audit(1618682092.062:288): pid=15768 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/151/bus" dev="sda1" ino=14530 res=1 errno=0 17:54:52 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, &(0x7f00000000c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}}) 17:54:52 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sysvipc/sem\x00', 0x0, 0x0) accept4$vsock_stream(r0, 0x0, 0x0, 0x40800) [ 380.776352][T15768] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 380.789473][ T37] audit: type=1804 audit(1618682092.102:289): pid=15767 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/130/bus" dev="sda1" ino=14241 res=1 errno=0 17:54:52 executing program 0: openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x800, 0x0) 17:54:52 executing program 3: bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000), 0xfffffffffffffe0c) [ 380.892421][ T37] audit: type=1804 audit(1618682092.132:290): pid=15768 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/151/bus" dev="sda1" ino=14530 res=1 errno=0 [ 380.920379][ T9475] usb 2-1: new high-speed USB device number 42 using dummy_hcd 17:54:52 executing program 5: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x208200) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) dup(0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 381.021122][ T37] audit: type=1804 audit(1618682092.142:291): pid=15768 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/151/bus" dev="sda1" ino=14530 res=1 errno=0 [ 381.106597][ T37] audit: type=1804 audit(1618682092.182:292): pid=15767 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/130/bus" dev="sda1" ino=14241 res=1 errno=0 [ 381.233564][ T37] audit: type=1804 audit(1618682092.672:293): pid=15811 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/152/bus" dev="sda1" ino=14481 res=1 errno=0 [ 381.259250][T15764] IPVS: ftp: loaded support on port[0] = 21 [ 381.295432][T15814] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 381.399241][ T9475] usb 2-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=ce.99 [ 381.413271][ T37] audit: type=1804 audit(1618682092.682:294): pid=15811 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/152/bus" dev="sda1" ino=14481 res=1 errno=0 [ 381.427504][ T9475] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.540959][ T37] audit: type=1804 audit(1618682092.702:295): pid=15811 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/152/bus" dev="sda1" ino=14481 res=1 errno=0 [ 381.567894][ T9475] usb 2-1: config 0 descriptor?? [ 381.638134][ T9475] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 381.772962][ T37] audit: type=1804 audit(1618682093.272:296): pid=15767 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/130/bus" dev="sda1" ino=14241 res=1 errno=0 [ 382.024011][T15842] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 383.705805][ T9475] gspca_stv06xx: I2C: Read error writing address: -71 [ 383.714653][ T9475] usb 2-1: USB disconnect, device number 42 17:54:55 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x40, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="201179000000790e91c778eee281205fe5a796a30199906c3b65d756cfce2965c03d1874a1921f21191850263501f7ec83267fc8666d5c3bbf82786ef75b44b3216b62ad99291694dac32641ec02050e4d7ca7d9fe925dc7a2f35eff252d8ebd73d083e023068ee5f465398322b2c03d86ab2a6ebec568a013aa4b8456f7e4"], &(0x7f00000000c0)={0x0, 0x3, 0x58, @string={0x58, 0x3, "23338a983878ab91423fc18c82577ac14263492cd336b5e9e9c8986709127ffaaa291b884a3918ee1e026044a53fafaeb6730d578bf675387d35ec9a2c3bcb572850f02a4f662810d884b3b8d1c7e6e81d38bef44578"}}}, &(0x7f0000000440)={0x34, &(0x7f0000000180)={0x40, 0x15, 0x7f, "4893800f6206ae753bcdfaf908f35f297d154182bedcdd74767ecb5583942f4a1d32e262538b094f8e9d8686ad8236d68092aec10e244c4b5e0ccff9108709ea3ac6556dabc87d18b112df13e6ce5d03dfd0d8f37e6759e7cbb6ed906868c4679079b5d86c313590226375f1680b5b996313b5437d50dffc2b52469e6a3680"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0xe0}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000002c0)={0x20, 0x0, 0xf6, {0xf4, "93b4c18e929213f997b6b9c946cd309a860b21242da6837b3d4fa7defdb288f8a6581b20a789697ca88846a1306d76183443543a972df58ff995e451ca76226784ffb2f475ddebd0b97fd069a032f397ff3baef0dcea4258349fcd143a73092f9b9987da83b43a9781420dc3b6e21ce5047b502837afd203ac2c0e3746d326e4f9e1f711c4313a00372f8cb633d13a423eec329c90fe64918760c2f6d1ee298acdc952f51d0e5ca1336dc7e8bb1c143bd59d21aa9f78a758aca424674196690c60fa0ee6128edd8037873c06cd6cc0668b4eef08f1bd019c624e22a60ea06a5d32d3a4ba4b2043e50837d40bc4b4eeb82b2b8ba4"}}, &(0x7f00000003c0)={0x20, 0x1, 0x1, 0x8}, &(0x7f0000000400)={0x20, 0x0, 0x1}}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 17:54:55 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x19, 0x0, 0x0) 17:54:55 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000002780)=[{{&(0x7f00000001c0)={0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000400)=[@hoplimit_2292={{0x14}}], 0x18}}], 0x1, 0x0) 17:54:55 executing program 4: socketpair(0x1e, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmmsg$alg(r0, &(0x7f0000007b80)=[{0x0, 0x0, 0x0}], 0x1, 0x0) 17:54:55 executing program 5: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x208200) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) dup(0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) 17:54:55 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x208200) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) getpid() read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) [ 384.347243][ T37] audit: type=1804 audit(1618682095.853:297): pid=15862 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/131/bus" dev="sda1" ino=14911 res=1 errno=0 17:54:55 executing program 4: socketpair(0x1e, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmmsg$alg(r0, &(0x7f0000007b80)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001200)=[@iv={0x18}, @iv={0x18}], 0x30}, {0x0, 0x0, 0x0, 0x0, &(0x7f0000002580)}], 0x2, 0x0) 17:54:55 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x0, 0x0) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0) 17:54:55 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect(r0, &(0x7f0000000240)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) connect(r0, &(0x7f0000000040)=@nl=@unspec, 0x80) [ 384.501120][T15868] overlayfs: unrecognized mount option "context=staff_u" or missing value 17:54:56 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect(r0, &(0x7f0000000240)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) sendmsg$alg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="bc467c83", 0x4}], 0x1}, 0x800) 17:54:56 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect(r0, &(0x7f0000000240)=@in6={0xa, 0x0, 0x0, @mcast1, 0x400000}, 0x80) [ 384.655606][ T9506] usb 2-1: new high-speed USB device number 43 using dummy_hcd 17:54:56 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x0) getsockopt$inet6_int(r0, 0x29, 0x11, 0x0, &(0x7f0000000040)) [ 385.015871][ T9506] usb 2-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=ce.99 [ 385.032976][ T9506] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.109810][ T9506] usb 2-1: config 0 descriptor?? [ 385.177597][ T9506] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 385.664337][T15891] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 387.235497][ T9506] gspca_stv06xx: I2C: Read error writing address: -71 [ 387.243875][ T9506] usb 2-1: USB disconnect, device number 43 17:54:59 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x40, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="201179000000790e91c778eee281205fe5a796a30199906c3b65d756cfce2965c03d1874a1921f21191850263501f7ec83267fc8666d5c3bbf82786ef75b44b3216b62ad99291694dac32641ec02050e4d7ca7d9fe925dc7a2f35eff252d8ebd73d083e023068ee5f465398322b2c03d86ab2a6ebec568a013aa4b8456f7e4"], &(0x7f00000000c0)={0x0, 0x3, 0x58, @string={0x58, 0x3, "23338a983878ab91423fc18c82577ac14263492cd336b5e9e9c8986709127ffaaa291b884a3918ee1e026044a53fafaeb6730d578bf675387d35ec9a2c3bcb572850f02a4f662810d884b3b8d1c7e6e81d38bef44578"}}}, &(0x7f0000000440)={0x34, &(0x7f0000000180)={0x40, 0x15, 0x7f, "4893800f6206ae753bcdfaf908f35f297d154182bedcdd74767ecb5583942f4a1d32e262538b094f8e9d8686ad8236d68092aec10e244c4b5e0ccff9108709ea3ac6556dabc87d18b112df13e6ce5d03dfd0d8f37e6759e7cbb6ed906868c4679079b5d86c313590226375f1680b5b996313b5437d50dffc2b52469e6a3680"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0xe0}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000002c0)={0x20, 0x0, 0xf6, {0xf4, "93b4c18e929213f997b6b9c946cd309a860b21242da6837b3d4fa7defdb288f8a6581b20a789697ca88846a1306d76183443543a972df58ff995e451ca76226784ffb2f475ddebd0b97fd069a032f397ff3baef0dcea4258349fcd143a73092f9b9987da83b43a9781420dc3b6e21ce5047b502837afd203ac2c0e3746d326e4f9e1f711c4313a00372f8cb633d13a423eec329c90fe64918760c2f6d1ee298acdc952f51d0e5ca1336dc7e8bb1c143bd59d21aa9f78a758aca424674196690c60fa0ee6128edd8037873c06cd6cc0668b4eef08f1bd019c624e22a60ea06a5d32d3a4ba4b2043e50837d40bc4b4eeb82b2b8ba4"}}, &(0x7f00000003c0)={0x20, 0x1, 0x1, 0x8}, &(0x7f0000000400)={0x20, 0x0, 0x1}}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 17:54:59 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40010041, 0x0) 17:54:59 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_group_source_req(r0, 0x29, 0x1, 0x0, 0x0) 17:54:59 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect(r0, &(0x7f0000000240)=@in6={0xa, 0x0, 0x0, @remote, 0x5}, 0x80) 17:54:59 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x208200) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) dup(0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) 17:54:59 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x208200) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) getpid() read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) 17:54:59 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r0, 0x29, 0x17, 0x0, &(0x7f0000000080)) 17:54:59 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$alg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x4001) [ 387.840456][ T37] kauditd_printk_skb: 4 callbacks suppressed [ 387.840470][ T37] audit: type=1804 audit(1618682099.343:302): pid=15915 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/132/bus" dev="sda1" ino=14927 res=1 errno=0 17:54:59 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) getsockopt$inet6_int(r0, 0x29, 0x46, 0x0, &(0x7f0000000040)) [ 388.001814][ T37] audit: type=1804 audit(1618682099.353:303): pid=15916 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/154/file0/bus" dev="sda1" ino=14930 res=1 errno=0 17:54:59 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000740)=ANY=[], 0x20) connect(r0, &(0x7f0000000240)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) sendmsg$alg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="e166cc", 0x3}, {&(0x7f00000002c0)="e9", 0x1}], 0x2}, 0x0) 17:54:59 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x201, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x10, r0, 0x0) [ 388.046583][T15928] overlayfs: unrecognized mount option "context=staff_u" or missing value 17:54:59 executing program 4: mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x1011, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) [ 388.166376][ T37] audit: type=1804 audit(1618682099.423:304): pid=15916 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/154/file0/bus" dev="sda1" ino=14930 res=1 errno=0 [ 388.197362][ T9438] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 388.317796][ T37] audit: type=1804 audit(1618682099.433:305): pid=15916 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/154/file0/bus" dev="sda1" ino=14930 res=1 errno=0 [ 388.426654][ T37] audit: type=1804 audit(1618682099.463:306): pid=15915 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/132/bus" dev="sda1" ino=14927 res=1 errno=0 [ 388.616070][ T9438] usb 2-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=ce.99 [ 388.625185][ T9438] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.652762][ T9438] usb 2-1: config 0 descriptor?? [ 388.655442][ T37] audit: type=1804 audit(1618682100.143:307): pid=15915 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/132/bus" dev="sda1" ino=14927 res=1 errno=0 [ 388.717958][ T9438] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 388.864413][T15950] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 390.755309][ T9438] gspca_stv06xx: I2C: Read error writing address: -71 [ 390.764493][ T9438] usb 2-1: USB disconnect, device number 44 17:55:02 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x40, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="201179000000790e91c778eee281205fe5a796a30199906c3b65d756cfce2965c03d1874a1921f21191850263501f7ec83267fc8666d5c3bbf82786ef75b44b3216b62ad99291694dac32641ec02050e4d7ca7d9fe925dc7a2f35eff252d8ebd73d083e023068ee5f465398322b2c03d86ab2a6ebec568a013aa4b8456f7e4"], &(0x7f00000000c0)={0x0, 0x3, 0x58, @string={0x58, 0x3, "23338a983878ab91423fc18c82577ac14263492cd336b5e9e9c8986709127ffaaa291b884a3918ee1e026044a53fafaeb6730d578bf675387d35ec9a2c3bcb572850f02a4f662810d884b3b8d1c7e6e81d38bef44578"}}}, &(0x7f0000000440)={0x34, &(0x7f0000000180)={0x40, 0x15, 0x7f, "4893800f6206ae753bcdfaf908f35f297d154182bedcdd74767ecb5583942f4a1d32e262538b094f8e9d8686ad8236d68092aec10e244c4b5e0ccff9108709ea3ac6556dabc87d18b112df13e6ce5d03dfd0d8f37e6759e7cbb6ed906868c4679079b5d86c313590226375f1680b5b996313b5437d50dffc2b52469e6a3680"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0xe0}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000002c0)={0x20, 0x0, 0xf6, {0xf4, "93b4c18e929213f997b6b9c946cd309a860b21242da6837b3d4fa7defdb288f8a6581b20a789697ca88846a1306d76183443543a972df58ff995e451ca76226784ffb2f475ddebd0b97fd069a032f397ff3baef0dcea4258349fcd143a73092f9b9987da83b43a9781420dc3b6e21ce5047b502837afd203ac2c0e3746d326e4f9e1f711c4313a00372f8cb633d13a423eec329c90fe64918760c2f6d1ee298acdc952f51d0e5ca1336dc7e8bb1c143bd59d21aa9f78a758aca424674196690c60fa0ee6128edd8037873c06cd6cc0668b4eef08f1bd019c624e22a60ea06a5d32d3a4ba4b2043e50837d40bc4b4eeb82b2b8ba4"}}, &(0x7f00000003c0)={0x20, 0x1, 0x1, 0x8}, &(0x7f0000000400)={0x20, 0x0, 0x1}}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 17:55:02 executing program 0: read(0xffffffffffffffff, &(0x7f0000000000)=""/38, 0xffffffffffffffed) 17:55:02 executing program 3: mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x1011, 0xffffffffffffffff, 0x0) 17:55:02 executing program 4: r0 = socket(0x2, 0x3, 0x0) getsockopt$sock_int(r0, 0xffff, 0x800, 0x0, 0x0) 17:55:02 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x208200) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) dup(0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) 17:55:02 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x208200) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) getpid() read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) 17:55:02 executing program 3: r0 = socket(0x18, 0x3, 0x0) getsockopt$inet_opts(r0, 0x0, 0x0, 0x0, 0x0) [ 391.344618][ T37] audit: type=1804 audit(1618682102.843:308): pid=15971 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/155/file0/bus" dev="sda1" ino=14926 res=1 errno=0 17:55:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00', 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x1, 0x0, 0x0, {{}, {}, {0xc, 0x14, 'syz1\x00'}}}, 0x28}}, 0x0) [ 391.470414][ T37] audit: type=1804 audit(1618682102.893:309): pid=15968 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/133/file0/bus" dev="sda1" ino=14946 res=1 errno=0 17:55:03 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x5, 0xfffffffc, 0x2, 0x5, 0x0, 0x1}, 0x40) 17:55:03 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89a1, &(0x7f0000000040)={'gre0\x00', 0x0}) [ 391.591422][T15986] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 391.660263][ T37] audit: type=1804 audit(1618682102.923:310): pid=15971 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/155/file0/bus" dev="sda1" ino=14926 res=1 errno=0 17:55:03 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8934, &(0x7f0000000040)={'gre0\x00', 0x0}) 17:55:03 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x24, &(0x7f0000000000), 0x48) [ 391.755554][ T5] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 391.899920][ T37] audit: type=1804 audit(1618682102.933:311): pid=15971 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/155/file0/bus" dev="sda1" ino=14926 res=1 errno=0 [ 392.115872][ T5] usb 2-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=ce.99 [ 392.131166][ T5] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.166120][ T5] usb 2-1: config 0 descriptor?? [ 392.237570][ T5] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 392.293993][T16007] overlayfs: missing 'lowerdir' [ 394.285348][ T5] gspca_stv06xx: I2C: Read error writing address: -71 [ 394.299478][ T5] usb 2-1: USB disconnect, device number 45 17:55:06 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'bridge0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="0503092c1116480401020200c52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f) 17:55:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_drop_memb(r0, 0x10e, 0x8, 0x0, 0x0) 17:55:06 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @empty}], 0x1c) 17:55:06 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x208200) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) dup(0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) 17:55:06 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x40, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="201179000000790e91c778eee281205fe5a796a30199906c3b65d756cfce2965c03d1874a1921f21191850263501f7ec83267fc8666d5c3bbf82786ef75b44b3216b62ad99291694dac32641ec02050e4d7ca7d9fe925dc7a2f35eff252d8ebd73d083e023068ee5f465398322b2c03d86ab2a6ebec568a013aa4b8456f7e4"], &(0x7f00000000c0)={0x0, 0x3, 0x58, @string={0x58, 0x3, "23338a983878ab91423fc18c82577ac14263492cd336b5e9e9c8986709127ffaaa291b884a3918ee1e026044a53fafaeb6730d578bf675387d35ec9a2c3bcb572850f02a4f662810d884b3b8d1c7e6e81d38bef44578"}}}, &(0x7f0000000440)={0x34, &(0x7f0000000180)={0x40, 0x15, 0x7f, "4893800f6206ae753bcdfaf908f35f297d154182bedcdd74767ecb5583942f4a1d32e262538b094f8e9d8686ad8236d68092aec10e244c4b5e0ccff9108709ea3ac6556dabc87d18b112df13e6ce5d03dfd0d8f37e6759e7cbb6ed906868c4679079b5d86c313590226375f1680b5b996313b5437d50dffc2b52469e6a3680"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0xe0}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000002c0)={0x20, 0x0, 0xf6, {0xf4, "93b4c18e929213f997b6b9c946cd309a860b21242da6837b3d4fa7defdb288f8a6581b20a789697ca88846a1306d76183443543a972df58ff995e451ca76226784ffb2f475ddebd0b97fd069a032f397ff3baef0dcea4258349fcd143a73092f9b9987da83b43a9781420dc3b6e21ce5047b502837afd203ac2c0e3746d326e4f9e1f711c4313a00372f8cb633d13a423eec329c90fe64918760c2f6d1ee298acdc952f51d0e5ca1336dc7e8bb1c143bd59d21aa9f78a758aca424674196690c60fa0ee6128edd8037873c06cd6cc0668b4eef08f1bd019c624e22a60ea06a5d32d3a4ba4b2043e50837d40bc4b4eeb82b2b8ba4"}}, &(0x7f00000003c0)={0x20, 0x1, 0x1, 0x8}, &(0x7f0000000400)={0x20, 0x0, 0x1}}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 17:55:06 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x208200) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) getpid() read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) 17:55:06 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, 0x0}, 0x40) 17:55:06 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) 17:55:06 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x1, @dev={0xac, 0x14, 0x14, 0x10}}], 0x10) [ 394.913276][ T37] kauditd_printk_skb: 2 callbacks suppressed [ 394.913291][ T37] audit: type=1804 audit(1618682106.413:314): pid=16025 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/156/file0/bus" dev="sda1" ino=14968 res=1 errno=0 [ 395.047539][T16039] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 395.057705][ T37] audit: type=1804 audit(1618682106.453:315): pid=16028 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/134/file0/bus" dev="sda1" ino=14969 res=1 errno=0 17:55:06 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x24, 0x0, 0x32}]}}, &(0x7f00000000c0)=""/148, 0x2a, 0x94, 0x1}, 0x20) 17:55:06 executing program 0: syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x400001) 17:55:06 executing program 4: open(&(0x7f0000000780)='./file0\x00', 0x30000, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, 0x0) [ 395.184614][ T37] audit: type=1804 audit(1618682106.483:316): pid=16031 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/156/file0/bus" dev="sda1" ino=14968 res=1 errno=0 [ 395.242369][ T9475] usb 2-1: new high-speed USB device number 46 using dummy_hcd 17:55:06 executing program 3: syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x40) 17:55:06 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)="24000000260007031dfffd866fa283002020020000000000000000010c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) recvmmsg(r0, &(0x7f00000064c0), 0x40000000000004b, 0x142, 0x0) [ 395.287544][ T37] audit: type=1804 audit(1618682106.483:317): pid=16031 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/156/file0/bus" dev="sda1" ino=14968 res=1 errno=0 17:55:06 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000003d00)={0x0, 0x0, &(0x7f0000003cc0)={&(0x7f0000000d80)={0xec4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_PMSR_ATTR_PEERS={0x7e0, 0x5, 0x0, 0x1, [{0x340, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x58, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x50, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x290, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xd0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xa4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x108, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x401}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x34b}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xffffff8e}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xfffffbff}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2f}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7fffffff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x216}]}]}, {0x50, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2ed}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xd}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}]}]}, {0xa4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x4}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8}]}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0x35c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xf4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xe4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x60b3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x942}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x1e8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x68, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x90, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xb0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x40}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x2c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}]}]}]}]}, @NL80211_PMSR_ATTR_PEERS={0x6c4, 0x5, 0x0, 0x1, [{0x2a4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x34, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x1a4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x13c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x60, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}]}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x3ec, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x204, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x70, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x54, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x4}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x68, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xa4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x15c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x134, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x40}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x4}]}]}, 0xec4}}, 0x0) 17:55:06 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x208200) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) dup(0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 395.480167][T16028] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 395.573017][ T37] audit: type=1804 audit(1618682107.073:318): pid=16064 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/157/file0/bus" dev="sda1" ino=14625 res=1 errno=0 [ 395.652204][ T37] audit: type=1804 audit(1618682107.143:319): pid=16064 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/157/file0/bus" dev="sda1" ino=14625 res=1 errno=0 [ 395.677380][ T9475] usb 2-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=ce.99 [ 395.706215][ T9475] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.736963][T16068] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 395.750201][ T9475] usb 2-1: config 0 descriptor?? [ 395.778257][ T37] audit: type=1804 audit(1618682107.153:320): pid=16064 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/157/file0/bus" dev="sda1" ino=14625 res=1 errno=0 [ 395.817243][ T9475] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 395.841069][ T37] audit: type=1804 audit(1618682107.313:321): pid=16038 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/134/file0/bus" dev="sda1" ino=14969 res=1 errno=0 [ 397.814967][ T9475] gspca_stv06xx: I2C: Read error writing address: -71 [ 397.823296][ T9475] usb 2-1: USB disconnect, device number 46 17:55:09 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x40, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="201179000000790e91c778eee281205fe5a796a30199906c3b65d756cfce2965c03d1874a1921f21191850263501f7ec83267fc8666d5c3bbf82786ef75b44b3216b62ad99291694dac32641ec02050e4d7ca7d9fe925dc7a2f35eff252d8ebd73d083e023068ee5f465398322b2c03d86ab2a6ebec568a013aa4b8456f7e4"], &(0x7f00000000c0)={0x0, 0x3, 0x58, @string={0x58, 0x3, "23338a983878ab91423fc18c82577ac14263492cd336b5e9e9c8986709127ffaaa291b884a3918ee1e026044a53fafaeb6730d578bf675387d35ec9a2c3bcb572850f02a4f662810d884b3b8d1c7e6e81d38bef44578"}}}, &(0x7f0000000440)={0x34, &(0x7f0000000180)={0x40, 0x15, 0x7f, "4893800f6206ae753bcdfaf908f35f297d154182bedcdd74767ecb5583942f4a1d32e262538b094f8e9d8686ad8236d68092aec10e244c4b5e0ccff9108709ea3ac6556dabc87d18b112df13e6ce5d03dfd0d8f37e6759e7cbb6ed906868c4679079b5d86c313590226375f1680b5b996313b5437d50dffc2b52469e6a3680"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0xe0}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000002c0)={0x20, 0x0, 0xf6, {0xf4, "93b4c18e929213f997b6b9c946cd309a860b21242da6837b3d4fa7defdb288f8a6581b20a789697ca88846a1306d76183443543a972df58ff995e451ca76226784ffb2f475ddebd0b97fd069a032f397ff3baef0dcea4258349fcd143a73092f9b9987da83b43a9781420dc3b6e21ce5047b502837afd203ac2c0e3746d326e4f9e1f711c4313a00372f8cb633d13a423eec329c90fe64918760c2f6d1ee298acdc952f51d0e5ca1336dc7e8bb1c143bd59d21aa9f78a758aca424674196690c60fa0ee6128edd8037873c06cd6cc0668b4eef08f1bd019c624e22a60ea06a5d32d3a4ba4b2043e50837d40bc4b4eeb82b2b8ba4"}}, &(0x7f00000003c0)={0x20, 0x1, 0x1, 0x8}, &(0x7f0000000400)={0x20, 0x0, 0x1}}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 17:55:09 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)="24000000260007031dfffd866fa283002020020000000000000000010c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000064c0), 0x40000000000004b, 0x142, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x10001) 17:55:09 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)="24000000260007031dfffd866fa283002020020000000000000000010c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) recvmmsg(r0, &(0x7f00000064c0), 0x40000000000004b, 0x142, 0x0) 17:55:09 executing program 4: syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000fc0)='net/nf_conntrack\x00') 17:55:09 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x208200) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) getpid() read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) 17:55:09 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x208200) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) dup(0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 398.458980][ T37] audit: type=1804 audit(1618682109.963:322): pid=16090 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/158/file0/bus" dev="sda1" ino=14988 res=1 errno=0 17:55:10 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)="24000000260007031dfffd866fa283002020020000000000000000010c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000064c0), 0x40000000000004b, 0x142, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x10001) 17:55:10 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)="24000000260007031dfffd866fa283002020020000000000000000010c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) recvmmsg(r0, &(0x7f00000064c0), 0x40000000000004b, 0x142, 0x0) 17:55:10 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)="24000000260007031dfffd866fa283002020020000000000000000010c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000064c0), 0x40000000000004b, 0x142, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x10001) [ 398.605532][T16103] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 398.645270][ T37] audit: type=1804 audit(1618682109.983:323): pid=16096 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/135/file0/bus" dev="sda1" ino=14989 res=1 errno=0 [ 398.725224][ T4818] usb 2-1: new high-speed USB device number 47 using dummy_hcd 17:55:10 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)="24000000260007031dfffd866fa283002020020000000000000000010c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000064c0), 0x40000000000004b, 0x142, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x10001) 17:55:10 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)="24000000260007031dfffd866fa283002020020000000000000000010c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000064c0), 0x40000000000004b, 0x142, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x10001) 17:55:10 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)="24000000260007031dfffd866fa283002020020000000000000000010c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) recvmmsg(r0, &(0x7f00000064c0), 0x40000000000004b, 0x142, 0x0) [ 399.155472][ T4818] usb 2-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=ce.99 [ 399.173037][ T4818] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.286486][ T4818] usb 2-1: config 0 descriptor?? [ 399.393871][ T4818] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 399.438107][T16124] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 401.414941][ T4818] gspca_stv06xx: I2C: Read error writing address: -71 [ 401.423232][ T4818] usb 2-1: USB disconnect, device number 47 17:55:13 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x40, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="201179000000790e91c778eee281205fe5a796a30199906c3b65d756cfce2965c03d1874a1921f21191850263501f7ec83267fc8666d5c3bbf82786ef75b44b3216b62ad99291694dac32641ec02050e4d7ca7d9fe925dc7a2f35eff252d8ebd73d083e023068ee5f465398322b2c03d86ab2a6ebec568a013aa4b8456f7e4"], &(0x7f00000000c0)={0x0, 0x3, 0x58, @string={0x58, 0x3, "23338a983878ab91423fc18c82577ac14263492cd336b5e9e9c8986709127ffaaa291b884a3918ee1e026044a53fafaeb6730d578bf675387d35ec9a2c3bcb572850f02a4f662810d884b3b8d1c7e6e81d38bef44578"}}}, &(0x7f0000000440)={0x34, &(0x7f0000000180)={0x40, 0x15, 0x7f, "4893800f6206ae753bcdfaf908f35f297d154182bedcdd74767ecb5583942f4a1d32e262538b094f8e9d8686ad8236d68092aec10e244c4b5e0ccff9108709ea3ac6556dabc87d18b112df13e6ce5d03dfd0d8f37e6759e7cbb6ed906868c4679079b5d86c313590226375f1680b5b996313b5437d50dffc2b52469e6a3680"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0xe0}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000002c0)={0x20, 0x0, 0xf6, {0xf4, "93b4c18e929213f997b6b9c946cd309a860b21242da6837b3d4fa7defdb288f8a6581b20a789697ca88846a1306d76183443543a972df58ff995e451ca76226784ffb2f475ddebd0b97fd069a032f397ff3baef0dcea4258349fcd143a73092f9b9987da83b43a9781420dc3b6e21ce5047b502837afd203ac2c0e3746d326e4f9e1f711c4313a00372f8cb633d13a423eec329c90fe64918760c2f6d1ee298acdc952f51d0e5ca1336dc7e8bb1c143bd59d21aa9f78a758aca424674196690c60fa0ee6128edd8037873c06cd6cc0668b4eef08f1bd019c624e22a60ea06a5d32d3a4ba4b2043e50837d40bc4b4eeb82b2b8ba4"}}, &(0x7f00000003c0)={0x20, 0x1, 0x1, 0x8}, &(0x7f0000000400)={0x20, 0x0, 0x1}}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 17:55:13 executing program 0: mlock2(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3) 17:55:13 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)="24000000260007031dfffd866fa283002020020000000000000000010c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000064c0), 0x40000000000004b, 0x142, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x10001) 17:55:13 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x208200) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) dup(0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) 17:55:13 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)="24000000260007031dfffd866fa283002020020000000000000000010c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000064c0), 0x40000000000004b, 0x142, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x10001) 17:55:13 executing program 2: mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x208200) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) getpid() read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) [ 401.994777][ T37] kauditd_printk_skb: 3 callbacks suppressed [ 401.994792][ T37] audit: type=1804 audit(1618682113.493:327): pid=16145 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/136/bus" dev="sda1" ino=15000 res=1 errno=0 17:55:13 executing program 4: syz_open_dev$loop(&(0x7f00000003c0)='/dev/loop#\x00', 0x0, 0x80) [ 402.103450][T16143] overlayfs: unrecognized mount option "context=staff_u" or missing value 17:55:13 executing program 0: syz_open_procfs(0x0, &(0x7f0000002100)='net/tcp\x00') r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f0000000580)=[{&(0x7f0000000100)=""/233, 0xe9}], 0x1, 0x0, 0x0) 17:55:13 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x208200) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) dup(0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 402.149561][ T37] audit: type=1804 audit(1618682113.553:328): pid=16150 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/159/file0/bus" dev="sda1" ino=15005 res=1 errno=0 17:55:13 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x5609, &(0x7f0000000400)="10") [ 402.324319][ T37] audit: type=1804 audit(1618682113.593:329): pid=16145 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/136/bus" dev="sda1" ino=15000 res=1 errno=0 17:55:13 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r1, &(0x7f0000003d00)={0x0, 0x0, &(0x7f0000003cc0)={&(0x7f0000000d80)={0xec4, r0, 0x8d550b27f3552fbf, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_PMSR_ATTR_PEERS={0x7e0, 0x5, 0x0, 0x1, [{0x340, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x58, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x50, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x290, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xd0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xa4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x108, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2f}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7fffffff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x216}]}]}, {0x50, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2ed}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xd}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}]}]}, {0xa4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1000}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x30}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x400}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x4}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8}]}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0x35c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xf4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xe4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x942}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x1e8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x68, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x90, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xb0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x40}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x2c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}]}]}]}]}, @NL80211_PMSR_ATTR_PEERS={0x6c4, 0x5, 0x0, 0x1, [{0x2a4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x34, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x1a4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x13c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x200}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x60, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7a}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}]}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x3ec, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xc}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x204, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x70, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x54, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x4}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x68, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xa4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xe99d}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x15c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x134, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xff}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x40}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfff8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x20}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x4}]}]}, 0xec4}, 0x1, 0x0, 0x0, 0x10}, 0x4004000) 17:55:13 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8993, &(0x7f0000000000)={'vcan0\x00'}) [ 402.414775][ T4818] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 402.527032][ T37] audit: type=1804 audit(1618682113.623:330): pid=16150 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/159/file0/bus" dev="sda1" ino=15005 res=1 errno=0 [ 402.527097][ T37] audit: type=1804 audit(1618682113.753:331): pid=16145 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/136/bus" dev="sda1" ino=15000 res=1 errno=0 [ 402.527141][ T37] audit: type=1804 audit(1618682113.943:332): pid=16162 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/160/bus" dev="sda1" ino=14984 res=1 errno=0 [ 402.527185][ T37] audit: type=1804 audit(1618682113.953:333): pid=16162 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/160/bus" dev="sda1" ino=14984 res=1 errno=0 [ 402.527239][ T37] audit: type=1804 audit(1618682113.953:334): pid=16162 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/160/bus" dev="sda1" ino=14984 res=1 errno=0 [ 402.546016][T16165] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 402.784797][ T4818] usb 2-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=ce.99 [ 403.385150][ T4818] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.413674][ T4818] usb 2-1: config 0 descriptor?? [ 403.445999][T16176] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 403.485545][ T4818] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 405.544764][ T4818] gspca_stv06xx: I2C: Read error writing address: -71 [ 405.553826][ T4818] usb 2-1: USB disconnect, device number 48 17:55:17 executing program 1: syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000140)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="201179000000790e91c778eee281205fe5a796a30199906c3b65d756cfce2965c03d1874a1921f21191850263501f7ec83267fc8666d5c3bbf82786ef75b44b3216b62ad99291694dac32641ec02050e4d7ca7d9fe925dc7a2f35eff252d8ebd73d083e023068ee5f465398322b2c03d86ab2a6ebec568a013aa4b8456f7e4"], &(0x7f00000000c0)={0x0, 0x3, 0x58, @string={0x58, 0x3, "23338a983878ab91423fc18c82577ac14263492cd336b5e9e9c8986709127ffaaa291b884a3918ee1e026044a53fafaeb6730d578bf675387d35ec9a2c3bcb572850f02a4f662810d884b3b8d1c7e6e81d38bef44578"}}}, &(0x7f0000000440)={0x34, &(0x7f0000000180)={0x40, 0x15, 0x7f, "4893800f6206ae753bcdfaf908f35f297d154182bedcdd74767ecb5583942f4a1d32e262538b094f8e9d8686ad8236d68092aec10e244c4b5e0ccff9108709ea3ac6556dabc87d18b112df13e6ce5d03dfd0d8f37e6759e7cbb6ed906868c4679079b5d86c313590226375f1680b5b996313b5437d50dffc2b52469e6a3680"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0xe0}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000002c0)={0x20, 0x0, 0xf6, {0xf4, "93b4c18e929213f997b6b9c946cd309a860b21242da6837b3d4fa7defdb288f8a6581b20a789697ca88846a1306d76183443543a972df58ff995e451ca76226784ffb2f475ddebd0b97fd069a032f397ff3baef0dcea4258349fcd143a73092f9b9987da83b43a9781420dc3b6e21ce5047b502837afd203ac2c0e3746d326e4f9e1f711c4313a00372f8cb633d13a423eec329c90fe64918760c2f6d1ee298acdc952f51d0e5ca1336dc7e8bb1c143bd59d21aa9f78a758aca424674196690c60fa0ee6128edd8037873c06cd6cc0668b4eef08f1bd019c624e22a60ea06a5d32d3a4ba4b2043e50837d40bc4b4eeb82b2b8ba4"}}, &(0x7f00000003c0)={0x20, 0x1, 0x1, 0x8}, &(0x7f0000000400)={0x20, 0x0, 0x1}}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) 17:55:17 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x13, &(0x7f00000005c0)=@nat={'nat\x00', 0x1b, 0x5, 0x324, 0x1b4, 0xa4, 0xffffffff, 0x258, 0x1b4, 0x328, 0x328, 0xffffffff, 0x328, 0x328, 0x5, 0x0, {[{{@ip={@dev, @local, 0x0, 0x0, 'veth0_to_bridge\x00'}, 0x0, 0x70, 0xa4}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @rand_addr, @icmp_id, @icmp_id}}}}, {{@ip={@multicast1, @empty, 0x0, 0x0, 'macvlan0\x00', 'ip6_vti0\x00'}, 0x0, 0x70, 0xa4}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @gre_key, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa4}, @MASQUERADE={0x34, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @port, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa4}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x0, @loopback, @multicast2, @gre_key, @icmp_id}}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x380) 17:55:17 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x16}]}) 17:55:17 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x5609, &(0x7f0000000400)="10") 17:55:17 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x208200) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) dup(0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) 17:55:17 executing program 2: mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x208200) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) getpid() read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) [ 406.105055][ T37] audit: type=1804 audit(1618682117.614:335): pid=16200 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/137/bus" dev="sda1" ino=14145 res=1 errno=0 17:55:17 executing program 4: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 17:55:17 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x5609, &(0x7f0000000400)="10") 17:55:17 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000005c0)=@nat={'nat\x00', 0x1b, 0x5, 0x390, 0x15c, 0xa4, 0xffffffff, 0x0, 0xa4, 0x2a4, 0x2a4, 0xffffffff, 0x2a4, 0x2a4, 0x5, 0x0, {[{{@ip={@dev, @local, 0x0, 0x0, 'veth0_to_bridge\x00'}, 0x0, 0x70, 0xa4}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr, @icmp_id, @icmp_id}}}}, {{@ip={@multicast1, @dev, 0x0, 0x0, 'macvlan0\x00', 'ip6_vti0\x00'}, 0x0, 0xdc, 0x110}, @unspec=@DNAT1={0x0, 'DNAT\x00', 0x1, {0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@loopback, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0x70, 0xa4}, @MASQUERADE={0x34, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @port, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa4}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x0, @loopback, @multicast2, @gre_key, @icmp_id}}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x435) 17:55:17 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fffff7a}]}) io_setup(0x0, 0x0) [ 406.251289][T16209] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 406.261335][ T37] audit: type=1804 audit(1618682117.644:336): pid=16202 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/161/bus" dev="sda1" ino=14193 res=1 errno=0 17:55:17 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x208200) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) dup(0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) 17:55:17 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x5609, &(0x7f0000000400)="10") [ 406.472917][T16223] overlayfs: unrecognized mount option "context=staff_u" or missing value 17:55:18 executing program 1: syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000140)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="201179000000790e91c778eee281205fe5a796a30199906c3b65d756cfce2965c03d1874a1921f21191850263501f7ec83267fc8666d5c3bbf82786ef75b44b3216b62ad99291694dac32641ec02050e4d7ca7d9fe925dc7a2f35eff252d8ebd73d083e023068ee5f465398322b2c03d86ab2a6ebec568a013aa4b8456f7e4"], &(0x7f00000000c0)={0x0, 0x3, 0x58, @string={0x58, 0x3, "23338a983878ab91423fc18c82577ac14263492cd336b5e9e9c8986709127ffaaa291b884a3918ee1e026044a53fafaeb6730d578bf675387d35ec9a2c3bcb572850f02a4f662810d884b3b8d1c7e6e81d38bef44578"}}}, &(0x7f0000000440)={0x34, &(0x7f0000000180)={0x40, 0x15, 0x7f, "4893800f6206ae753bcdfaf908f35f297d154182bedcdd74767ecb5583942f4a1d32e262538b094f8e9d8686ad8236d68092aec10e244c4b5e0ccff9108709ea3ac6556dabc87d18b112df13e6ce5d03dfd0d8f37e6759e7cbb6ed906868c4679079b5d86c313590226375f1680b5b996313b5437d50dffc2b52469e6a3680"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0xe0}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000002c0)={0x20, 0x0, 0xf6, {0xf4, "93b4c18e929213f997b6b9c946cd309a860b21242da6837b3d4fa7defdb288f8a6581b20a789697ca88846a1306d76183443543a972df58ff995e451ca76226784ffb2f475ddebd0b97fd069a032f397ff3baef0dcea4258349fcd143a73092f9b9987da83b43a9781420dc3b6e21ce5047b502837afd203ac2c0e3746d326e4f9e1f711c4313a00372f8cb633d13a423eec329c90fe64918760c2f6d1ee298acdc952f51d0e5ca1336dc7e8bb1c143bd59d21aa9f78a758aca424674196690c60fa0ee6128edd8037873c06cd6cc0668b4eef08f1bd019c624e22a60ea06a5d32d3a4ba4b2043e50837d40bc4b4eeb82b2b8ba4"}}, &(0x7f00000003c0)={0x20, 0x1, 0x1, 0x8}, &(0x7f0000000400)={0x20, 0x0, 0x1}}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) 17:55:18 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x5, &(0x7f00000005c0)=@nat={'nat\x00', 0x1b, 0x5, 0x324, 0x1b4, 0xa4, 0xffffffff, 0x258, 0x1b4, 0x328, 0x328, 0xffffffff, 0x328, 0x328, 0x5, 0x0, {[{{@ip={@dev, @local, 0x0, 0x0, 'veth0_to_bridge\x00'}, 0x0, 0x70, 0xa4}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @rand_addr, @icmp_id, @icmp_id}}}}, {{@ip={@multicast1, @empty, 0x0, 0x0, 'macvlan0\x00', 'ip6_vti0\x00'}, 0x0, 0x70, 0xa4}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @gre_key, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa4}, @MASQUERADE={0x34, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @port, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa4}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x0, @loopback, @multicast2, @gre_key, @icmp_id}}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x380) 17:55:18 executing program 0: modify_ldt$write(0x1, &(0x7f0000000000)={0x1000}, 0x10) modify_ldt$write2(0x11, &(0x7f0000000040), 0x10) 17:55:18 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x17, 0x0, 0x7ffe, 0xfffffff9, 0x0, 0x1}, 0x40) 17:55:18 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(0x0, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x208200) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) dup(0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 407.325698][T16240] overlayfs: unrecognized mount option "context=staff_u" or missing value 17:55:19 executing program 2: mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x208200) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) getpid() read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) 17:55:19 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x3, 0x129841) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SCSI_RESET(r1, 0x2286, 0x816d000) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000080)={0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) write$evdev(r0, &(0x7f0000000040), 0x20000220) 17:55:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000300)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x300}, 0x0) 17:55:19 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(0x0, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x208200) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) dup(0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) 17:55:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080)='ethtool\x00', 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x20, r1, 0x1, 0x0, 0x0, {0x2}, [@ETHTOOL_A_WOL_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x0) 17:55:19 executing program 1: syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000140)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="201179000000790e91c778eee281205fe5a796a30199906c3b65d756cfce2965c03d1874a1921f21191850263501f7ec83267fc8666d5c3bbf82786ef75b44b3216b62ad99291694dac32641ec02050e4d7ca7d9fe925dc7a2f35eff252d8ebd73d083e023068ee5f465398322b2c03d86ab2a6ebec568a013aa4b8456f7e4"], &(0x7f00000000c0)={0x0, 0x3, 0x58, @string={0x58, 0x3, "23338a983878ab91423fc18c82577ac14263492cd336b5e9e9c8986709127ffaaa291b884a3918ee1e026044a53fafaeb6730d578bf675387d35ec9a2c3bcb572850f02a4f662810d884b3b8d1c7e6e81d38bef44578"}}}, &(0x7f0000000440)={0x34, &(0x7f0000000180)={0x40, 0x15, 0x7f, "4893800f6206ae753bcdfaf908f35f297d154182bedcdd74767ecb5583942f4a1d32e262538b094f8e9d8686ad8236d68092aec10e244c4b5e0ccff9108709ea3ac6556dabc87d18b112df13e6ce5d03dfd0d8f37e6759e7cbb6ed906868c4679079b5d86c313590226375f1680b5b996313b5437d50dffc2b52469e6a3680"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0xe0}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000002c0)={0x20, 0x0, 0xf6, {0xf4, "93b4c18e929213f997b6b9c946cd309a860b21242da6837b3d4fa7defdb288f8a6581b20a789697ca88846a1306d76183443543a972df58ff995e451ca76226784ffb2f475ddebd0b97fd069a032f397ff3baef0dcea4258349fcd143a73092f9b9987da83b43a9781420dc3b6e21ce5047b502837afd203ac2c0e3746d326e4f9e1f711c4313a00372f8cb633d13a423eec329c90fe64918760c2f6d1ee298acdc952f51d0e5ca1336dc7e8bb1c143bd59d21aa9f78a758aca424674196690c60fa0ee6128edd8037873c06cd6cc0668b4eef08f1bd019c624e22a60ea06a5d32d3a4ba4b2043e50837d40bc4b4eeb82b2b8ba4"}}, &(0x7f00000003c0)={0x20, 0x1, 0x1, 0x8}, &(0x7f0000000400)={0x20, 0x0, 0x1}}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) 17:55:19 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0xf0ff7f}, 0x0) [ 407.659406][ T37] kauditd_printk_skb: 6 callbacks suppressed [ 407.659420][ T37] audit: type=1804 audit(1618682119.164:343): pid=16262 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/138/bus" dev="sda1" ino=13971 res=1 errno=0 17:55:19 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x9}, 0x40) 17:55:19 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(0x0, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x208200) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) dup(0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) 17:55:19 executing program 3: r0 = gettid() capget(&(0x7f0000000180)={0x20071026, r0}, &(0x7f00000001c0)) [ 407.837717][ T37] audit: type=1804 audit(1618682119.344:344): pid=16262 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/138/bus" dev="sda1" ino=13971 res=1 errno=0 17:55:19 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0008000000000000340012800b00010069703667726500002400028014000700ff01000000000000000000000000000106000200000000000400120008000a00", @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 17:55:19 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(0x0, 0x0, 0x0) ftruncate(r0, 0x208200) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) dup(0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 407.920124][T16275] capability: warning: `syz-executor.3' uses deprecated v2 capabilities in a way that may be insecure [ 408.138495][T16284] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 408.194935][ T37] audit: type=1804 audit(1618682119.684:345): pid=16262 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/138/bus" dev="sda1" ino=13971 res=1 errno=0 [ 409.176406][T16299] overlayfs: unrecognized mount option "context=staff_u" or missing value 17:55:21 executing program 2: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x208200) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) getpid() read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) 17:55:21 executing program 3: r0 = socket(0x28, 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, 0x0, 0x0) 17:55:21 executing program 1: r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="201179000000790e91c778eee281205fe5a796a30199906c3b65d756cfce2965c03d1874a1921f21191850263501f7ec83267fc8666d5c3bbf82786ef75b44b3216b62ad99291694dac32641ec02050e4d7ca7d9fe925dc7a2f35eff252d8ebd73d083e023068ee5f465398322b2c03d86ab2a6ebec568a013aa4b8456f7e4"], &(0x7f00000000c0)={0x0, 0x3, 0x58, @string={0x58, 0x3, "23338a983878ab91423fc18c82577ac14263492cd336b5e9e9c8986709127ffaaa291b884a3918ee1e026044a53fafaeb6730d578bf675387d35ec9a2c3bcb572850f02a4f662810d884b3b8d1c7e6e81d38bef44578"}}}, &(0x7f0000000440)={0x34, &(0x7f0000000180)={0x40, 0x15, 0x7f, "4893800f6206ae753bcdfaf908f35f297d154182bedcdd74767ecb5583942f4a1d32e262538b094f8e9d8686ad8236d68092aec10e244c4b5e0ccff9108709ea3ac6556dabc87d18b112df13e6ce5d03dfd0d8f37e6759e7cbb6ed906868c4679079b5d86c313590226375f1680b5b996313b5437d50dffc2b52469e6a3680"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0xe0}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000002c0)={0x20, 0x0, 0xf6, {0xf4, "93b4c18e929213f997b6b9c946cd309a860b21242da6837b3d4fa7defdb288f8a6581b20a789697ca88846a1306d76183443543a972df58ff995e451ca76226784ffb2f475ddebd0b97fd069a032f397ff3baef0dcea4258349fcd143a73092f9b9987da83b43a9781420dc3b6e21ce5047b502837afd203ac2c0e3746d326e4f9e1f711c4313a00372f8cb633d13a423eec329c90fe64918760c2f6d1ee298acdc952f51d0e5ca1336dc7e8bb1c143bd59d21aa9f78a758aca424674196690c60fa0ee6128edd8037873c06cd6cc0668b4eef08f1bd019c624e22a60ea06a5d32d3a4ba4b2043e50837d40bc4b4eeb82b2b8ba4"}}, &(0x7f00000003c0)={0x20, 0x1, 0x1, 0x8}, &(0x7f0000000400)={0x20, 0x0, 0x1}}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 17:55:21 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 17:55:21 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(0x0, 0x0, 0x0) ftruncate(r0, 0x208200) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) dup(0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) 17:55:21 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x2a, 0x0, 0x0) 17:55:21 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000000080), 0x4) 17:55:21 executing program 3: r0 = openat$vnet(0xffffff9c, &(0x7f00000001c0)='/dev/vhost-net\x00', 0x2, 0x0) write$vhost_msg(r0, &(0x7f0000001280)={0x1, {0x0, 0x0, 0x0}}, 0x44) 17:55:21 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x890b, 0x0) [ 409.688688][T16318] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 409.698564][ T37] audit: type=1804 audit(1618682121.204:346): pid=16317 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/139/bus" dev="sda1" ino=13877 res=1 errno=0 17:55:21 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000005c0)=@nat={'nat\x00', 0x1b, 0x5, 0x324, 0x1b4, 0xa4, 0xffffffff, 0x258, 0x1b4, 0x328, 0x328, 0xffffffff, 0x328, 0x328, 0x5, 0x0, {[{{@ip={@dev, @local, 0x0, 0x0, 'veth0_to_bridge\x00', '\x00', {}, {}, 0x0, 0x7}, 0x0, 0x70, 0xa4}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @rand_addr, @icmp_id, @icmp_id}}}}, {{@ip={@multicast1, @empty, 0x0, 0x0, 'macvlan0\x00', 'ip6_vti0\x00'}, 0x0, 0x70, 0xa4}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @gre_key, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa4}, @MASQUERADE={0x34, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @port, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa4}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x0, @loopback, @multicast2, @gre_key, @icmp_id}}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x380) 17:55:21 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x16}]}) 17:55:21 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8927, &(0x7f0000000000)={'vcan0\x00'}) [ 410.050128][ T37] audit: type=1804 audit(1618682121.554:347): pid=16317 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/139/bus" dev="sda1" ino=13877 res=1 errno=0 [ 410.219064][ T37] audit: type=1326 audit(1618682121.624:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16329 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=230 compat=0 ip=0x48a621 code=0x0 [ 410.329290][ T37] audit: type=1326 audit(1618682121.624:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16329 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x466459 code=0x0 [ 410.435590][ T37] audit: type=1804 audit(1618682121.794:350): pid=16317 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/139/bus" dev="sda1" ino=13877 res=1 errno=0 [ 410.849960][T16344] overlayfs: unrecognized mount option "context=staff_u" or missing value 17:55:22 executing program 2: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x208200) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) getpid() read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) 17:55:22 executing program 1: r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="201179000000790e91c778eee281205fe5a796a30199906c3b65d756cfce2965c03d1874a1921f21191850263501f7ec83267fc8666d5c3bbf82786ef75b44b3216b62ad99291694dac32641ec02050e4d7ca7d9fe925dc7a2f35eff252d8ebd73d083e023068ee5f465398322b2c03d86ab2a6ebec568a013aa4b8456f7e4"], &(0x7f00000000c0)={0x0, 0x3, 0x58, @string={0x58, 0x3, "23338a983878ab91423fc18c82577ac14263492cd336b5e9e9c8986709127ffaaa291b884a3918ee1e026044a53fafaeb6730d578bf675387d35ec9a2c3bcb572850f02a4f662810d884b3b8d1c7e6e81d38bef44578"}}}, &(0x7f0000000440)={0x34, &(0x7f0000000180)={0x40, 0x15, 0x7f, "4893800f6206ae753bcdfaf908f35f297d154182bedcdd74767ecb5583942f4a1d32e262538b094f8e9d8686ad8236d68092aec10e244c4b5e0ccff9108709ea3ac6556dabc87d18b112df13e6ce5d03dfd0d8f37e6759e7cbb6ed906868c4679079b5d86c313590226375f1680b5b996313b5437d50dffc2b52469e6a3680"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0xe0}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000002c0)={0x20, 0x0, 0xf6, {0xf4, "93b4c18e929213f997b6b9c946cd309a860b21242da6837b3d4fa7defdb288f8a6581b20a789697ca88846a1306d76183443543a972df58ff995e451ca76226784ffb2f475ddebd0b97fd069a032f397ff3baef0dcea4258349fcd143a73092f9b9987da83b43a9781420dc3b6e21ce5047b502837afd203ac2c0e3746d326e4f9e1f711c4313a00372f8cb633d13a423eec329c90fe64918760c2f6d1ee298acdc952f51d0e5ca1336dc7e8bb1c143bd59d21aa9f78a758aca424674196690c60fa0ee6128edd8037873c06cd6cc0668b4eef08f1bd019c624e22a60ea06a5d32d3a4ba4b2043e50837d40bc4b4eeb82b2b8ba4"}}, &(0x7f00000003c0)={0x20, 0x1, 0x1, 0x8}, &(0x7f0000000400)={0x20, 0x0, 0x1}}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 17:55:22 executing program 0: syz_io_uring_setup(0x6d68, &(0x7f0000000100), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) syz_io_uring_setup(0x22ae, &(0x7f0000000200), &(0x7f00005ae000/0x3000)=nil, &(0x7f0000854000/0x2000)=nil, &(0x7f0000000280), &(0x7f00000002c0)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000300)=@IORING_OP_POLL_REMOVE, 0x7fffffff) 17:55:22 executing program 4: socket(0x10, 0x2, 0x5) 17:55:22 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x89b1, &(0x7f0000000000)={'vcan0\x00'}) 17:55:22 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(0x0, 0x0, 0x0) ftruncate(r0, 0x208200) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) dup(0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) 17:55:22 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x1600bd78, 0x0, 0x0) 17:55:22 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x8, 0x0, 0x3) 17:55:22 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) getsockopt$inet6_int(r0, 0x29, 0x12, 0x0, &(0x7f0000000040)) [ 411.196614][ T37] audit: type=1804 audit(1618682122.704:351): pid=16360 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/140/bus" dev="sda1" ino=14657 res=1 errno=0 [ 411.236865][T16366] overlayfs: unrecognized mount option "context=staff_u" or missing value 17:55:22 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080)='ethtool\x00', 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x20, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_WOL_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x0) 17:55:22 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x5a08, 0x0) [ 411.360116][ T37] audit: type=1804 audit(1618682122.864:352): pid=16360 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/140/bus" dev="sda1" ino=14657 res=1 errno=0 17:55:22 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x18, &(0x7f00000005c0)=@nat={'nat\x00', 0x1b, 0x5, 0x324, 0x1b4, 0xa4, 0xffffffff, 0x258, 0x1b4, 0x328, 0x328, 0xffffffff, 0x328, 0x328, 0x5, 0x0, {[{{@ip={@dev, @local, 0x0, 0x0, 'veth0_to_bridge\x00'}, 0x0, 0x70, 0xa4}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @rand_addr, @icmp_id, @icmp_id}}}}, {{@ip={@multicast1, @empty, 0x0, 0x0, 'macvlan0\x00', 'ip6_vti0\x00'}, 0x0, 0x70, 0xa4}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @gre_key, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa4}, @MASQUERADE={0x34, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @port, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa4}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x0, @loopback, @multicast2, @gre_key, @icmp_id}}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x380) [ 412.242368][T16389] overlayfs: unrecognized mount option "context=staff_u" or missing value 17:55:23 executing program 2: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x208200) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) getpid() read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) 17:55:23 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x16, 0x0, 0x0) 17:55:23 executing program 0: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x84800) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x5450, 0x0) 17:55:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000880)='ethtool\x00', 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000bc0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000f80000000000120000002800018008000300000000001400020062726987298b7c7b19c95919ca7fb164"], 0x3c}}, 0x0) 17:55:23 executing program 1: r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="201179000000790e91c778eee281205fe5a796a30199906c3b65d756cfce2965c03d1874a1921f21191850263501f7ec83267fc8666d5c3bbf82786ef75b44b3216b62ad99291694dac32641ec02050e4d7ca7d9fe925dc7a2f35eff252d8ebd73d083e023068ee5f465398322b2c03d86ab2a6ebec568a013aa4b8456f7e4"], &(0x7f00000000c0)={0x0, 0x3, 0x58, @string={0x58, 0x3, "23338a983878ab91423fc18c82577ac14263492cd336b5e9e9c8986709127ffaaa291b884a3918ee1e026044a53fafaeb6730d578bf675387d35ec9a2c3bcb572850f02a4f662810d884b3b8d1c7e6e81d38bef44578"}}}, &(0x7f0000000440)={0x34, &(0x7f0000000180)={0x40, 0x15, 0x7f, "4893800f6206ae753bcdfaf908f35f297d154182bedcdd74767ecb5583942f4a1d32e262538b094f8e9d8686ad8236d68092aec10e244c4b5e0ccff9108709ea3ac6556dabc87d18b112df13e6ce5d03dfd0d8f37e6759e7cbb6ed906868c4679079b5d86c313590226375f1680b5b996313b5437d50dffc2b52469e6a3680"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0xe0}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000002c0)={0x20, 0x0, 0xf6, {0xf4, "93b4c18e929213f997b6b9c946cd309a860b21242da6837b3d4fa7defdb288f8a6581b20a789697ca88846a1306d76183443543a972df58ff995e451ca76226784ffb2f475ddebd0b97fd069a032f397ff3baef0dcea4258349fcd143a73092f9b9987da83b43a9781420dc3b6e21ce5047b502837afd203ac2c0e3746d326e4f9e1f711c4313a00372f8cb633d13a423eec329c90fe64918760c2f6d1ee298acdc952f51d0e5ca1336dc7e8bb1c143bd59d21aa9f78a758aca424674196690c60fa0ee6128edd8037873c06cd6cc0668b4eef08f1bd019c624e22a60ea06a5d32d3a4ba4b2043e50837d40bc4b4eeb82b2b8ba4"}}, &(0x7f00000003c0)={0x20, 0x1, 0x1, 0x8}, &(0x7f0000000400)={0x20, 0x0, 0x1}}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 17:55:23 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x208200) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r0, 0x0) read(r0, &(0x7f0000000180)=""/19, 0xfffffe47) dup(0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) 17:55:24 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x8, 0x0, 0x0) 17:55:24 executing program 0: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 17:55:24 executing program 4: syz_io_uring_setup(0x75bc, &(0x7f0000000040)={0x0, 0x9936}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000e63000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x2db8, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000e63000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000000)) 17:55:24 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x208200) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r0, 0x0) read(r0, &(0x7f0000000180)=""/19, 0xfffffe47) dup(0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 412.670777][ T37] kauditd_printk_skb: 4 callbacks suppressed [ 412.670791][ T37] audit: type=1804 audit(1618682124.174:357): pid=16407 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/141/bus" dev="sda1" ino=15015 res=1 errno=0 17:55:24 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x17, &(0x7f00000005c0)=@nat={'nat\x00', 0x1b, 0x5, 0x324, 0x1b4, 0xa4, 0xffffffff, 0x258, 0x1b4, 0x328, 0x328, 0xffffffff, 0x328, 0x328, 0x5, 0x0, {[{{@ip={@dev, @local, 0x0, 0x0, 'veth0_to_bridge\x00'}, 0x0, 0x70, 0xa4}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @rand_addr, @icmp_id, @icmp_id}}}}, {{@ip={@multicast1, @empty, 0x0, 0x0, 'macvlan0\x00', 'ip6_vti0\x00'}, 0x0, 0x70, 0xa4}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @gre_key, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa4}, @MASQUERADE={0x34, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @port, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa4}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x0, @loopback, @multicast2, @gre_key, @icmp_id}}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x380) 17:55:24 executing program 0: r0 = socket(0x28, 0x1, 0x0) recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) [ 412.793229][ T37] audit: type=1804 audit(1618682124.274:358): pid=16407 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/141/bus" dev="sda1" ino=15015 res=1 errno=0 [ 412.877919][ T37] audit: type=1804 audit(1618682124.364:359): pid=16407 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/141/bus" dev="sda1" ino=15015 res=1 errno=0 [ 412.966706][ T37] audit: type=1804 audit(1618682124.454:360): pid=16421 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/170/bus" dev="sda1" ino=14580 res=1 errno=0 [ 412.999557][ T37] audit: type=1804 audit(1618682124.484:361): pid=16421 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/170/bus" dev="sda1" ino=14580 res=1 errno=0 [ 413.028398][ T37] audit: type=1804 audit(1618682124.494:362): pid=16418 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/170/bus" dev="sda1" ino=14580 res=1 errno=0 [ 413.215938][T16427] overlayfs: unrecognized mount option "context=staff_u" or missing value 17:55:25 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x208200) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) getpid() read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) 17:55:25 executing program 4: syz_io_uring_setup(0x75bc, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000e63000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x2db8, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000e63000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000000)) 17:55:25 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SCSI_RESET(r1, 0x2286, 0x816d000) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)="c9126bf7"}) 17:55:25 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x208200) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r0, 0x0) read(r0, &(0x7f0000000180)=""/19, 0xfffffe47) dup(0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) 17:55:25 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x0, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="201179000000790e91c778eee281205fe5a796a30199906c3b65d756cfce2965c03d1874a1921f21191850263501f7ec83267fc8666d5c3bbf82786ef75b44b3216b62ad99291694dac32641ec02050e4d7ca7d9fe925dc7a2f35eff252d8ebd73d083e023068ee5f465398322b2c03d86ab2a6ebec568a013aa4b8456f7e4"], &(0x7f00000000c0)={0x0, 0x3, 0x58, @string={0x58, 0x3, "23338a983878ab91423fc18c82577ac14263492cd336b5e9e9c8986709127ffaaa291b884a3918ee1e026044a53fafaeb6730d578bf675387d35ec9a2c3bcb572850f02a4f662810d884b3b8d1c7e6e81d38bef44578"}}}, &(0x7f0000000440)={0x34, &(0x7f0000000180)={0x40, 0x15, 0x7f, "4893800f6206ae753bcdfaf908f35f297d154182bedcdd74767ecb5583942f4a1d32e262538b094f8e9d8686ad8236d68092aec10e244c4b5e0ccff9108709ea3ac6556dabc87d18b112df13e6ce5d03dfd0d8f37e6759e7cbb6ed906868c4679079b5d86c313590226375f1680b5b996313b5437d50dffc2b52469e6a3680"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0xe0}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000002c0)={0x20, 0x0, 0xf6, {0xf4, "93b4c18e929213f997b6b9c946cd309a860b21242da6837b3d4fa7defdb288f8a6581b20a789697ca88846a1306d76183443543a972df58ff995e451ca76226784ffb2f475ddebd0b97fd069a032f397ff3baef0dcea4258349fcd143a73092f9b9987da83b43a9781420dc3b6e21ce5047b502837afd203ac2c0e3746d326e4f9e1f711c4313a00372f8cb633d13a423eec329c90fe64918760c2f6d1ee298acdc952f51d0e5ca1336dc7e8bb1c143bd59d21aa9f78a758aca424674196690c60fa0ee6128edd8037873c06cd6cc0668b4eef08f1bd019c624e22a60ea06a5d32d3a4ba4b2043e50837d40bc4b4eeb82b2b8ba4"}}, &(0x7f00000003c0)={0x20, 0x1, 0x1, 0x8}, &(0x7f0000000400)={0x20, 0x0, 0x1}}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 17:55:25 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x22, &(0x7f00000005c0)=@nat={'nat\x00', 0x1b, 0x5, 0x324, 0x1b4, 0xa4, 0xffffffff, 0x258, 0x1b4, 0x328, 0x328, 0xffffffff, 0x328, 0x328, 0x5, 0x0, {[{{@ip={@dev, @local, 0x0, 0x0, 'veth0_to_bridge\x00'}, 0x0, 0x70, 0xa4}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @rand_addr, @icmp_id, @icmp_id}}}}, {{@ip={@multicast1, @empty, 0x0, 0x0, 'macvlan0\x00', 'ip6_vti0\x00'}, 0x0, 0x70, 0xa4}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @gre_key, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa4}, @MASQUERADE={0x34, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @port, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa4}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x0, @loopback, @multicast2, @gre_key, @icmp_id}}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x380) 17:55:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00', 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d80)={0x18, r1, 0x1, 0x0, 0x0, {0x5}, [@ETHTOOL_A_WOL_SOPASS={0x4}]}, 0x18}}, 0x0) [ 413.618627][ T37] audit: type=1804 audit(1618682125.124:363): pid=16442 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/171/file0/bus" dev="ramfs" ino=45462 res=1 errno=0 17:55:25 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x15, 0x0, 0x0) 17:55:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r1, 0x1}, 0x14}}, 0x0) recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x2002) [ 413.709707][T16450] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 413.760764][ T37] audit: type=1804 audit(1618682125.194:364): pid=16447 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/142/file0/bus" dev="sda1" ino=15040 res=1 errno=0 17:55:25 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) dup(0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) 17:55:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080)='ethtool\x00', 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x20, r1, 0x1, 0x0, 0x0, {0x3}, [@ETHTOOL_A_WOL_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x0) [ 413.866605][ T36] usb 2-1: new high-speed USB device number 49 using dummy_hcd 17:55:25 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x89a1, 0x0) [ 413.916319][ T37] audit: type=1804 audit(1618682125.214:365): pid=16442 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/171/file0/bus" dev="ramfs" ino=45462 res=1 errno=0 [ 413.990766][ T37] audit: type=1804 audit(1618682125.264:366): pid=16447 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/142/file0/bus" dev="sda1" ino=15040 res=1 errno=0 [ 414.064204][ T36] usb 2-1: device descriptor read/64, error 18 [ 414.297347][T16478] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 414.344518][ T36] usb 2-1: new high-speed USB device number 50 using dummy_hcd 17:55:26 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x208200) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) getpid() read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) 17:55:26 executing program 3: r0 = openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@cgroup=r0}, 0x10) 17:55:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={0x0}, 0x1, 0x0, 0x9effffff}, 0x0) 17:55:26 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) dup(0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 414.534379][ T36] usb 2-1: device descriptor read/64, error 18 [ 414.644506][T16488] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 414.656408][ T36] usb usb2-port1: attempt power cycle [ 414.876452][T16496] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 415.374150][ T36] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 415.464404][ T36] usb 2-1: Invalid ep0 maxpacket: 0 [ 415.614106][ T36] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 415.704565][ T36] usb 2-1: Invalid ep0 maxpacket: 0 [ 415.710114][ T36] usb usb2-port1: unable to enumerate USB device 17:55:28 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x0, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="201179000000790e91c778eee281205fe5a796a30199906c3b65d756cfce2965c03d1874a1921f21191850263501f7ec83267fc8666d5c3bbf82786ef75b44b3216b62ad99291694dac32641ec02050e4d7ca7d9fe925dc7a2f35eff252d8ebd73d083e023068ee5f465398322b2c03d86ab2a6ebec568a013aa4b8456f7e4"], &(0x7f00000000c0)={0x0, 0x3, 0x58, @string={0x58, 0x3, "23338a983878ab91423fc18c82577ac14263492cd336b5e9e9c8986709127ffaaa291b884a3918ee1e026044a53fafaeb6730d578bf675387d35ec9a2c3bcb572850f02a4f662810d884b3b8d1c7e6e81d38bef44578"}}}, &(0x7f0000000440)={0x34, &(0x7f0000000180)={0x40, 0x15, 0x7f, "4893800f6206ae753bcdfaf908f35f297d154182bedcdd74767ecb5583942f4a1d32e262538b094f8e9d8686ad8236d68092aec10e244c4b5e0ccff9108709ea3ac6556dabc87d18b112df13e6ce5d03dfd0d8f37e6759e7cbb6ed906868c4679079b5d86c313590226375f1680b5b996313b5437d50dffc2b52469e6a3680"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0xe0}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000002c0)={0x20, 0x0, 0xf6, {0xf4, "93b4c18e929213f997b6b9c946cd309a860b21242da6837b3d4fa7defdb288f8a6581b20a789697ca88846a1306d76183443543a972df58ff995e451ca76226784ffb2f475ddebd0b97fd069a032f397ff3baef0dcea4258349fcd143a73092f9b9987da83b43a9781420dc3b6e21ce5047b502837afd203ac2c0e3746d326e4f9e1f711c4313a00372f8cb633d13a423eec329c90fe64918760c2f6d1ee298acdc952f51d0e5ca1336dc7e8bb1c143bd59d21aa9f78a758aca424674196690c60fa0ee6128edd8037873c06cd6cc0668b4eef08f1bd019c624e22a60ea06a5d32d3a4ba4b2043e50837d40bc4b4eeb82b2b8ba4"}}, &(0x7f00000003c0)={0x20, 0x1, 0x1, 0x8}, &(0x7f0000000400)={0x20, 0x0, 0x1}}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 17:55:28 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x402c5828, 0x0) 17:55:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080)='ethtool\x00', 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x20, r1, 0x1, 0x0, 0x0, {0x8}, [@ETHTOOL_A_WOL_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x0) 17:55:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000240)={0x0, 0x2, &(0x7f0000000200)={&(0x7f0000000180)={0x14}, 0x14}, 0x11}, 0x0) 17:55:28 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) dup(0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) 17:55:28 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x208200) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) getpid() read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) 17:55:28 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x1600bd7d, &(0x7f00000005c0)=@nat={'nat\x00', 0x1b, 0x5, 0x324, 0x1b4, 0xa4, 0xffffffff, 0x258, 0x1b4, 0x328, 0x328, 0xffffffff, 0x328, 0x328, 0x5, 0x0, {[{{@ip={@dev, @local, 0x0, 0x0, 'veth0_to_bridge\x00'}, 0x0, 0x70, 0xa4}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @rand_addr, @icmp_id, @icmp_id}}}}, {{@ip={@multicast1, @empty, 0x0, 0x0, 'macvlan0\x00', 'ip6_vti0\x00'}, 0x0, 0x70, 0xa4}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @gre_key, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa4}, @MASQUERADE={0x34, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @port, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa4}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x0, @loopback, @multicast2, @gre_key, @icmp_id}}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x380) 17:55:28 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8971, &(0x7f0000000000)={'vcan0\x00'}) 17:55:28 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x300}, 0x0) 17:55:28 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x208200) getpid() perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) dup(0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) 17:55:28 executing program 0: r0 = inotify_init() inotify_add_watch(r0, 0x0, 0x61000110) 17:55:28 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0xc020660b, 0x0) [ 416.954099][ T9475] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 417.115047][T16539] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 417.154259][ T9475] usb 2-1: device descriptor read/64, error 18 [ 417.424066][ T9475] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 417.441743][T16543] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 417.664110][ T9475] usb 2-1: device descriptor read/64, error 18 [ 417.784113][ T9475] usb usb2-port1: attempt power cycle [ 418.504175][ T9475] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 418.604451][ T9475] usb 2-1: Invalid ep0 maxpacket: 0 [ 418.764050][ T9475] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 418.854140][ T9475] usb 2-1: Invalid ep0 maxpacket: 0 [ 418.859896][ T9475] usb usb2-port1: unable to enumerate USB device 17:55:31 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x0, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="201179000000790e91c778eee281205fe5a796a30199906c3b65d756cfce2965c03d1874a1921f21191850263501f7ec83267fc8666d5c3bbf82786ef75b44b3216b62ad99291694dac32641ec02050e4d7ca7d9fe925dc7a2f35eff252d8ebd73d083e023068ee5f465398322b2c03d86ab2a6ebec568a013aa4b8456f7e4"], &(0x7f00000000c0)={0x0, 0x3, 0x58, @string={0x58, 0x3, "23338a983878ab91423fc18c82577ac14263492cd336b5e9e9c8986709127ffaaa291b884a3918ee1e026044a53fafaeb6730d578bf675387d35ec9a2c3bcb572850f02a4f662810d884b3b8d1c7e6e81d38bef44578"}}}, &(0x7f0000000440)={0x34, &(0x7f0000000180)={0x40, 0x15, 0x7f, "4893800f6206ae753bcdfaf908f35f297d154182bedcdd74767ecb5583942f4a1d32e262538b094f8e9d8686ad8236d68092aec10e244c4b5e0ccff9108709ea3ac6556dabc87d18b112df13e6ce5d03dfd0d8f37e6759e7cbb6ed906868c4679079b5d86c313590226375f1680b5b996313b5437d50dffc2b52469e6a3680"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0xe0}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000002c0)={0x20, 0x0, 0xf6, {0xf4, "93b4c18e929213f997b6b9c946cd309a860b21242da6837b3d4fa7defdb288f8a6581b20a789697ca88846a1306d76183443543a972df58ff995e451ca76226784ffb2f475ddebd0b97fd069a032f397ff3baef0dcea4258349fcd143a73092f9b9987da83b43a9781420dc3b6e21ce5047b502837afd203ac2c0e3746d326e4f9e1f711c4313a00372f8cb633d13a423eec329c90fe64918760c2f6d1ee298acdc952f51d0e5ca1336dc7e8bb1c143bd59d21aa9f78a758aca424674196690c60fa0ee6128edd8037873c06cd6cc0668b4eef08f1bd019c624e22a60ea06a5d32d3a4ba4b2043e50837d40bc4b4eeb82b2b8ba4"}}, &(0x7f00000003c0)={0x20, 0x1, 0x1, 0x8}, &(0x7f0000000400)={0x20, 0x0, 0x1}}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 17:55:31 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000240)=@sack_info={r2}, &(0x7f0000000280)=0xc) 17:55:31 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) socket$alg(0x26, 0x5, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) mount$9p_fd(0x0, &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 17:55:31 executing program 4: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "b6b752c373b11b78"}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0) writev(r1, &(0x7f00000002c0), 0x23a) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000001100)='trusted.overlay.origin\x00', 0x0, 0x0, 0x3) r3 = socket$inet6(0xa, 0x401000000001, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x8000fffffffe) dup2(r3, r1) ioctl$TCGETA(r2, 0x5405, 0x0) 17:55:31 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x208200) getpid() perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) dup(0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) 17:55:31 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x208200) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) getpid() read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) [ 419.730220][ T37] kauditd_printk_skb: 18 callbacks suppressed [ 419.730237][ T37] audit: type=1804 audit(1618682131.234:385): pid=16556 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/176/file0/bus" dev="ramfs" ino=45584 res=1 errno=0 17:55:31 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) socket$alg(0x26, 0x5, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) mount$9p_fd(0x0, &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 419.788038][ T37] audit: type=1804 audit(1618682131.244:386): pid=16556 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/176/file0/bus" dev="ramfs" ino=45584 res=1 errno=0 17:55:31 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x4a) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x12, r2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00900027f0000"], 0x34) setsockopt$inet_mreqsrc(r3, 0x0, 0x26, &(0x7f00003fdff5)={@multicast2, @loopback}, 0xc) setsockopt$inet_mreqsrc(r3, 0x0, 0x26, &(0x7f00003fdff5)={@multicast2, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) preadv(r2, &(0x7f00000001c0)=[{0x0}], 0x1, 0x2013, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 419.846206][T16573] overlayfs: unrecognized mount option "context=staff_u" or missing value 17:55:31 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0xd8c, 0x22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x14, 0x0, 0x0, &(0x7f0000000340)={0x0, 0x22, 0x1, {[@global=@item_012={0x0, 0x1, 0x1}]}}, 0x0}, 0x0) [ 419.911767][ T37] audit: type=1804 audit(1618682131.244:387): pid=16556 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/176/file0/bus" dev="ramfs" ino=45584 res=1 errno=0 17:55:31 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) socket$alg(0x26, 0x5, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) mount$9p_fd(0x0, &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 17:55:31 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x208200) getpid() perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) dup(0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 420.036241][ T37] audit: type=1804 audit(1618682131.344:388): pid=16568 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/145/file0/bus" dev="sda1" ino=15083 res=1 errno=0 17:55:31 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) socket$alg(0x26, 0x5, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) mount$9p_fd(0x0, &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 420.134163][ T5] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 420.173939][T16599] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 420.185258][ T37] audit: type=1804 audit(1618682131.384:389): pid=16568 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/145/file0/bus" dev="sda1" ino=15083 res=1 errno=0 [ 420.304227][ T4818] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 420.306085][ T37] audit: type=1804 audit(1618682131.584:390): pid=16559 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/145/file0/bus" dev="sda1" ino=15083 res=1 errno=0 [ 420.324221][ T5] usb 2-1: device descriptor read/64, error 18 [ 420.350255][T16568] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 420.405629][ T37] audit: type=1804 audit(1618682131.614:391): pid=16593 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/177/file0/bus" dev="ramfs" ino=44702 res=1 errno=0 [ 420.433058][ T37] audit: type=1804 audit(1618682131.614:392): pid=16593 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/177/file0/bus" dev="ramfs" ino=44702 res=1 errno=0 [ 420.460125][ T37] audit: type=1804 audit(1618682131.614:393): pid=16593 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/177/file0/bus" dev="ramfs" ino=44702 res=1 errno=0 [ 420.664310][ T4818] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 420.682773][ T4818] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 420.692810][ T5] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 420.721062][ T4818] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.40 [ 420.733028][ T4818] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.746163][ T4818] usb 5-1: config 0 descriptor?? [ 420.894034][ T5] usb 2-1: device descriptor read/64, error 18 [ 421.014089][ T5] usb usb2-port1: attempt power cycle [ 421.283932][ T4818] usbhid 5-1:0.0: can't add hid device: -71 [ 421.290031][ T4818] usbhid: probe of 5-1:0.0 failed with error -71 [ 421.298431][ T4818] usb 5-1: USB disconnect, device number 9 [ 421.724057][ T5] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 421.813973][ T5] usb 2-1: Invalid ep0 maxpacket: 0 [ 421.964715][ T5] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 421.974728][ T4818] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 422.054127][ T5] usb 2-1: Invalid ep0 maxpacket: 0 [ 422.060070][ T5] usb usb2-port1: unable to enumerate USB device [ 422.333970][ T4818] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 422.344977][ T4818] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 422.355181][ T4818] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.40 [ 422.364858][ T4818] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.374792][ T4818] usb 5-1: config 0 descriptor?? 17:55:34 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x40, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="201179000000790e91c778eee281205fe5a796a30199906c3b65d756cfce2965c03d1874a1921f21191850263501f7ec83267fc8666d5c3bbf82786ef75b44b3216b62ad99291694dac32641ec02050e4d7ca7d9fe925dc7a2f35eff252d8ebd73d083e023068ee5f465398322b2c03d86ab2a6ebec568a013aa4b8456f7e4"], &(0x7f00000000c0)={0x0, 0x3, 0x58, @string={0x58, 0x3, "23338a983878ab91423fc18c82577ac14263492cd336b5e9e9c8986709127ffaaa291b884a3918ee1e026044a53fafaeb6730d578bf675387d35ec9a2c3bcb572850f02a4f662810d884b3b8d1c7e6e81d38bef44578"}}}, &(0x7f0000000440)={0x34, &(0x7f0000000180)={0x40, 0x15, 0x7f, "4893800f6206ae753bcdfaf908f35f297d154182bedcdd74767ecb5583942f4a1d32e262538b094f8e9d8686ad8236d68092aec10e244c4b5e0ccff9108709ea3ac6556dabc87d18b112df13e6ce5d03dfd0d8f37e6759e7cbb6ed906868c4679079b5d86c313590226375f1680b5b996313b5437d50dffc2b52469e6a3680"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0xe0}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000002c0)={0x20, 0x0, 0xf6, {0xf4, "93b4c18e929213f997b6b9c946cd309a860b21242da6837b3d4fa7defdb288f8a6581b20a789697ca88846a1306d76183443543a972df58ff995e451ca76226784ffb2f475ddebd0b97fd069a032f397ff3baef0dcea4258349fcd143a73092f9b9987da83b43a9781420dc3b6e21ce5047b502837afd203ac2c0e3746d326e4f9e1f711c4313a00372f8cb633d13a423eec329c90fe64918760c2f6d1ee298acdc952f51d0e5ca1336dc7e8bb1c143bd59d21aa9f78a758aca424674196690c60fa0ee6128edd8037873c06cd6cc0668b4eef08f1bd019c624e22a60ea06a5d32d3a4ba4b2043e50837d40bc4b4eeb82b2b8ba4"}}, &(0x7f00000003c0)={0x20, 0x1, 0x1, 0x8}, &(0x7f0000000400)={0x20, 0x0, 0x1}}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 17:55:34 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x4a) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x12, r2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00900027f0000"], 0x34) setsockopt$inet_mreqsrc(r3, 0x0, 0x26, &(0x7f00003fdff5)={@multicast2, @loopback}, 0xc) setsockopt$inet_mreqsrc(r3, 0x0, 0x26, &(0x7f00003fdff5)={@multicast2, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) preadv(r2, &(0x7f00000001c0)=[{0x0}], 0x1, 0x2013, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 17:55:34 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) socket$alg(0x26, 0x5, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}}) 17:55:34 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x208200) getpid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) dup(0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) 17:55:34 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x208200) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) getpid() read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) 17:55:34 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@bridge_dellink={0x34, 0x11, 0x419, 0x0, 0x0, {0x7, 0x0, 0x0, r3}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_macvtap\x00'}]}, 0x34}}, 0x0) [ 422.744048][ T4818] usbhid 5-1:0.0: can't add hid device: -71 [ 422.750122][ T4818] usbhid: probe of 5-1:0.0 failed with error -71 [ 422.798705][ T4818] usb 5-1: USB disconnect, device number 10 [ 422.867294][ T37] audit: type=1804 audit(1618682134.374:394): pid=16647 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/178/file0/bus" dev="ramfs" ino=44753 res=1 errno=0 [ 422.874203][T16649] 9pnet: Insufficient options for proto=fd [ 422.903399][T16648] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 17:55:34 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) socket$alg(0x26, 0x5, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}}) [ 423.031651][T16669] overlayfs: unrecognized mount option "context=staff_u" or missing value 17:55:34 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) socket$alg(0x26, 0x5, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}}) 17:55:34 executing program 4: timer_create(0x3, 0x0, &(0x7f00000002c0)) timer_delete(0x0) [ 423.073190][T16673] 9pnet: Insufficient options for proto=fd 17:55:34 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x208200) getpid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(0x0, 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) dup(0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) 17:55:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)=@bridge_getneigh={0x20, 0x1e, 0x101, 0x0, 0x0, {0x7, 0x2}}, 0x20}}, 0x0) [ 423.184623][ T5] usb 2-1: new high-speed USB device number 61 using dummy_hcd 17:55:34 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) socket$alg(0x26, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) mount$9p_fd(0x0, &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 423.256978][T16684] 9pnet: Insufficient options for proto=fd [ 423.359026][T16687] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 423.544238][ T5] usb 2-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=ce.99 [ 423.553321][ T5] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.609041][ T5] usb 2-1: config 0 descriptor?? [ 423.634031][T16658] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 423.656681][ T5] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 425.717115][ T5] gspca_stv06xx: I2C: Read error writing address: -71 [ 425.725923][ T5] usb 2-1: USB disconnect, device number 61 17:55:37 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x40, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="201179000000790e91c778eee281205fe5a796a30199906c3b65d756cfce2965c03d1874a1921f21191850263501f7ec83267fc8666d5c3bbf82786ef75b44b3216b62ad99291694dac32641ec02050e4d7ca7d9fe925dc7a2f35eff252d8ebd73d083e023068ee5f465398322b2c03d86ab2a6ebec568a013aa4b8456f7e4"], &(0x7f00000000c0)={0x0, 0x3, 0x58, @string={0x58, 0x3, "23338a983878ab91423fc18c82577ac14263492cd336b5e9e9c8986709127ffaaa291b884a3918ee1e026044a53fafaeb6730d578bf675387d35ec9a2c3bcb572850f02a4f662810d884b3b8d1c7e6e81d38bef44578"}}}, &(0x7f0000000440)={0x34, &(0x7f0000000180)={0x40, 0x15, 0x7f, "4893800f6206ae753bcdfaf908f35f297d154182bedcdd74767ecb5583942f4a1d32e262538b094f8e9d8686ad8236d68092aec10e244c4b5e0ccff9108709ea3ac6556dabc87d18b112df13e6ce5d03dfd0d8f37e6759e7cbb6ed906868c4679079b5d86c313590226375f1680b5b996313b5437d50dffc2b52469e6a3680"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0xe0}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000002c0)={0x20, 0x0, 0xf6, {0xf4, "93b4c18e929213f997b6b9c946cd309a860b21242da6837b3d4fa7defdb288f8a6581b20a789697ca88846a1306d76183443543a972df58ff995e451ca76226784ffb2f475ddebd0b97fd069a032f397ff3baef0dcea4258349fcd143a73092f9b9987da83b43a9781420dc3b6e21ce5047b502837afd203ac2c0e3746d326e4f9e1f711c4313a00372f8cb633d13a423eec329c90fe64918760c2f6d1ee298acdc952f51d0e5ca1336dc7e8bb1c143bd59d21aa9f78a758aca424674196690c60fa0ee6128edd8037873c06cd6cc0668b4eef08f1bd019c624e22a60ea06a5d32d3a4ba4b2043e50837d40bc4b4eeb82b2b8ba4"}}, &(0x7f00000003c0)={0x20, 0x1, 0x1, 0x8}, &(0x7f0000000400)={0x20, 0x0, 0x1}}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 17:55:37 executing program 3: r0 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'fscrypt:', @desc1='0000111122223333'}, &(0x7f0000000080)={0x0, "217ccce47c091c1b9c6a39c934375e48f79655a509fc1c02a3561bae2d155049d73d76ac7fd1dcc5cd2cdc98739ef5e75baf82f303152b7d0a9f8402289f2fc3"}, 0x48, r0) 17:55:37 executing program 4: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x101800) 17:55:37 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x208200) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) getpid() read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) 17:55:37 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x208200) getpid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(0x0, 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) dup(0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) 17:55:37 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) socket$alg(0x26, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) mount$9p_fd(0x0, &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 17:55:37 executing program 4: openat$full(0xffffffffffffff9c, 0x0, 0x204400, 0x0) [ 426.398806][ T37] kauditd_printk_skb: 6 callbacks suppressed [ 426.398821][ T37] audit: type=1804 audit(1618682137.905:401): pid=16723 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/180/file0/bus" dev="ramfs" ino=44809 res=1 errno=0 [ 426.402397][T16723] overlayfs: unrecognized mount option "context=staff_u" or missing value 17:55:38 executing program 3: syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180)='NLBL_CALIPSO\x00', 0xffffffffffffffff) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) 17:55:38 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x208200) getpid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(0x0, 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) dup(0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 426.456978][ T37] audit: type=1804 audit(1618682137.965:402): pid=16731 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/147/file0/bus" dev="sda1" ino=15122 res=1 errno=0 17:55:38 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RWSTAT(r0, &(0x7f0000000100)={0x7}, 0x7) write$P9_RFLUSH(r0, &(0x7f0000000140)={0x7}, 0x7) 17:55:38 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x16, &(0x7f0000003ac0)={{{@in=@local, @in6=@private1}}, {{@in=@local}, 0x0, @in=@dev}}, 0xe8) [ 426.634097][ T37] audit: type=1804 audit(1618682138.145:403): pid=16741 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/181/file0/bus" dev="ramfs" ino=44826 res=1 errno=0 [ 426.637014][T16741] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 426.683653][ T3620] usb 2-1: new high-speed USB device number 62 using dummy_hcd 17:55:38 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000040)={0x1d, r2}, 0x10) [ 426.867058][ T37] audit: type=1804 audit(1618682138.375:404): pid=16727 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/147/file0/bus" dev="sda1" ino=15122 res=1 errno=0 [ 426.933053][ T37] audit: type=1804 audit(1618682138.375:405): pid=16727 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/147/file0/bus" dev="sda1" ino=15122 res=1 errno=0 [ 427.009721][T16727] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 427.081645][ T3620] usb 2-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=ce.99 [ 427.091203][ T3620] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.110899][ T3620] usb 2-1: config 0 descriptor?? [ 427.165744][ T3620] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 429.224124][ T3620] gspca_stv06xx: I2C: Read error writing address: -71 [ 429.232872][ T3620] usb 2-1: USB disconnect, device number 62 17:55:41 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x40, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="201179000000790e91c778eee281205fe5a796a30199906c3b65d756cfce2965c03d1874a1921f21191850263501f7ec83267fc8666d5c3bbf82786ef75b44b3216b62ad99291694dac32641ec02050e4d7ca7d9fe925dc7a2f35eff252d8ebd73d083e023068ee5f465398322b2c03d86ab2a6ebec568a013aa4b8456f7e4"], &(0x7f00000000c0)={0x0, 0x3, 0x58, @string={0x58, 0x3, "23338a983878ab91423fc18c82577ac14263492cd336b5e9e9c8986709127ffaaa291b884a3918ee1e026044a53fafaeb6730d578bf675387d35ec9a2c3bcb572850f02a4f662810d884b3b8d1c7e6e81d38bef44578"}}}, &(0x7f0000000440)={0x34, &(0x7f0000000180)={0x40, 0x15, 0x7f, "4893800f6206ae753bcdfaf908f35f297d154182bedcdd74767ecb5583942f4a1d32e262538b094f8e9d8686ad8236d68092aec10e244c4b5e0ccff9108709ea3ac6556dabc87d18b112df13e6ce5d03dfd0d8f37e6759e7cbb6ed906868c4679079b5d86c313590226375f1680b5b996313b5437d50dffc2b52469e6a3680"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0xe0}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000002c0)={0x20, 0x0, 0xf6, {0xf4, "93b4c18e929213f997b6b9c946cd309a860b21242da6837b3d4fa7defdb288f8a6581b20a789697ca88846a1306d76183443543a972df58ff995e451ca76226784ffb2f475ddebd0b97fd069a032f397ff3baef0dcea4258349fcd143a73092f9b9987da83b43a9781420dc3b6e21ce5047b502837afd203ac2c0e3746d326e4f9e1f711c4313a00372f8cb633d13a423eec329c90fe64918760c2f6d1ee298acdc952f51d0e5ca1336dc7e8bb1c143bd59d21aa9f78a758aca424674196690c60fa0ee6128edd8037873c06cd6cc0668b4eef08f1bd019c624e22a60ea06a5d32d3a4ba4b2043e50837d40bc4b4eeb82b2b8ba4"}}, &(0x7f00000003c0)={0x20, 0x1, 0x1, 0x8}, &(0x7f0000000400)={0x20, 0x0, 0x1}}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 17:55:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000dc0)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x28, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_MTU={0x6}, @L2TP_ATTR_RECV_TIMEOUT={0xfffffffffffffc23}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0}, 0x40000) 17:55:41 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x208200) getpid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) dup(0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) 17:55:41 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x43, &(0x7f0000003ac0)={{{@in=@local, @in6=@private1}}, {{@in=@local}, 0x0, @in=@dev}}, 0xe8) 17:55:41 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x208200) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) getpid() read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) 17:55:41 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) socket$alg(0x26, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) mount$9p_fd(0x0, &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 429.759368][T16780] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 429.808718][ T37] audit: type=1804 audit(1618682141.315:406): pid=16781 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/182/file0/bus" dev="ramfs" ino=45784 res=1 errno=0 [ 429.817699][T16783] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 17:55:41 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000002780)=[{{&(0x7f00000001c0)={0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0}}], 0x1, 0x0) [ 429.877429][T16787] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 429.926810][ T37] audit: type=1804 audit(1618682141.315:407): pid=16781 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/182/file0/bus" dev="ramfs" ino=45784 res=1 errno=0 17:55:41 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr]}}, &(0x7f0000000140)=""/203, 0x26, 0xcb, 0x1}, 0x20) 17:55:41 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x208200) getpid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) dup(0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 430.039458][ T37] audit: type=1804 audit(1618682141.315:408): pid=16781 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/182/file0/bus" dev="ramfs" ino=45784 res=1 errno=0 17:55:41 executing program 3: socketpair(0x33, 0x0, 0x0, &(0x7f00000000c0)) 17:55:41 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x3, &(0x7f0000003ac0)={{{@in=@local, @in6=@private1}}, {{@in=@local}, 0x0, @in=@dev}}, 0xe8) [ 430.161823][ T37] audit: type=1804 audit(1618682141.395:409): pid=16785 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/148/bus" dev="sda1" ino=13896 res=1 errno=0 17:55:41 executing program 3: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000000c0)={0x0, 0x7, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24649a1d"}, 0x0, 0x0, @planes=0x0}) [ 430.213539][ T9682] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 430.263636][ T37] audit: type=1804 audit(1618682141.435:410): pid=16785 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/148/bus" dev="sda1" ino=13896 res=1 errno=0 [ 430.268237][T16804] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 430.595386][ T9682] usb 2-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=ce.99 [ 430.629162][T16816] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 430.653396][ T9682] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.672167][ T9682] usb 2-1: config 0 descriptor?? [ 430.718209][ T9682] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 432.763436][ T9682] gspca_stv06xx: I2C: Read error writing address: -71 [ 432.772008][ T9682] usb 2-1: USB disconnect, device number 63 17:55:44 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x40, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="201179000000790e91c778eee281205fe5a796a30199906c3b65d756cfce2965c03d1874a1921f21191850263501f7ec83267fc8666d5c3bbf82786ef75b44b3216b62ad99291694dac32641ec02050e4d7ca7d9fe925dc7a2f35eff252d8ebd73d083e023068ee5f465398322b2c03d86ab2a6ebec568a013aa4b8456f7e4"], &(0x7f00000000c0)={0x0, 0x3, 0x58, @string={0x58, 0x3, "23338a983878ab91423fc18c82577ac14263492cd336b5e9e9c8986709127ffaaa291b884a3918ee1e026044a53fafaeb6730d578bf675387d35ec9a2c3bcb572850f02a4f662810d884b3b8d1c7e6e81d38bef44578"}}}, &(0x7f0000000440)={0x34, &(0x7f0000000180)={0x40, 0x15, 0x7f, "4893800f6206ae753bcdfaf908f35f297d154182bedcdd74767ecb5583942f4a1d32e262538b094f8e9d8686ad8236d68092aec10e244c4b5e0ccff9108709ea3ac6556dabc87d18b112df13e6ce5d03dfd0d8f37e6759e7cbb6ed906868c4679079b5d86c313590226375f1680b5b996313b5437d50dffc2b52469e6a3680"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0xe0}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000002c0)={0x20, 0x0, 0xf6, {0xf4, "93b4c18e929213f997b6b9c946cd309a860b21242da6837b3d4fa7defdb288f8a6581b20a789697ca88846a1306d76183443543a972df58ff995e451ca76226784ffb2f475ddebd0b97fd069a032f397ff3baef0dcea4258349fcd143a73092f9b9987da83b43a9781420dc3b6e21ce5047b502837afd203ac2c0e3746d326e4f9e1f711c4313a00372f8cb633d13a423eec329c90fe64918760c2f6d1ee298acdc952f51d0e5ca1336dc7e8bb1c143bd59d21aa9f78a758aca424674196690c60fa0ee6128edd8037873c06cd6cc0668b4eef08f1bd019c624e22a60ea06a5d32d3a4ba4b2043e50837d40bc4b4eeb82b2b8ba4"}}, &(0x7f00000003c0)={0x20, 0x1, 0x1, 0x8}, &(0x7f0000000400)={0x20, 0x0, 0x1}}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 17:55:44 executing program 4: openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x511600, 0x0) 17:55:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e00)={0x14}, 0x14}, 0x8}, 0x0) 17:55:44 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x208200) getpid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) dup(0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) 17:55:44 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) mount$9p_fd(0x0, &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 17:55:44 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x208200) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) getpid() read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) 17:55:44 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000001e80)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @mcast2}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000003c0)="bc", 0x1}], 0x1}}], 0x1, 0x0) 17:55:44 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) mount$9p_fd(0x0, &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 433.374848][ T37] kauditd_printk_skb: 4 callbacks suppressed [ 433.374861][ T37] audit: type=1804 audit(1618682144.885:415): pid=16837 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/184/file0/bus" dev="ramfs" ino=45851 res=1 errno=0 17:55:44 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x49, 0x0, 0x0) [ 433.477810][T16850] overlayfs: unrecognized mount option "context=staff_u" or missing value 17:55:45 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002280)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 17:55:45 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x208200) getpid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) dup(0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 433.512394][ T37] audit: type=1804 audit(1618682144.905:416): pid=16841 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/149/bus" dev="sda1" ino=15172 res=1 errno=0 17:55:45 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) mount$9p_fd(0x0, &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 433.645305][ T37] audit: type=1804 audit(1618682144.925:417): pid=16837 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/184/file0/bus" dev="ramfs" ino=45851 res=1 errno=0 [ 433.725965][ T37] audit: type=1804 audit(1618682144.925:418): pid=16837 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/184/file0/bus" dev="ramfs" ino=45851 res=1 errno=0 [ 433.752426][ T5] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 433.766377][ T37] audit: type=1804 audit(1618682145.245:419): pid=16864 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/185/file0/bus" dev="ramfs" ino=44975 res=1 errno=0 [ 433.815712][ T37] audit: type=1804 audit(1618682145.255:420): pid=16864 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/185/file0/bus" dev="ramfs" ino=44975 res=1 errno=0 [ 433.876983][ T37] audit: type=1804 audit(1618682145.335:421): pid=16841 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/149/bus" dev="sda1" ino=15172 res=1 errno=0 [ 433.901219][ T37] audit: type=1804 audit(1618682145.345:422): pid=16841 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/149/bus" dev="sda1" ino=15172 res=1 errno=0 [ 434.058973][T16871] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 434.167785][ T5] usb 2-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=ce.99 [ 434.186787][ T5] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.204289][ T5] usb 2-1: config 0 descriptor?? [ 434.263823][ T5] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 436.323448][ T5] gspca_stv06xx: I2C: Read error writing address: -71 [ 436.332611][ T5] usb 2-1: USB disconnect, device number 64 17:55:48 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000002780)=[{{&(0x7f00000001c0)={0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000400)=[@dstopts={{0x18}}], 0x18}}], 0x1, 0x0) 17:55:48 executing program 3: socketpair(0x2a, 0x0, 0x0, &(0x7f0000000080)) 17:55:48 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$alg(0x26, 0x5, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) mount$9p_fd(0x0, &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 17:55:48 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x208200) getpid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) dup(0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) 17:55:48 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x40, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="201179000000790e91c778eee281205fe5a796a30199906c3b65d756cfce2965c03d1874a1921f21191850263501f7ec83267fc8666d5c3bbf82786ef75b44b3216b62ad99291694dac32641ec02050e4d7ca7d9fe925dc7a2f35eff252d8ebd73d083e023068ee5f465398322b2c03d86ab2a6ebec568a013aa4b8456f7e4"], &(0x7f00000000c0)={0x0, 0x3, 0x58, @string={0x58, 0x3, "23338a983878ab91423fc18c82577ac14263492cd336b5e9e9c8986709127ffaaa291b884a3918ee1e026044a53fafaeb6730d578bf675387d35ec9a2c3bcb572850f02a4f662810d884b3b8d1c7e6e81d38bef44578"}}}, &(0x7f0000000440)={0x34, &(0x7f0000000180)={0x40, 0x15, 0x7f, "4893800f6206ae753bcdfaf908f35f297d154182bedcdd74767ecb5583942f4a1d32e262538b094f8e9d8686ad8236d68092aec10e244c4b5e0ccff9108709ea3ac6556dabc87d18b112df13e6ce5d03dfd0d8f37e6759e7cbb6ed906868c4679079b5d86c313590226375f1680b5b996313b5437d50dffc2b52469e6a3680"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0xe0}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000002c0)={0x20, 0x0, 0xf6, {0xf4, "93b4c18e929213f997b6b9c946cd309a860b21242da6837b3d4fa7defdb288f8a6581b20a789697ca88846a1306d76183443543a972df58ff995e451ca76226784ffb2f475ddebd0b97fd069a032f397ff3baef0dcea4258349fcd143a73092f9b9987da83b43a9781420dc3b6e21ce5047b502837afd203ac2c0e3746d326e4f9e1f711c4313a00372f8cb633d13a423eec329c90fe64918760c2f6d1ee298acdc952f51d0e5ca1336dc7e8bb1c143bd59d21aa9f78a758aca424674196690c60fa0ee6128edd8037873c06cd6cc0668b4eef08f1bd019c624e22a60ea06a5d32d3a4ba4b2043e50837d40bc4b4eeb82b2b8ba4"}}, &(0x7f00000003c0)={0x20, 0x1, 0x1, 0x8}, &(0x7f0000000400)={0x20, 0x0, 0x1}}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 17:55:48 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x208200) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) getpid() read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) 17:55:48 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$alg(0x26, 0x5, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) mount$9p_fd(0x0, &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 436.951740][ T37] audit: type=1804 audit(1618682148.455:423): pid=16896 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/186/file0/bus" dev="ramfs" ino=45901 res=1 errno=0 17:55:48 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) getsockname(r0, 0x0, &(0x7f0000000100)) 17:55:48 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x208200) getpid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) dup(0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) 17:55:48 executing program 3: socketpair(0x2c, 0x0, 0x0, &(0x7f0000003380)) [ 437.055207][ T37] audit: type=1804 audit(1618682148.455:424): pid=16896 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/186/file0/bus" dev="ramfs" ino=45901 res=1 errno=0 17:55:48 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$alg(0x26, 0x5, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) mount$9p_fd(0x0, &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 17:55:48 executing program 3: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000004180)='/dev/ocfs2_control\x00', 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 17:55:48 executing program 4: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000004180)='/dev/ocfs2_control\x00', 0x0, 0x0) accept$packet(r0, 0x0, 0x0) 17:55:48 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x208200) getpid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) dup(0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) 17:55:48 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) close(r0) socket$alg(0x26, 0x5, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) mount$9p_fd(0x0, &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 17:55:48 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFCONF(r0, 0x5450, 0x0) [ 437.313313][ T9682] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 437.485716][T16926] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 437.693465][ T9682] usb 2-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=ce.99 [ 437.726381][ T9682] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.796080][ T9682] usb 2-1: config 0 descriptor?? [ 437.865938][ T9682] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 437.959022][T16936] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 439.864674][ T3219] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.871010][ T3219] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.923094][ T9682] gspca_stv06xx: I2C: Read error writing address: -71 [ 439.931179][ T9682] usb 2-1: USB disconnect, device number 65 17:55:51 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x40, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="201179000000790e91c778eee281205fe5a796a30199906c3b65d756cfce2965c03d1874a1921f21191850263501f7ec83267fc8666d5c3bbf82786ef75b44b3216b62ad99291694dac32641ec02050e4d7ca7d9fe925dc7a2f35eff252d8ebd73d083e023068ee5f465398322b2c03d86ab2a6ebec568a013aa4b8456f7e4"], &(0x7f00000000c0)={0x0, 0x3, 0x58, @string={0x58, 0x3, "23338a983878ab91423fc18c82577ac14263492cd336b5e9e9c8986709127ffaaa291b884a3918ee1e026044a53fafaeb6730d578bf675387d35ec9a2c3bcb572850f02a4f662810d884b3b8d1c7e6e81d38bef44578"}}}, &(0x7f0000000440)={0x34, &(0x7f0000000180)={0x40, 0x15, 0x7f, "4893800f6206ae753bcdfaf908f35f297d154182bedcdd74767ecb5583942f4a1d32e262538b094f8e9d8686ad8236d68092aec10e244c4b5e0ccff9108709ea3ac6556dabc87d18b112df13e6ce5d03dfd0d8f37e6759e7cbb6ed906868c4679079b5d86c313590226375f1680b5b996313b5437d50dffc2b52469e6a3680"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0xe0}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000002c0)={0x20, 0x0, 0xf6, {0xf4, "93b4c18e929213f997b6b9c946cd309a860b21242da6837b3d4fa7defdb288f8a6581b20a789697ca88846a1306d76183443543a972df58ff995e451ca76226784ffb2f475ddebd0b97fd069a032f397ff3baef0dcea4258349fcd143a73092f9b9987da83b43a9781420dc3b6e21ce5047b502837afd203ac2c0e3746d326e4f9e1f711c4313a00372f8cb633d13a423eec329c90fe64918760c2f6d1ee298acdc952f51d0e5ca1336dc7e8bb1c143bd59d21aa9f78a758aca424674196690c60fa0ee6128edd8037873c06cd6cc0668b4eef08f1bd019c624e22a60ea06a5d32d3a4ba4b2043e50837d40bc4b4eeb82b2b8ba4"}}, &(0x7f00000003c0)={0x20, 0x1, 0x1, 0x8}, &(0x7f0000000400)={0x20, 0x0, 0x1}}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 17:55:51 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x11, 0x0, 0x0) 17:55:51 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) close(r0) socket$alg(0x26, 0x5, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) mount$9p_fd(0x0, &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 17:55:51 executing program 4: setreuid(0x0, 0xee01) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000002140)='/dev/ocfs2_control\x00', 0x303202, 0x0) 17:55:51 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x208200) getpid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) dup(0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) 17:55:51 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(0x0, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x208200) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) getpid() read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) 17:55:51 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) close(r0) socket$alg(0x26, 0x5, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) mount$9p_fd(0x0, &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 17:55:52 executing program 0: bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(0xffffffffffffffff) socket$alg(0x26, 0x5, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) mount$9p_fd(0x0, &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}}) 17:55:52 executing program 4: fanotify_mark(0xffffffffffffffff, 0xa4, 0x0, 0xffffffffffffffff, 0x0) [ 440.476255][ T37] kauditd_printk_skb: 8 callbacks suppressed [ 440.476269][ T37] audit: type=1804 audit(1618682151.985:433): pid=16957 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/189/file0/bus" dev="ramfs" ino=45953 res=1 errno=0 17:55:52 executing program 0: bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(0xffffffffffffffff) socket$alg(0x26, 0x5, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) mount$9p_fd(0x0, &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}}) 17:55:52 executing program 3: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x5, &(0x7f0000000080)={0x5, 0xf, 0x5}}) [ 440.573233][T16969] overlayfs: unrecognized mount option "context=staff_u" or missing value 17:55:52 executing program 0: bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(0xffffffffffffffff) socket$alg(0x26, 0x5, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) mount$9p_fd(0x0, &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}}) [ 440.648481][ T37] audit: type=1804 audit(1618682152.025:434): pid=16957 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/189/file0/bus" dev="ramfs" ino=45953 res=1 errno=0 [ 440.790941][ T37] audit: type=1804 audit(1618682152.025:435): pid=16957 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/189/file0/bus" dev="ramfs" ino=45953 res=1 errno=0 [ 440.823211][ T36] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 441.023461][ T9682] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 441.233163][ T36] usb 2-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=ce.99 [ 441.242544][ T36] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.254102][ T36] usb 2-1: config 0 descriptor?? [ 441.303378][ T9682] usb 4-1: Using ep0 maxpacket: 8 [ 441.314546][ T36] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 441.513312][ T9682] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 441.683031][ T9682] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 441.692134][ T9682] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.705744][ T9682] usb 4-1: Product: syz [ 441.709909][ T9682] usb 4-1: Manufacturer: syz [ 441.717078][ T9682] usb 4-1: SerialNumber: syz [ 441.967295][ T4818] usb 4-1: USB disconnect, device number 9 [ 442.742940][ T9682] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 442.983015][ T9682] usb 4-1: Using ep0 maxpacket: 8 [ 443.183401][ T9682] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 443.333311][ T36] gspca_stv06xx: I2C: Read error writing address: -71 [ 443.341814][ T36] usb 2-1: USB disconnect, device number 66 [ 443.353238][ T9682] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 443.362296][ T9682] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.372448][ T9682] usb 4-1: Product: syz [ 443.378579][ T9682] usb 4-1: Manufacturer: syz [ 443.383669][ T9682] usb 4-1: SerialNumber: syz [ 443.653294][ T3620] usb 4-1: USB disconnect, device number 10 17:55:55 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x40, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="201179000000790e91c778eee281205fe5a796a30199906c3b65d756cfce2965c03d1874a1921f21191850263501f7ec83267fc8666d5c3bbf82786ef75b44b3216b62ad99291694dac32641ec02050e4d7ca7d9fe925dc7a2f35eff252d8ebd73d083e023068ee5f465398322b2c03d86ab2a6ebec568a013aa4b8456f7e4"], &(0x7f00000000c0)={0x0, 0x3, 0x58, @string={0x58, 0x3, "23338a983878ab91423fc18c82577ac14263492cd336b5e9e9c8986709127ffaaa291b884a3918ee1e026044a53fafaeb6730d578bf675387d35ec9a2c3bcb572850f02a4f662810d884b3b8d1c7e6e81d38bef44578"}}}, &(0x7f0000000440)={0x34, &(0x7f0000000180)={0x40, 0x15, 0x7f, "4893800f6206ae753bcdfaf908f35f297d154182bedcdd74767ecb5583942f4a1d32e262538b094f8e9d8686ad8236d68092aec10e244c4b5e0ccff9108709ea3ac6556dabc87d18b112df13e6ce5d03dfd0d8f37e6759e7cbb6ed906868c4679079b5d86c313590226375f1680b5b996313b5437d50dffc2b52469e6a3680"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0xe0}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000002c0)={0x20, 0x0, 0xf6, {0xf4, "93b4c18e929213f997b6b9c946cd309a860b21242da6837b3d4fa7defdb288f8a6581b20a789697ca88846a1306d76183443543a972df58ff995e451ca76226784ffb2f475ddebd0b97fd069a032f397ff3baef0dcea4258349fcd143a73092f9b9987da83b43a9781420dc3b6e21ce5047b502837afd203ac2c0e3746d326e4f9e1f711c4313a00372f8cb633d13a423eec329c90fe64918760c2f6d1ee298acdc952f51d0e5ca1336dc7e8bb1c143bd59d21aa9f78a758aca424674196690c60fa0ee6128edd8037873c06cd6cc0668b4eef08f1bd019c624e22a60ea06a5d32d3a4ba4b2043e50837d40bc4b4eeb82b2b8ba4"}}, &(0x7f00000003c0)={0x20, 0x1, 0x1, 0x8}, &(0x7f0000000400)={0x20, 0x0, 0x1}}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 17:55:55 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x208200) getpid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) dup(0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) 17:55:55 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, 0x0, &(0x7f0000000280)) 17:55:55 executing program 0: r0 = socket$unix(0x1, 0x0, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) socket$alg(0x26, 0x5, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) mount$9p_fd(0x0, &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 17:55:55 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(0x0, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x208200) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) getpid() read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) 17:55:55 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x2, &(0x7f0000003ac0)={{{@in=@local, @in6=@private1}}, {{@in=@local}, 0x0, @in=@dev}}, 0xe8) 17:55:55 executing program 0: r0 = socket$unix(0x1, 0x0, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) socket$alg(0x26, 0x5, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) mount$9p_fd(0x0, &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 443.850318][ T37] audit: type=1804 audit(1618682155.355:436): pid=17035 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/190/file0/bus" dev="ramfs" ino=46002 res=1 errno=0 17:55:55 executing program 4: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000040)={0xd, 0x0, 0xa, 0xc}) [ 443.966773][T17048] overlayfs: unrecognized mount option "context=staff_u" or missing value 17:55:55 executing program 3: mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) 17:55:55 executing program 0: r0 = socket$unix(0x1, 0x0, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) socket$alg(0x26, 0x5, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) mount$9p_fd(0x0, &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 443.994095][ T37] audit: type=1804 audit(1618682155.405:437): pid=17035 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/190/file0/bus" dev="ramfs" ino=46002 res=1 errno=0 17:55:55 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x208200) getpid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, 0xffffffffffffffff, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) dup(0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) 17:55:55 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) socket$alg(0x26, 0x5, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) mount$9p_fd(0x0, &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 444.153906][ T37] audit: type=1804 audit(1618682155.415:438): pid=17035 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/190/file0/bus" dev="ramfs" ino=46002 res=1 errno=0 [ 444.192987][ T9682] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 444.247613][T17066] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 444.260827][ T37] audit: type=1804 audit(1618682155.725:439): pid=17066 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/191/file0/bus" dev="ramfs" ino=46260 res=1 errno=0 [ 444.343666][ T37] audit: type=1804 audit(1618682155.725:440): pid=17066 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/191/file0/bus" dev="ramfs" ino=46260 res=1 errno=0 [ 444.562920][ T9682] usb 2-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=ce.99 [ 444.572060][ T9682] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.582563][ T9682] usb 2-1: config 0 descriptor?? [ 444.625046][ T9682] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 446.682792][ T9682] gspca_stv06xx: I2C: Read error writing address: -71 [ 446.691079][ T9682] usb 2-1: USB disconnect, device number 67 17:55:58 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x40, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="201179000000790e91c778eee281205fe5a796a30199906c3b65d756cfce2965c03d1874a1921f21191850263501f7ec83267fc8666d5c3bbf82786ef75b44b3216b62ad99291694dac32641ec02050e4d7ca7d9fe925dc7a2f35eff252d8ebd73d083e023068ee5f465398322b2c03d86ab2a6ebec568a013aa4b8456f7e4"], &(0x7f00000000c0)={0x0, 0x3, 0x58, @string={0x58, 0x3, "23338a983878ab91423fc18c82577ac14263492cd336b5e9e9c8986709127ffaaa291b884a3918ee1e026044a53fafaeb6730d578bf675387d35ec9a2c3bcb572850f02a4f662810d884b3b8d1c7e6e81d38bef44578"}}}, &(0x7f0000000440)={0x34, &(0x7f0000000180)={0x40, 0x15, 0x7f, "4893800f6206ae753bcdfaf908f35f297d154182bedcdd74767ecb5583942f4a1d32e262538b094f8e9d8686ad8236d68092aec10e244c4b5e0ccff9108709ea3ac6556dabc87d18b112df13e6ce5d03dfd0d8f37e6759e7cbb6ed906868c4679079b5d86c313590226375f1680b5b996313b5437d50dffc2b52469e6a3680"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0xe0}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000002c0)={0x20, 0x0, 0xf6, {0xf4, "93b4c18e929213f997b6b9c946cd309a860b21242da6837b3d4fa7defdb288f8a6581b20a789697ca88846a1306d76183443543a972df58ff995e451ca76226784ffb2f475ddebd0b97fd069a032f397ff3baef0dcea4258349fcd143a73092f9b9987da83b43a9781420dc3b6e21ce5047b502837afd203ac2c0e3746d326e4f9e1f711c4313a00372f8cb633d13a423eec329c90fe64918760c2f6d1ee298acdc952f51d0e5ca1336dc7e8bb1c143bd59d21aa9f78a758aca424674196690c60fa0ee6128edd8037873c06cd6cc0668b4eef08f1bd019c624e22a60ea06a5d32d3a4ba4b2043e50837d40bc4b4eeb82b2b8ba4"}}, &(0x7f00000003c0)={0x20, 0x1, 0x1, 0x8}, &(0x7f0000000400)={0x20, 0x0, 0x1}}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 17:55:58 executing program 4: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f00000000c0)) 17:55:58 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) socket$alg(0x26, 0x5, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) mount$9p_fd(0x0, &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 17:55:58 executing program 3: perf_event_open$cgroup(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30920, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 17:55:58 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x208200) getpid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, 0xffffffffffffffff, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) dup(0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) 17:55:58 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(0x0, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x208200) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) getpid() read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) 17:55:58 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) socket$alg(0x26, 0x5, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) mount$9p_fd(0x0, &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 17:55:58 executing program 3: sendto$netrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 17:55:58 executing program 4: process_vm_writev(0xffffffffffffffff, 0x0, 0x52, 0x0, 0x0, 0x0) [ 447.386369][ T37] audit: type=1804 audit(1618682158.895:441): pid=17100 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/192/file0/bus" dev="ramfs" ino=46057 res=1 errno=0 17:55:58 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, 0x0, 0x0) close(r0) socket$alg(0x26, 0x5, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) mount$9p_fd(0x0, &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 447.453796][T17100] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 447.510242][ T37] audit: type=1804 audit(1618682158.925:442): pid=17100 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/192/file0/bus" dev="ramfs" ino=46057 res=1 errno=0 17:55:59 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff}) connect$nfc_llcp(r0, &(0x7f00000004c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "7e3667ffaab02b57fbf3fb02708470cf25fae140756c8ae6702fac3d9b24def61a334c10efc22f5ba67e49968aeb19ddb0df53eef7022564f2495d6307272c"}, 0x60) [ 447.552700][ T9682] usb 2-1: new high-speed USB device number 68 using dummy_hcd 17:55:59 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, 0x0, 0x0) close(r0) socket$alg(0x26, 0x5, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) mount$9p_fd(0x0, &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 447.922961][ T9682] usb 2-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=ce.99 [ 447.936726][ T9682] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.958069][ T9682] usb 2-1: config 0 descriptor?? [ 448.004818][ T9682] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 450.052674][ T9682] gspca_stv06xx: I2C: Read error writing address: -71 [ 450.062362][ T9682] usb 2-1: USB disconnect, device number 68 17:56:02 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x40, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="201179000000790e91c778eee281205fe5a796a30199906c3b65d756cfce2965c03d1874a1921f21191850263501f7ec83267fc8666d5c3bbf82786ef75b44b3216b62ad99291694dac32641ec02050e4d7ca7d9fe925dc7a2f35eff252d8ebd73d083e023068ee5f465398322b2c03d86ab2a6ebec568a013aa4b8456f7e4"], &(0x7f00000000c0)={0x0, 0x3, 0x58, @string={0x58, 0x3, "23338a983878ab91423fc18c82577ac14263492cd336b5e9e9c8986709127ffaaa291b884a3918ee1e026044a53fafaeb6730d578bf675387d35ec9a2c3bcb572850f02a4f662810d884b3b8d1c7e6e81d38bef44578"}}}, &(0x7f0000000440)={0x34, &(0x7f0000000180)={0x40, 0x15, 0x7f, "4893800f6206ae753bcdfaf908f35f297d154182bedcdd74767ecb5583942f4a1d32e262538b094f8e9d8686ad8236d68092aec10e244c4b5e0ccff9108709ea3ac6556dabc87d18b112df13e6ce5d03dfd0d8f37e6759e7cbb6ed906868c4679079b5d86c313590226375f1680b5b996313b5437d50dffc2b52469e6a3680"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0xe0}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000002c0)={0x20, 0x0, 0xf6, {0xf4, "93b4c18e929213f997b6b9c946cd309a860b21242da6837b3d4fa7defdb288f8a6581b20a789697ca88846a1306d76183443543a972df58ff995e451ca76226784ffb2f475ddebd0b97fd069a032f397ff3baef0dcea4258349fcd143a73092f9b9987da83b43a9781420dc3b6e21ce5047b502837afd203ac2c0e3746d326e4f9e1f711c4313a00372f8cb633d13a423eec329c90fe64918760c2f6d1ee298acdc952f51d0e5ca1336dc7e8bb1c143bd59d21aa9f78a758aca424674196690c60fa0ee6128edd8037873c06cd6cc0668b4eef08f1bd019c624e22a60ea06a5d32d3a4ba4b2043e50837d40bc4b4eeb82b2b8ba4"}}, &(0x7f00000003c0)={0x20, 0x1, 0x1, 0x8}, &(0x7f0000000400)={0x20, 0x0, 0x1}}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 17:56:02 executing program 4: openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_uring_setup(0x614c, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) io_uring_setup(0x3444, &(0x7f00000000c0)={0x0, 0x0, 0x2, 0x0, 0x32b}) 17:56:02 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x208200) getpid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, 0xffffffffffffffff, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) dup(0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) 17:56:02 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, 0x0, 0x0) close(r0) socket$alg(0x26, 0x5, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) mount$9p_fd(0x0, &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 17:56:02 executing program 3: openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0x0, 0x0) 17:56:02 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(0x0, 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x208200) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) getpid() read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) 17:56:02 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) socket$alg(0x26, 0x5, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) mount$9p_fd(0x0, &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 450.639481][ T37] audit: type=1804 audit(1618682162.146:443): pid=17144 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/193/file0/bus" dev="ramfs" ino=46351 res=1 errno=0 17:56:02 executing program 3: syz_mount_image$afs(0x0, 0x0, 0x0, 0x1, &(0x7f0000000800)=[{&(0x7f0000000740)="1e", 0x1, 0x23}], 0x0, 0x0) [ 450.741171][T17155] overlayfs: unrecognized mount option "context=staff_u" or missing value 17:56:02 executing program 4: fsopen(&(0x7f0000000000)='gfs2\x00', 0x0) 17:56:02 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) socket$alg(0x26, 0x5, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) mount$9p_fd(0x0, &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 450.853427][ T37] audit: type=1804 audit(1618682162.186:444): pid=17144 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/193/file0/bus" dev="ramfs" ino=46351 res=1 errno=0 17:56:02 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x208200) getpid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(0xffffffffffffffff, &(0x7f0000000180)=""/19, 0xfffffe47) dup(0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) 17:56:02 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000060c0)='team\x00', 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x0) [ 451.114039][ T9438] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 451.166422][ T37] audit: type=1804 audit(1618682162.676:445): pid=17181 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/194/file0/bus" dev="ramfs" ino=47144 res=1 errno=0 [ 451.173386][T17181] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 451.240600][ T37] audit: type=1804 audit(1618682162.676:446): pid=17181 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/194/file0/bus" dev="ramfs" ino=47144 res=1 errno=0 [ 451.267884][ T37] audit: type=1804 audit(1618682162.676:447): pid=17181 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/194/file0/bus" dev="ramfs" ino=47144 res=1 errno=0 [ 451.331457][T17183] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 451.523085][ T9438] usb 2-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=ce.99 [ 451.532172][ T9438] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.623538][ T9438] usb 2-1: config 0 descriptor?? [ 451.687123][ T9438] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 453.743799][ T9438] gspca_stv06xx: I2C: Read error writing address: -71 [ 453.753438][ T9438] usb 2-1: USB disconnect, device number 69 17:56:05 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x40, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="201179000000790e91c778eee281205fe5a796a30199906c3b65d756cfce2965c03d1874a1921f21191850263501f7ec83267fc8666d5c3bbf82786ef75b44b3216b62ad99291694dac32641ec02050e4d7ca7d9fe925dc7a2f35eff252d8ebd73d083e023068ee5f465398322b2c03d86ab2a6ebec568a013aa4b8456f7e4"], &(0x7f00000000c0)={0x0, 0x3, 0x58, @string={0x58, 0x3, "23338a983878ab91423fc18c82577ac14263492cd336b5e9e9c8986709127ffaaa291b884a3918ee1e026044a53fafaeb6730d578bf675387d35ec9a2c3bcb572850f02a4f662810d884b3b8d1c7e6e81d38bef44578"}}}, &(0x7f0000000440)={0x34, &(0x7f0000000180)={0x40, 0x15, 0x7f, "4893800f6206ae753bcdfaf908f35f297d154182bedcdd74767ecb5583942f4a1d32e262538b094f8e9d8686ad8236d68092aec10e244c4b5e0ccff9108709ea3ac6556dabc87d18b112df13e6ce5d03dfd0d8f37e6759e7cbb6ed906868c4679079b5d86c313590226375f1680b5b996313b5437d50dffc2b52469e6a3680"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0xe0}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000002c0)={0x20, 0x0, 0xf6, {0xf4, "93b4c18e929213f997b6b9c946cd309a860b21242da6837b3d4fa7defdb288f8a6581b20a789697ca88846a1306d76183443543a972df58ff995e451ca76226784ffb2f475ddebd0b97fd069a032f397ff3baef0dcea4258349fcd143a73092f9b9987da83b43a9781420dc3b6e21ce5047b502837afd203ac2c0e3746d326e4f9e1f711c4313a00372f8cb633d13a423eec329c90fe64918760c2f6d1ee298acdc952f51d0e5ca1336dc7e8bb1c143bd59d21aa9f78a758aca424674196690c60fa0ee6128edd8037873c06cd6cc0668b4eef08f1bd019c624e22a60ea06a5d32d3a4ba4b2043e50837d40bc4b4eeb82b2b8ba4"}}, &(0x7f00000003c0)={0x20, 0x1, 0x1, 0x8}, &(0x7f0000000400)={0x20, 0x0, 0x1}}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 17:56:05 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) socket$alg(0x26, 0x5, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) mount$9p_fd(0x0, &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 17:56:05 executing program 3: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x193f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:56:05 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x208200) getpid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(0xffffffffffffffff, &(0x7f0000000180)=""/19, 0xfffffe47) dup(0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) 17:56:05 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 17:56:05 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(0x0, 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x208200) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) getpid() read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) 17:56:05 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(0xffffffffffffffff) socket$alg(0x26, 0x5, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) mount$9p_fd(0x0, &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 17:56:05 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000000340)) [ 454.395058][ T37] audit: type=1804 audit(1618682165.906:448): pid=17210 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/195/file0/bus" dev="ramfs" ino=47176 res=1 errno=0 17:56:05 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, 0x0, 0x38) [ 454.443492][T17210] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 454.532271][ T37] audit: type=1804 audit(1618682165.936:449): pid=17210 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/195/file0/bus" dev="ramfs" ino=47176 res=1 errno=0 17:56:06 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(0xffffffffffffffff) socket$alg(0x26, 0x5, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) mount$9p_fd(0x0, &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 17:56:06 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x208200) getpid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(0xffffffffffffffff, &(0x7f0000000180)=""/19, 0xfffffe47) dup(0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) 17:56:06 executing program 4: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x2, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2}}}}}]}}]}}, 0x0) [ 454.673123][ T9438] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 454.739039][ T37] audit: type=1804 audit(1618682165.936:450): pid=17210 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/195/file0/bus" dev="ramfs" ino=47176 res=1 errno=0 [ 454.880421][ T37] audit: type=1804 audit(1618682166.376:451): pid=17235 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/196/file0/bus" dev="ramfs" ino=46458 res=1 errno=0 [ 454.910639][T17235] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 455.018743][ T37] audit: type=1804 audit(1618682166.386:452): pid=17235 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/196/file0/bus" dev="ramfs" ino=46458 res=1 errno=0 [ 455.082900][ T9438] usb 2-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=ce.99 [ 455.096809][ T9438] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.140186][ T9438] usb 2-1: config 0 descriptor?? [ 455.146496][ T37] audit: type=1804 audit(1618682166.386:453): pid=17235 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/196/file0/bus" dev="ramfs" ino=46458 res=1 errno=0 [ 455.194410][ T9682] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 455.225176][ T9438] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 455.451680][T17208] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 455.472367][ T9682] usb 5-1: Using ep0 maxpacket: 8 [ 455.632914][ T9682] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 455.822633][ T9682] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 455.831727][ T9682] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.845296][ T9682] usb 5-1: Product: syz [ 455.849458][ T9682] usb 5-1: Manufacturer: syz [ 455.856715][ T9682] usb 5-1: SerialNumber: syz [ 456.115721][ T5] usb 5-1: USB disconnect, device number 11 [ 456.892363][ T9475] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 457.162322][ T9475] usb 5-1: Using ep0 maxpacket: 8 [ 457.250471][ T9438] gspca_stv06xx: I2C: Read error writing address: -71 [ 457.258758][ T9438] usb 2-1: USB disconnect, device number 70 [ 457.282477][ T9475] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 457.495402][ T9475] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 457.504613][ T9475] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.514324][ T9475] usb 5-1: Product: syz [ 457.518585][ T9475] usb 5-1: Manufacturer: syz [ 457.525156][ T9475] usb 5-1: SerialNumber: syz 17:56:09 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x40, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="201179000000790e91c778eee281205fe5a796a30199906c3b65d756cfce2965c03d1874a1921f21191850263501f7ec83267fc8666d5c3bbf82786ef75b44b3216b62ad99291694dac32641ec02050e4d7ca7d9fe925dc7a2f35eff252d8ebd73d083e023068ee5f465398322b2c03d86ab2a6ebec568a013aa4b8456f7e4"], &(0x7f00000000c0)={0x0, 0x3, 0x58, @string={0x58, 0x3, "23338a983878ab91423fc18c82577ac14263492cd336b5e9e9c8986709127ffaaa291b884a3918ee1e026044a53fafaeb6730d578bf675387d35ec9a2c3bcb572850f02a4f662810d884b3b8d1c7e6e81d38bef44578"}}}, &(0x7f0000000440)={0x34, &(0x7f0000000180)={0x40, 0x15, 0x7f, "4893800f6206ae753bcdfaf908f35f297d154182bedcdd74767ecb5583942f4a1d32e262538b094f8e9d8686ad8236d68092aec10e244c4b5e0ccff9108709ea3ac6556dabc87d18b112df13e6ce5d03dfd0d8f37e6759e7cbb6ed906868c4679079b5d86c313590226375f1680b5b996313b5437d50dffc2b52469e6a3680"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0xe0}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000002c0)={0x20, 0x0, 0xf6, {0xf4, "93b4c18e929213f997b6b9c946cd309a860b21242da6837b3d4fa7defdb288f8a6581b20a789697ca88846a1306d76183443543a972df58ff995e451ca76226784ffb2f475ddebd0b97fd069a032f397ff3baef0dcea4258349fcd143a73092f9b9987da83b43a9781420dc3b6e21ce5047b502837afd203ac2c0e3746d326e4f9e1f711c4313a00372f8cb633d13a423eec329c90fe64918760c2f6d1ee298acdc952f51d0e5ca1336dc7e8bb1c143bd59d21aa9f78a758aca424674196690c60fa0ee6128edd8037873c06cd6cc0668b4eef08f1bd019c624e22a60ea06a5d32d3a4ba4b2043e50837d40bc4b4eeb82b2b8ba4"}}, &(0x7f00000003c0)={0x20, 0x1, 0x1, 0x8}, &(0x7f0000000400)={0x20, 0x0, 0x1}}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 17:56:09 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x200002, 0x0) 17:56:09 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(0xffffffffffffffff) socket$alg(0x26, 0x5, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) mount$9p_fd(0x0, &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 17:56:09 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x208200) getpid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, 0x0, 0x0) dup(0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) 17:56:09 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(0x0, 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x208200) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) getpid() read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) 17:56:09 executing program 4: r0 = getpgid(0x0) process_vm_readv(r0, &(0x7f0000000580)=[{0x0}, {0x0}, {&(0x7f00000069c0)=""/102400, 0x19000}], 0x3, &(0x7f0000000200)=[{&(0x7f0000001800)=""/27, 0x1b}], 0x1, 0x0) 17:56:09 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) socket$alg(0x26, 0x5, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) mount$9p_fd(0x0, &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 457.831749][ T5] usb 5-1: USB disconnect, device number 12 17:56:09 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000042c0)={0x2, 0x3, &(0x7f0000004080)=@framed, &(0x7f00000040c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) 17:56:09 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x5452, &(0x7f0000000000)={'vcan0\x00'}) [ 457.916880][ T37] audit: type=1804 audit(1618682169.426:454): pid=17284 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/197/file0/bus" dev="ramfs" ino=46496 res=1 errno=0 [ 457.968496][T17284] overlayfs: unrecognized mount option "context=staff_u" or missing value 17:56:09 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x208200) getpid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, 0x0, 0x0) dup(0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 458.116646][ T37] audit: type=1804 audit(1618682169.476:455): pid=17284 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/197/file0/bus" dev="ramfs" ino=46496 res=1 errno=0 17:56:09 executing program 3: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x80c0, 0x0) 17:56:09 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000011c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@union={0x8}]}, {0x0, [0x0, 0x0]}}, &(0x7f00000001c0)=""/4096, 0x28, 0x1000, 0x1}, 0x20) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0) [ 458.212410][ T4818] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 458.269611][ T37] audit: type=1804 audit(1618682169.476:456): pid=17284 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/197/file0/bus" dev="ramfs" ino=46496 res=1 errno=0 [ 458.375616][ T37] audit: type=1804 audit(1618682169.886:457): pid=17306 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/198/file0/bus" dev="ramfs" ino=47248 res=1 errno=0 [ 458.390534][T17306] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 458.572707][ T4818] usb 2-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=ce.99 [ 458.581801][ T4818] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.619961][ T4818] usb 2-1: config 0 descriptor?? [ 458.684355][ T4818] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 458.932841][T17298] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 460.752288][ T4818] gspca_stv06xx: I2C: Read error writing address: -71 [ 460.760479][ T4818] usb 2-1: USB disconnect, device number 71 17:56:12 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x40, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="201179000000790e91c778eee281205fe5a796a30199906c3b65d756cfce2965c03d1874a1921f21191850263501f7ec83267fc8666d5c3bbf82786ef75b44b3216b62ad99291694dac32641ec02050e4d7ca7d9fe925dc7a2f35eff252d8ebd73d083e023068ee5f465398322b2c03d86ab2a6ebec568a013aa4b8456f7e4"], &(0x7f00000000c0)={0x0, 0x3, 0x58, @string={0x58, 0x3, "23338a983878ab91423fc18c82577ac14263492cd336b5e9e9c8986709127ffaaa291b884a3918ee1e026044a53fafaeb6730d578bf675387d35ec9a2c3bcb572850f02a4f662810d884b3b8d1c7e6e81d38bef44578"}}}, &(0x7f0000000440)={0x34, &(0x7f0000000180)={0x40, 0x15, 0x7f, "4893800f6206ae753bcdfaf908f35f297d154182bedcdd74767ecb5583942f4a1d32e262538b094f8e9d8686ad8236d68092aec10e244c4b5e0ccff9108709ea3ac6556dabc87d18b112df13e6ce5d03dfd0d8f37e6759e7cbb6ed906868c4679079b5d86c313590226375f1680b5b996313b5437d50dffc2b52469e6a3680"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0xe0}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000002c0)={0x20, 0x0, 0xf6, {0xf4, "93b4c18e929213f997b6b9c946cd309a860b21242da6837b3d4fa7defdb288f8a6581b20a789697ca88846a1306d76183443543a972df58ff995e451ca76226784ffb2f475ddebd0b97fd069a032f397ff3baef0dcea4258349fcd143a73092f9b9987da83b43a9781420dc3b6e21ce5047b502837afd203ac2c0e3746d326e4f9e1f711c4313a00372f8cb633d13a423eec329c90fe64918760c2f6d1ee298acdc952f51d0e5ca1336dc7e8bb1c143bd59d21aa9f78a758aca424674196690c60fa0ee6128edd8037873c06cd6cc0668b4eef08f1bd019c624e22a60ea06a5d32d3a4ba4b2043e50837d40bc4b4eeb82b2b8ba4"}}, &(0x7f00000003c0)={0x20, 0x1, 0x1, 0x8}, &(0x7f0000000400)={0x20, 0x0, 0x1}}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 17:56:12 executing program 4: pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x0) 17:56:12 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x208200) getpid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, 0x0, 0x0) dup(0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) 17:56:12 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmmsg$nfc_llcp(r0, &(0x7f00000038c0)=[{0x0, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2, &(0x7f0000000180)={0x10}, 0x10}], 0x1, 0x0) 17:56:12 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) socket$alg(0x26, 0x5, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) mount$9p_fd(0x0, &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 17:56:12 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x208200) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) getpid() read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) 17:56:12 executing program 3: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dsp1\x00', 0x0, 0x0) read$dsp(r0, &(0x7f00000002c0)=""/18, 0x12) [ 461.358531][ T37] kauditd_printk_skb: 2 callbacks suppressed [ 461.358544][ T37] audit: type=1804 audit(1618682172.866:460): pid=17339 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/199/file0/bus" dev="ramfs" ino=47283 res=1 errno=0 [ 461.369737][T17339] overlayfs: unrecognized mount option "context=staff_u" or missing value 17:56:12 executing program 4: clone3(&(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000001380)=[0x0], 0x1}, 0x58) clone3(&(0x7f0000001840)={0x2081000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:56:13 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x208200) getpid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) dup(0xffffffffffffffff) mount$overlay(0x0, 0x0, &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 461.536783][ T37] audit: type=1804 audit(1618682172.866:461): pid=17339 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/199/file0/bus" dev="ramfs" ino=47283 res=1 errno=0 [ 461.607652][ T37] audit: type=1804 audit(1618682172.866:462): pid=17339 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/199/file0/bus" dev="ramfs" ino=47283 res=1 errno=0 [ 461.652416][ T4818] usb 2-1: new high-speed USB device number 72 using dummy_hcd 17:56:13 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000011c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f00000001c0)=""/4096, 0x1a, 0x1000, 0x1}, 0x20) [ 461.697709][ T37] audit: type=1804 audit(1618682172.936:463): pid=17342 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/157/bus" dev="sda1" ino=15256 res=1 errno=0 [ 461.786392][ T37] audit: type=1804 audit(1618682173.036:464): pid=17342 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/157/bus" dev="sda1" ino=15256 res=1 errno=0 [ 461.828111][ T37] audit: type=1804 audit(1618682173.156:465): pid=17342 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/157/bus" dev="sda1" ino=15256 res=1 errno=0 17:56:13 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x208200) getpid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) dup(0xffffffffffffffff) mount$overlay(0x0, 0x0, &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) 17:56:13 executing program 4: r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00', 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x148, r0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8bf2}, {0x6, 0x11, 0x4}, {0x8}, {0x5}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x1d4}, {0x8, 0x13, 0x81}, {0x5, 0x14, 0x1}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x100}, {0x6, 0x11, 0x4f2}, {0x8, 0x13, 0x8001}, {0x5}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x2}, {0x8, 0x13, 0x4}, {0x5, 0x14, 0x1}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x400}, {0x6, 0x11, 0x6}, {0x8, 0x13, 0x8}, {0x5}}]}, 0x148}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_VERSION={0x8}, @GTPA_NET_NS_FD={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x2}]}, 0x3c}}, 0x8000) r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000003c0)=0xffffffffffffffff, 0x4) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00', 0x0, 0x8}, 0x10) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000480), 0x8) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000004c0)={r1, r2, 0x0, r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000500)='SEG6\x00', r4) sendmsg$TIPC_NL_MON_GET(r4, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x38, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x80}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x88009}, 0x20026844) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000640)=0xffffffffffffffff, 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000680)={r5}, 0x8) syz_mount_image$afs(&(0x7f00000006c0)='afs\x00', &(0x7f0000000700)='./file0\x00', 0x5, 0x1, &(0x7f0000000800)=[{&(0x7f0000000740)="1ed938c91af4fa9d2f6480a31b74117b2ab119bdb41e8fde70d77b862bc495c71b2631f219dd1f5a21407d1c2491927207f5c589aab86238edf1a1c26c9edb3d1939104f1acd839a155e39a2261ba0298162e9361fde39876cdf6f78c7eeaa7e5b4003ebff6d36b432548da62e0fb5f0b75ea62c46bc0b88f89e33312101007cd8e681b5ca84033779cd67caa21e7c3eb6e4fb1b794d0c4bd8", 0x99, 0x23}], 0x800000, &(0x7f0000000840)={[{@flock_strict='flock=strict'}, {@autocell='autocell'}, {@flock_local='flock=local'}, {@dyn='dyn'}, {@dyn='dyn'}, {@dyn='dyn'}, {@autocell='autocell'}, {@dyn='dyn'}, {@flock_local='flock=local'}], [{@smackfsdef={'smackfsdef', 0x3d, '+'}}]}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000a40)='l2tp\x00', r3) [ 462.004925][T17345] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 462.036152][ T37] audit: type=1804 audit(1618682173.256:466): pid=17362 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/200/file0/bus" dev="ramfs" ino=47301 res=1 errno=0 [ 462.085438][T17370] kAFS: unparsable volume name [ 462.096376][ T37] audit: type=1804 audit(1618682173.256:467): pid=17362 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/200/file0/bus" dev="ramfs" ino=47301 res=1 errno=0 [ 462.123034][ T4818] usb 2-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=ce.99 [ 462.162659][ T37] audit: type=1804 audit(1618682173.256:468): pid=17362 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/200/file0/bus" dev="ramfs" ino=47301 res=1 errno=0 [ 462.190567][ T4818] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.257316][ T4818] usb 2-1: config 0 descriptor?? [ 462.334716][ T4818] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 462.344291][ T37] audit: type=1804 audit(1618682173.856:469): pid=17381 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/201/file0/bus" dev="ramfs" ino=47322 res=1 errno=0 [ 464.361058][ T4818] gspca_stv06xx: I2C: Read error writing address: -71 [ 464.369530][ T4818] usb 2-1: USB disconnect, device number 72 17:56:16 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000540)) socket$inet_sctp(0x2, 0x0, 0x84) syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0)='nl802154\x00', 0xffffffffffffffff) 17:56:16 executing program 3: bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) 17:56:16 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) socket$alg(0x26, 0x5, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) mount$9p_fd(0x0, &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 17:56:16 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x208200) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) getpid() read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) 17:56:16 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x40, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="201179000000790e91c778eee281205fe5a796a30199906c3b65d756cfce2965c03d1874a1921f21191850263501f7ec83267fc8666d5c3bbf82786ef75b44b3216b62ad99291694dac32641ec02050e4d7ca7d9fe925dc7a2f35eff252d8ebd73d083e023068ee5f465398322b2c03d86ab2a6ebec568a013aa4b8456f7e4"], &(0x7f00000000c0)={0x0, 0x3, 0x58, @string={0x58, 0x3, "23338a983878ab91423fc18c82577ac14263492cd336b5e9e9c8986709127ffaaa291b884a3918ee1e026044a53fafaeb6730d578bf675387d35ec9a2c3bcb572850f02a4f662810d884b3b8d1c7e6e81d38bef44578"}}}, &(0x7f0000000440)={0x34, &(0x7f0000000180)={0x40, 0x15, 0x7f, "4893800f6206ae753bcdfaf908f35f297d154182bedcdd74767ecb5583942f4a1d32e262538b094f8e9d8686ad8236d68092aec10e244c4b5e0ccff9108709ea3ac6556dabc87d18b112df13e6ce5d03dfd0d8f37e6759e7cbb6ed906868c4679079b5d86c313590226375f1680b5b996313b5437d50dffc2b52469e6a3680"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0xe0}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000002c0)={0x20, 0x0, 0xf6, {0xf4, "93b4c18e929213f997b6b9c946cd309a860b21242da6837b3d4fa7defdb288f8a6581b20a789697ca88846a1306d76183443543a972df58ff995e451ca76226784ffb2f475ddebd0b97fd069a032f397ff3baef0dcea4258349fcd143a73092f9b9987da83b43a9781420dc3b6e21ce5047b502837afd203ac2c0e3746d326e4f9e1f711c4313a00372f8cb633d13a423eec329c90fe64918760c2f6d1ee298acdc952f51d0e5ca1336dc7e8bb1c143bd59d21aa9f78a758aca424674196690c60fa0ee6128edd8037873c06cd6cc0668b4eef08f1bd019c624e22a60ea06a5d32d3a4ba4b2043e50837d40bc4b4eeb82b2b8ba4"}}, &(0x7f00000003c0)={0x20, 0x1, 0x1, 0x8}, &(0x7f0000000400)={0x20, 0x0, 0x1}}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 17:56:16 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x208200) getpid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) dup(0xffffffffffffffff) mount$overlay(0x0, 0x0, &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) 17:56:16 executing program 3: clone3(&(0x7f00000012c0)={0x2000100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000001280)=[0xffffffffffffffff], 0x1}, 0x58) 17:56:16 executing program 4: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x193f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:56:16 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x208200) getpid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) dup(0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', 0x0, 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) 17:56:16 executing program 3: syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', 0x0, 0x0, 0x1, &(0x7f0000002480)=[{&(0x7f0000000080)="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", 0x1000, 0x8001}], 0x0, &(0x7f0000002580)) [ 465.272071][ T4818] usb 2-1: new high-speed USB device number 73 using dummy_hcd 17:56:16 executing program 4: pselect6(0x40, &(0x7f00000003c0), 0x0, &(0x7f0000000440), &(0x7f0000000480)={0x0, 0x3938700}, 0x0) [ 465.372161][T17430] loop3: detected capacity change from 0 to 128 [ 465.446859][T17430] loop3: detected capacity change from 0 to 128 17:56:17 executing program 4: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x31, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0x1, 0x2, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2}}}}}]}}]}}, 0x0) 17:56:17 executing program 3: clone3(&(0x7f0000000180)={0x400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:56:17 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x208200) getpid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) dup(0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', 0x0, 0x0, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 465.713104][ T4818] usb 2-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=ce.99 [ 465.731190][ T4818] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.768676][ T4818] usb 2-1: config 0 descriptor?? 17:56:17 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) socket$alg(0x26, 0x5, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 465.854832][ T4818] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 465.972225][ T9506] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 466.003770][T17465] 9pnet: Insufficient options for proto=fd [ 466.161160][T17471] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 466.222802][ T9506] usb 5-1: Using ep0 maxpacket: 8 17:56:17 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x208200) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) getpid() read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) [ 466.360433][ T9506] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 466.370439][ T37] kauditd_printk_skb: 15 callbacks suppressed [ 466.370453][ T37] audit: type=1804 audit(1618682177.866:485): pid=17475 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/159/file0/bus" dev="ramfs" ino=46688 res=1 errno=0 [ 466.410358][ T9506] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 466.449741][ T37] audit: type=1804 audit(1618682177.876:486): pid=17475 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/159/file0/bus" dev="ramfs" ino=46688 res=1 errno=0 [ 466.527230][T17478] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 466.652094][ T9506] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 466.661184][ T9506] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.679231][ T9506] usb 5-1: Product: syz [ 466.685021][ T9506] usb 5-1: Manufacturer: syz [ 466.689710][ T9506] usb 5-1: SerialNumber: syz [ 466.940305][ T9438] usb 5-1: USB disconnect, device number 13 [ 467.731985][ T9438] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 467.922512][ T4818] gspca_stv06xx: I2C: Read error writing address: -71 [ 467.931556][ T4818] usb 2-1: USB disconnect, device number 73 [ 467.991998][ T9438] usb 5-1: Using ep0 maxpacket: 8 [ 468.141937][ T9438] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 468.151837][ T9438] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 17:56:19 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x40, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="201179000000790e91c778eee281205fe5a796a30199906c3b65d756cfce2965c03d1874a1921f21191850263501f7ec83267fc8666d5c3bbf82786ef75b44b3216b62ad99291694dac32641ec02050e4d7ca7d9fe925dc7a2f35eff252d8ebd73d083e023068ee5f465398322b2c03d86ab2a6ebec568a013aa4b8456f7e4"], &(0x7f00000000c0)={0x0, 0x3, 0x58, @string={0x58, 0x3, "23338a983878ab91423fc18c82577ac14263492cd336b5e9e9c8986709127ffaaa291b884a3918ee1e026044a53fafaeb6730d578bf675387d35ec9a2c3bcb572850f02a4f662810d884b3b8d1c7e6e81d38bef44578"}}}, &(0x7f0000000440)={0x34, &(0x7f0000000180)={0x40, 0x15, 0x7f, "4893800f6206ae753bcdfaf908f35f297d154182bedcdd74767ecb5583942f4a1d32e262538b094f8e9d8686ad8236d68092aec10e244c4b5e0ccff9108709ea3ac6556dabc87d18b112df13e6ce5d03dfd0d8f37e6759e7cbb6ed906868c4679079b5d86c313590226375f1680b5b996313b5437d50dffc2b52469e6a3680"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0xe0}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000002c0)={0x20, 0x0, 0xf6, {0xf4, "93b4c18e929213f997b6b9c946cd309a860b21242da6837b3d4fa7defdb288f8a6581b20a789697ca88846a1306d76183443543a972df58ff995e451ca76226784ffb2f475ddebd0b97fd069a032f397ff3baef0dcea4258349fcd143a73092f9b9987da83b43a9781420dc3b6e21ce5047b502837afd203ac2c0e3746d326e4f9e1f711c4313a00372f8cb633d13a423eec329c90fe64918760c2f6d1ee298acdc952f51d0e5ca1336dc7e8bb1c143bd59d21aa9f78a758aca424674196690c60fa0ee6128edd8037873c06cd6cc0668b4eef08f1bd019c624e22a60ea06a5d32d3a4ba4b2043e50837d40bc4b4eeb82b2b8ba4"}}, &(0x7f00000003c0)={0x20, 0x1, 0x1, 0x8}, &(0x7f0000000400)={0x20, 0x0, 0x1}}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 17:56:19 executing program 3: ioctl$SIOCX25GCAUSEDIAG(0xffffffffffffffff, 0x89e6, 0x0) 17:56:19 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x208200) getpid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) dup(0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', 0x0, 0x0, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) 17:56:19 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) socket$alg(0x26, 0x5, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 17:56:19 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x208200) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) getpid() read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) [ 468.352201][ T9438] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 468.361553][ T9438] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.371007][ T9438] usb 5-1: Product: syz [ 468.376795][ T9438] usb 5-1: Manufacturer: syz [ 468.381400][ T9438] usb 5-1: SerialNumber: syz 17:56:20 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) socket$alg(0x26, 0x5, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 468.487873][T17512] 9pnet: Insufficient options for proto=fd [ 468.488064][ T37] audit: type=1804 audit(1618682179.996:487): pid=17511 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/205/file0/bus" dev="ramfs" ino=47407 res=1 errno=0 17:56:20 executing program 3: syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x5bb0854e, 0x202200) [ 468.623408][ T37] audit: type=1804 audit(1618682180.006:488): pid=17513 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/160/file0/bus" dev="ramfs" ino=46717 res=1 errno=0 [ 468.630456][T17524] 9pnet: Insufficient options for proto=fd 17:56:20 executing program 4: perf_event_open$cgroup(&(0x7f0000000200)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 17:56:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={0x0}}, 0x0) [ 468.679298][T12215] usb 5-1: USB disconnect, device number 14 17:56:20 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) socket$alg(0x26, 0x5, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) mount$9p_fd(0x0, &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 17:56:20 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x208200) getpid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) dup(0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', 0x0, 0x0, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 468.770588][ T37] audit: type=1804 audit(1618682180.046:489): pid=17511 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/205/file0/bus" dev="ramfs" ino=47407 res=1 errno=0 17:56:20 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) socket$alg(0x26, 0x5, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) mount$9p_fd(0x0, &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 468.811590][T17539] 9pnet: Insufficient options for proto=fd [ 468.819009][ T4818] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 468.829443][ T37] audit: type=1804 audit(1618682180.046:490): pid=17511 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/205/file0/bus" dev="ramfs" ino=47407 res=1 errno=0 [ 468.876427][T17544] 9pnet: Insufficient options for proto=fd [ 468.934748][ T37] audit: type=1804 audit(1618682180.446:491): pid=17548 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/206/file0/bus" dev="ramfs" ino=46765 res=1 errno=0 [ 468.962963][ T37] audit: type=1804 audit(1618682180.446:492): pid=17548 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/206/file0/bus" dev="ramfs" ino=46765 res=1 errno=0 [ 468.991145][ T37] audit: type=1804 audit(1618682180.446:493): pid=17548 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/206/file0/bus" dev="ramfs" ino=46765 res=1 errno=0 [ 469.047212][ T37] audit: type=1804 audit(1618682180.476:494): pid=17513 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/160/file0/bus" dev="ramfs" ino=46717 res=1 errno=0 [ 469.222248][ T4818] usb 2-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=ce.99 [ 469.231341][ T4818] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.255467][ T4818] usb 2-1: config 0 descriptor?? [ 469.294303][ T4818] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 471.341526][ T4818] gspca_stv06xx: I2C: Read error writing address: -71 [ 471.350944][ T4818] usb 2-1: USB disconnect, device number 74 17:56:23 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x40, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="201179000000790e91c778eee281205fe5a796a30199906c3b65d756cfce2965c03d1874a1921f21191850263501f7ec83267fc8666d5c3bbf82786ef75b44b3216b62ad99291694dac32641ec02050e4d7ca7d9fe925dc7a2f35eff252d8ebd73d083e023068ee5f465398322b2c03d86ab2a6ebec568a013aa4b8456f7e4"], &(0x7f00000000c0)={0x0, 0x3, 0x58, @string={0x58, 0x3, "23338a983878ab91423fc18c82577ac14263492cd336b5e9e9c8986709127ffaaa291b884a3918ee1e026044a53fafaeb6730d578bf675387d35ec9a2c3bcb572850f02a4f662810d884b3b8d1c7e6e81d38bef44578"}}}, &(0x7f0000000440)={0x34, &(0x7f0000000180)={0x40, 0x15, 0x7f, "4893800f6206ae753bcdfaf908f35f297d154182bedcdd74767ecb5583942f4a1d32e262538b094f8e9d8686ad8236d68092aec10e244c4b5e0ccff9108709ea3ac6556dabc87d18b112df13e6ce5d03dfd0d8f37e6759e7cbb6ed906868c4679079b5d86c313590226375f1680b5b996313b5437d50dffc2b52469e6a3680"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0xe0}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000002c0)={0x20, 0x0, 0xf6, {0xf4, "93b4c18e929213f997b6b9c946cd309a860b21242da6837b3d4fa7defdb288f8a6581b20a789697ca88846a1306d76183443543a972df58ff995e451ca76226784ffb2f475ddebd0b97fd069a032f397ff3baef0dcea4258349fcd143a73092f9b9987da83b43a9781420dc3b6e21ce5047b502837afd203ac2c0e3746d326e4f9e1f711c4313a00372f8cb633d13a423eec329c90fe64918760c2f6d1ee298acdc952f51d0e5ca1336dc7e8bb1c143bd59d21aa9f78a758aca424674196690c60fa0ee6128edd8037873c06cd6cc0668b4eef08f1bd019c624e22a60ea06a5d32d3a4ba4b2043e50837d40bc4b4eeb82b2b8ba4"}}, &(0x7f00000003c0)={0x20, 0x1, 0x1, 0x8}, &(0x7f0000000400)={0x20, 0x0, 0x1}}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 17:56:23 executing program 4: clone3(&(0x7f00000013c0)={0x10100000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:56:23 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) socket$alg(0x26, 0x5, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) mount$9p_fd(0x0, &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 17:56:23 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x208200) getpid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) dup(0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) 17:56:23 executing program 3: getsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, 0x0, 0x0) setsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, 0x0, 0x0) syz_usbip_server_init(0x1) 17:56:23 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x208200) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) getpid() read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) 17:56:23 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) socket$alg(0x26, 0x5, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x0, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) mount$9p_fd(0x0, &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 471.880018][T17574] 9pnet: Insufficient options for proto=fd [ 471.898404][ T37] kauditd_printk_skb: 1 callbacks suppressed [ 471.898418][ T37] audit: type=1804 audit(1618682183.407:496): pid=17577 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/161/file0/bus" dev="ramfs" ino=46791 res=1 errno=0 [ 471.956601][T17579] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 471.963561][T17579] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 471.995149][T17579] vhci_hcd vhci_hcd.0: Device attached [ 472.009106][T17581] vhci_hcd: connection closed [ 472.012662][T11702] vhci_hcd: stop threads [ 472.052600][T11702] vhci_hcd: release socket [ 472.057541][T17590] 9pnet: Insufficient options for proto=fd [ 472.096647][ T37] audit: type=1804 audit(1618682183.447:497): pid=17575 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/207/file0/bus" dev="ramfs" ino=47451 res=1 errno=0 [ 472.098705][T11702] vhci_hcd: disconnect device 17:56:23 executing program 4: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) [ 472.126527][ T37] audit: type=1804 audit(1618682183.447:498): pid=17575 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/207/file0/bus" dev="ramfs" ino=47451 res=1 errno=0 17:56:23 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) socket$alg(0x26, 0x5, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x0, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) mount$9p_fd(0x0, &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 17:56:23 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x208200) getpid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) dup(0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 472.241286][ T9438] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 472.259750][T17598] 9pnet: Insufficient options for proto=fd 17:56:23 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) socket$alg(0x26, 0x5, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x0, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) mount$9p_fd(0x0, &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 17:56:23 executing program 4: io_uring_setup(0x3dde, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x1, 0x61}) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) [ 472.286137][ T37] audit: type=1804 audit(1618682183.447:499): pid=17575 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/207/file0/bus" dev="ramfs" ino=47451 res=1 errno=0 [ 472.394514][ T37] audit: type=1804 audit(1618682183.557:500): pid=17577 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/161/file0/bus" dev="ramfs" ino=46791 res=1 errno=0 [ 472.420680][T17614] 9pnet: Insufficient options for proto=fd [ 472.476787][ T37] audit: type=1804 audit(1618682183.577:501): pid=17577 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/161/file0/bus" dev="ramfs" ino=46791 res=1 errno=0 [ 472.530438][T17618] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(3) [ 472.536999][T17618] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 472.539246][ T37] audit: type=1804 audit(1618682183.797:502): pid=17601 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/208/file0/bus" dev="ramfs" ino=47472 res=1 errno=0 [ 472.553033][T17618] vhci_hcd vhci_hcd.0: Device attached [ 472.583383][T17619] vhci_hcd: connection closed [ 472.613148][T11705] vhci_hcd: stop threads [ 472.620959][ T37] audit: type=1804 audit(1618682183.797:503): pid=17601 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/208/file0/bus" dev="ramfs" ino=47472 res=1 errno=0 [ 472.627919][T11705] vhci_hcd: release socket [ 472.689101][ T37] audit: type=1804 audit(1618682183.797:504): pid=17601 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir392991241/syzkaller.6zbDWJ/208/file0/bus" dev="ramfs" ino=47472 res=1 errno=0 [ 472.691645][ T9438] usb 2-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=ce.99 [ 472.732359][T11705] vhci_hcd: disconnect device [ 472.737111][ T9438] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.751626][ T9475] vhci_hcd: vhci_device speed not set [ 472.759645][ T9438] usb 2-1: config 0 descriptor?? [ 472.803500][ T9438] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 474.860966][ T9438] gspca_stv06xx: I2C: Read error writing address: -71 [ 474.863339][ T9438] usb 2-1: USB disconnect, device number 75 17:56:26 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x40, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="201179000000790e91c778eee281205fe5a796a30199906c3b65d756cfce2965c03d1874a1921f21191850263501f7ec83267fc8666d5c3bbf82786ef75b44b3216b62ad99291694dac32641ec02050e4d7ca7d9fe925dc7a2f35eff252d8ebd73d083e023068ee5f465398322b2c03d86ab2a6ebec568a013aa4b8456f7e4"], &(0x7f00000000c0)={0x0, 0x3, 0x58, @string={0x58, 0x3, "23338a983878ab91423fc18c82577ac14263492cd336b5e9e9c8986709127ffaaa291b884a3918ee1e026044a53fafaeb6730d578bf675387d35ec9a2c3bcb572850f02a4f662810d884b3b8d1c7e6e81d38bef44578"}}}, &(0x7f0000000440)={0x34, &(0x7f0000000180)={0x40, 0x15, 0x7f, "4893800f6206ae753bcdfaf908f35f297d154182bedcdd74767ecb5583942f4a1d32e262538b094f8e9d8686ad8236d68092aec10e244c4b5e0ccff9108709ea3ac6556dabc87d18b112df13e6ce5d03dfd0d8f37e6759e7cbb6ed906868c4679079b5d86c313590226375f1680b5b996313b5437d50dffc2b52469e6a3680"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0xe0}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000002c0)={0x20, 0x0, 0xf6, {0xf4, "93b4c18e929213f997b6b9c946cd309a860b21242da6837b3d4fa7defdb288f8a6581b20a789697ca88846a1306d76183443543a972df58ff995e451ca76226784ffb2f475ddebd0b97fd069a032f397ff3baef0dcea4258349fcd143a73092f9b9987da83b43a9781420dc3b6e21ce5047b502837afd203ac2c0e3746d326e4f9e1f711c4313a00372f8cb633d13a423eec329c90fe64918760c2f6d1ee298acdc952f51d0e5ca1336dc7e8bb1c143bd59d21aa9f78a758aca424674196690c60fa0ee6128edd8037873c06cd6cc0668b4eef08f1bd019c624e22a60ea06a5d32d3a4ba4b2043e50837d40bc4b4eeb82b2b8ba4"}}, &(0x7f00000003c0)={0x20, 0x1, 0x1, 0x8}, &(0x7f0000000400)={0x20, 0x0, 0x1}}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 17:56:26 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x208200) getpid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) dup(0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) 17:56:26 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) socket$alg(0x26, 0x5, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) mount$9p_fd(0x0, &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 17:56:26 executing program 4: io_setup(0x1, &(0x7f0000000000)) 17:56:26 executing program 3: select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x2710}) 17:56:26 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x208200) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) getpid() read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) 17:56:26 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) socket$alg(0x26, 0x5, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) mount$9p_fd(0x0, &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 475.422694][T17641] 9pnet: Insufficient options for proto=fd [ 475.441314][ T37] audit: type=1804 audit(1618682186.957:505): pid=17647 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/162/file0/bus" dev="ramfs" ino=46853 res=1 errno=0 17:56:27 executing program 3: clone3(&(0x7f0000000180)={0x14000100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0], 0x3}, 0x58) 17:56:27 executing program 4: io_uring_setup(0x614c, &(0x7f0000000040)) 17:56:27 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) socket$alg(0x26, 0x5, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) mount$9p_fd(0x0, &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 475.586316][T17657] 9pnet: Insufficient options for proto=fd 17:56:27 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={0x0}}, 0x0) 17:56:27 executing program 3: clone3(&(0x7f0000000240)={0x1800000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 475.782088][ T9475] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 475.804217][T17669] 9pnet: Insufficient options for proto=fd [ 476.180861][ T9475] usb 2-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=ce.99 [ 476.189991][ T9475] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.199910][ T9475] usb 2-1: config 0 descriptor?? [ 476.242617][ T9475] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 478.280434][ T9475] gspca_stv06xx: I2C: Read error writing address: -71 [ 478.289267][ T9475] usb 2-1: USB disconnect, device number 76 17:56:30 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x40, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="201179000000790e91c778eee281205fe5a796a30199906c3b65d756cfce2965c03d1874a1921f21191850263501f7ec83267fc8666d5c3bbf82786ef75b44b3216b62ad99291694dac32641ec02050e4d7ca7d9fe925dc7a2f35eff252d8ebd73d083e023068ee5f465398322b2c03d86ab2a6ebec568a013aa4b8456f7e4"], &(0x7f00000000c0)={0x0, 0x3, 0x58, @string={0x58, 0x3, "23338a983878ab91423fc18c82577ac14263492cd336b5e9e9c8986709127ffaaa291b884a3918ee1e026044a53fafaeb6730d578bf675387d35ec9a2c3bcb572850f02a4f662810d884b3b8d1c7e6e81d38bef44578"}}}, &(0x7f0000000440)={0x34, &(0x7f0000000180)={0x40, 0x15, 0x7f, "4893800f6206ae753bcdfaf908f35f297d154182bedcdd74767ecb5583942f4a1d32e262538b094f8e9d8686ad8236d68092aec10e244c4b5e0ccff9108709ea3ac6556dabc87d18b112df13e6ce5d03dfd0d8f37e6759e7cbb6ed906868c4679079b5d86c313590226375f1680b5b996313b5437d50dffc2b52469e6a3680"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0xe0}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000002c0)={0x20, 0x0, 0xf6, {0xf4, "93b4c18e929213f997b6b9c946cd309a860b21242da6837b3d4fa7defdb288f8a6581b20a789697ca88846a1306d76183443543a972df58ff995e451ca76226784ffb2f475ddebd0b97fd069a032f397ff3baef0dcea4258349fcd143a73092f9b9987da83b43a9781420dc3b6e21ce5047b502837afd203ac2c0e3746d326e4f9e1f711c4313a00372f8cb633d13a423eec329c90fe64918760c2f6d1ee298acdc952f51d0e5ca1336dc7e8bb1c143bd59d21aa9f78a758aca424674196690c60fa0ee6128edd8037873c06cd6cc0668b4eef08f1bd019c624e22a60ea06a5d32d3a4ba4b2043e50837d40bc4b4eeb82b2b8ba4"}}, &(0x7f00000003c0)={0x20, 0x1, 0x1, 0x8}, &(0x7f0000000400)={0x20, 0x0, 0x1}}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 17:56:30 executing program 5: r0 = getpgid(0x0) wait4(r0, 0x0, 0x0, &(0x7f00000000c0)) 17:56:30 executing program 4: ioprio_set$uid(0x0, 0xee00, 0x0) 17:56:30 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) socket$alg(0x26, 0x5, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) mount$9p_fd(0x0, &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 17:56:30 executing program 3: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x4, 0x20, 0x31, [{{0x9, 0x4, 0x0, 0x20, 0x1, 0x7, 0x1, 0x2, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x0, 0x7f}}}}}]}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x53, &(0x7f0000000080)={0x5, 0xf, 0x53, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "627a641f134e75a69a74145a9a771631"}, @generic={0x18, 0x10, 0x2, "4261a17aea993d52815db29f441f455598ae8572b2"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0x0, 0xfc}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "b601976782afc146396a0b6a34065536"}, @ptm_cap={0x3}]}, 0x2, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x82c}}, {0x0, 0x0}]}) 17:56:30 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) getpid() read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) 17:56:30 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) socket$alg(0x26, 0x5, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) mount$9p_fd(0x0, &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 478.863363][T17699] 9pnet: Insufficient options for proto=fd 17:56:30 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000001000)={0x0, 0x0, 0x800}, 0x20) [ 478.904699][ T37] kauditd_printk_skb: 5 callbacks suppressed [ 478.904714][ T37] audit: type=1804 audit(1618682190.418:511): pid=17703 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/163/file0/bus" dev="ramfs" ino=46901 res=1 errno=0 17:56:30 executing program 5: clone3(&(0x7f00000002c0)={0x8000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 478.957217][T17708] 9pnet: Insufficient options for proto=fd 17:56:30 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) socket$alg(0x26, 0x5, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) mount$9p_fd(0x0, &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 17:56:30 executing program 4: connect$x25(0xffffffffffffffff, 0x0, 0x0) [ 479.077921][ T37] audit: type=1804 audit(1618682190.428:512): pid=17703 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/163/file0/bus" dev="ramfs" ino=46901 res=1 errno=0 17:56:30 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) socket$alg(0x26, 0x5, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) mount$9p_fd(0x0, 0x0, &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 479.118890][T17722] 9pnet: Insufficient options for proto=fd [ 479.130662][ T9506] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 479.138060][ T37] audit: type=1804 audit(1618682190.488:513): pid=17703 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/163/file0/bus" dev="ramfs" ino=46901 res=1 errno=0 [ 479.270203][ T4818] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 479.370292][ T9506] usb 4-1: Using ep0 maxpacket: 8 [ 479.570342][ T9506] usb 4-1: config 1 interface 0 altsetting 32 bulk endpoint 0x1 has invalid maxpacket 16 [ 479.580420][ T9506] usb 4-1: config 1 interface 0 has no altsetting 0 [ 479.640599][ T4818] usb 2-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=ce.99 [ 479.649654][ T4818] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.667579][ T4818] usb 2-1: config 0 descriptor?? [ 479.712388][ T4818] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 479.940276][ T9506] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 479.950756][ T9506] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.959442][ T9506] usb 4-1: Product: syz [ 479.964099][ T9506] usb 4-1: SerialNumber: syz [ 479.990587][T17700] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 480.258982][ T9506] usb 4-1: USB disconnect, device number 11 [ 480.989968][ T5] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 481.230045][ T5] usb 4-1: Using ep0 maxpacket: 8 [ 481.429974][ T5] usb 4-1: config 1 interface 0 altsetting 32 bulk endpoint 0x1 has invalid maxpacket 16 [ 481.440012][ T5] usb 4-1: config 1 interface 0 has no altsetting 0 [ 481.769934][ T4818] gspca_stv06xx: I2C: Read error writing address: -71 [ 481.778604][ T4818] usb 2-1: USB disconnect, device number 77 [ 481.839850][ T5] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 481.848932][ T5] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.859283][ T5] usb 4-1: Product: syz [ 481.880165][ T5] usb 4-1: can't set config #1, error -71 [ 481.894965][ T5] usb 4-1: USB disconnect, device number 12 17:56:33 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x40, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="201179000000790e91c778eee281205fe5a796a30199906c3b65d756cfce2965c03d1874a1921f21191850263501f7ec83267fc8666d5c3bbf82786ef75b44b3216b62ad99291694dac32641ec02050e4d7ca7d9fe925dc7a2f35eff252d8ebd73d083e023068ee5f465398322b2c03d86ab2a6ebec568a013aa4b8456f7e4"], &(0x7f00000000c0)={0x0, 0x3, 0x58, @string={0x58, 0x3, "23338a983878ab91423fc18c82577ac14263492cd336b5e9e9c8986709127ffaaa291b884a3918ee1e026044a53fafaeb6730d578bf675387d35ec9a2c3bcb572850f02a4f662810d884b3b8d1c7e6e81d38bef44578"}}}, &(0x7f0000000440)={0x34, &(0x7f0000000180)={0x40, 0x15, 0x7f, "4893800f6206ae753bcdfaf908f35f297d154182bedcdd74767ecb5583942f4a1d32e262538b094f8e9d8686ad8236d68092aec10e244c4b5e0ccff9108709ea3ac6556dabc87d18b112df13e6ce5d03dfd0d8f37e6759e7cbb6ed906868c4679079b5d86c313590226375f1680b5b996313b5437d50dffc2b52469e6a3680"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0xe0}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000002c0)={0x20, 0x0, 0xf6, {0xf4, "93b4c18e929213f997b6b9c946cd309a860b21242da6837b3d4fa7defdb288f8a6581b20a789697ca88846a1306d76183443543a972df58ff995e451ca76226784ffb2f475ddebd0b97fd069a032f397ff3baef0dcea4258349fcd143a73092f9b9987da83b43a9781420dc3b6e21ce5047b502837afd203ac2c0e3746d326e4f9e1f711c4313a00372f8cb633d13a423eec329c90fe64918760c2f6d1ee298acdc952f51d0e5ca1336dc7e8bb1c143bd59d21aa9f78a758aca424674196690c60fa0ee6128edd8037873c06cd6cc0668b4eef08f1bd019c624e22a60ea06a5d32d3a4ba4b2043e50837d40bc4b4eeb82b2b8ba4"}}, &(0x7f00000003c0)={0x20, 0x1, 0x1, 0x8}, &(0x7f0000000400)={0x20, 0x0, 0x1}}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 17:56:33 executing program 5: process_vm_readv(0x0, &(0x7f0000000300)=[{&(0x7f0000000240)=""/140, 0x8c}], 0x1, &(0x7f00000005c0)=[{0x0}], 0x1, 0x0) 17:56:33 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) socket$alg(0x26, 0x5, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) mount$9p_fd(0x0, 0x0, &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 17:56:33 executing program 4: r0 = gettid() rt_tgsigqueueinfo(0x0, r0, 0xc, &(0x7f0000000540)={0x0, 0x0, 0x4}) 17:56:33 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) getpid() read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) 17:56:33 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f0000000540)) 17:56:33 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x2, &(0x7f0000000800)=[{0x3}, {0x4c5e}]}) [ 482.314245][ T37] audit: type=1804 audit(1618682193.818:514): pid=17779 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/164/file0/bus" dev="ramfs" ino=47633 res=1 errno=0 17:56:33 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) socket$alg(0x26, 0x5, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) mount$9p_fd(0x0, 0x0, &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 17:56:33 executing program 4: openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/hwrng\x00', 0x40000, 0x0) 17:56:34 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap$snddsp_control(&(0x7f0000ffc000/0x3000)=nil, 0x1000, 0x4, 0x10, r0, 0x83000000) 17:56:34 executing program 3: syz_mount_image$afs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 17:56:34 executing program 4: openat$dsp1(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dsp1\x00', 0x0, 0x0) [ 482.740005][ T9506] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 482.745339][ T37] audit: type=1804 audit(1618682194.249:515): pid=17779 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/164/file0/bus" dev="ramfs" ino=47633 res=1 errno=0 [ 482.812209][ T37] audit: type=1804 audit(1618682194.309:516): pid=17779 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/164/file0/bus" dev="ramfs" ino=47633 res=1 errno=0 [ 483.100146][ T9506] usb 2-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=ce.99 [ 483.109218][ T9506] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.125604][ T9506] usb 2-1: config 0 descriptor?? [ 483.174496][ T9506] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 485.228431][ T9506] gspca_stv06xx: I2C: Read error writing address: -71 [ 485.237017][ T9506] usb 2-1: USB disconnect, device number 78 17:56:37 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x40, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000140)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="201179000000790e91c778eee281205fe5a796a30199906c3b65d756cfce2965c03d1874a1921f21191850263501f7ec83267fc8666d5c3bbf82786ef75b44b3216b62ad99291694dac32641ec02050e4d7ca7d9fe925dc7a2f35eff252d8ebd73d083e023068ee5f465398322b2c03d86ab2a6ebec568a013aa4b8456f7e4"], &(0x7f00000000c0)={0x0, 0x3, 0x58, @string={0x58, 0x3, "23338a983878ab91423fc18c82577ac14263492cd336b5e9e9c8986709127ffaaa291b884a3918ee1e026044a53fafaeb6730d578bf675387d35ec9a2c3bcb572850f02a4f662810d884b3b8d1c7e6e81d38bef44578"}}}, &(0x7f0000000440)={0x34, &(0x7f0000000180)={0x40, 0x15, 0x7f, "4893800f6206ae753bcdfaf908f35f297d154182bedcdd74767ecb5583942f4a1d32e262538b094f8e9d8686ad8236d68092aec10e244c4b5e0ccff9108709ea3ac6556dabc87d18b112df13e6ce5d03dfd0d8f37e6759e7cbb6ed906868c4679079b5d86c313590226375f1680b5b996313b5437d50dffc2b52469e6a3680"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0xe0}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000002c0)={0x20, 0x0, 0xf6, {0xf4, "93b4c18e929213f997b6b9c946cd309a860b21242da6837b3d4fa7defdb288f8a6581b20a789697ca88846a1306d76183443543a972df58ff995e451ca76226784ffb2f475ddebd0b97fd069a032f397ff3baef0dcea4258349fcd143a73092f9b9987da83b43a9781420dc3b6e21ce5047b502837afd203ac2c0e3746d326e4f9e1f711c4313a00372f8cb633d13a423eec329c90fe64918760c2f6d1ee298acdc952f51d0e5ca1336dc7e8bb1c143bd59d21aa9f78a758aca424674196690c60fa0ee6128edd8037873c06cd6cc0668b4eef08f1bd019c624e22a60ea06a5d32d3a4ba4b2043e50837d40bc4b4eeb82b2b8ba4"}}, &(0x7f00000003c0)={0x20, 0x1, 0x1, 0x8}, &(0x7f0000000400)={0x20, 0x0, 0x1}}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 17:56:37 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) socket$alg(0x26, 0x5, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) mount$9p_fd(0x0, &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 17:56:37 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000011c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x1}]}]}}, &(0x7f00000001c0)=""/4096, 0x32, 0x1000, 0x1}, 0x20) 17:56:37 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) 17:56:37 executing program 4: syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00', 0xffffffffffffffff) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000003c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x38, 0x0, 0x0, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x80}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}]}, 0x38}}, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000680), 0x8) syz_genetlink_get_family_id$l2tp(0x0, r0) 17:56:37 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) getpid() read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) 17:56:37 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) socket$alg(0x26, 0x5, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) mount$9p_fd(0x0, &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 17:56:37 executing program 3: syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0)='l2tp\x00', 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(&(0x7f0000000900)='IPVS\x00', 0xffffffffffffffff) 17:56:37 executing program 5: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x4000, 0x0) [ 485.859625][ T37] audit: type=1804 audit(1618682197.369:517): pid=17836 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/165/file0/bus" dev="ramfs" ino=47038 res=1 errno=0 17:56:37 executing program 4: pselect6(0x40, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)={0x1f}, &(0x7f0000000480)={0x0, 0x3938700}, 0x0) 17:56:37 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) socket$alg(0x26, 0x5, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) mount$9p_fd(0x0, &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 485.995299][ T37] audit: type=1804 audit(1618682197.479:518): pid=17836 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/165/file0/bus" dev="ramfs" ino=47038 res=1 errno=0 17:56:37 executing program 3: syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00', 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x148, 0x0, 0x100, 0x0, 0x25dfdbfd, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8bf2}, {0x6, 0x11, 0x4}, {0x8}, {0x5}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}, {0x6, 0x11, 0x1d4}, {0x8, 0x13, 0x81}, {0x5, 0x14, 0x1}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x100}, {0x6, 0x11, 0x4f2}, {0x8, 0x13, 0x8001}, {0x5}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x2}, {0x8, 0x13, 0x4}, {0x5}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x400}, {0x6, 0x11, 0x6}, {0x8}, {0x5}}]}, 0x148}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_VERSION={0x8}, @GTPA_NET_NS_FD={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x2}]}, 0x3c}}, 0x8000) r0 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000003c0)=0xffffffffffffffff, 0x4) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00', 0x0, 0x8}, 0x10) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000480), 0x8) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000004c0)={r0, r1, 0x0, r2}, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000500)='SEG6\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x38, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x80}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x88009}, 0x20026844) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000640)=0xffffffffffffffff, 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000680)={r3}, 0x8) syz_mount_image$afs(&(0x7f00000006c0)='afs\x00', &(0x7f0000000700)='./file0\x00', 0x5, 0x1, &(0x7f0000000800)=[{&(0x7f0000000740)="1ed938c91af4fa9d2f6480a31b74117b2ab119bdb41e8fde70d77b862bc495c71b2631f219dd1f5a21407d1c2491927207f5c589aab86238edf1a1c26c9edb3d1939104f1acd839a155e39a2261ba0298162e9361fde39876cdf6f78c7eeaa7e5b4003ebff6d36b432", 0x69}], 0x800000, &(0x7f0000000840)={[{@flock_strict='flock=strict'}, {@autocell='autocell'}, {@flock_local='flock=local'}, {@dyn='dyn'}, {@dyn='dyn'}, {@dyn='dyn'}, {@autocell='autocell'}, {@flock_local='flock=local'}], [{@smackfsdef={'smackfsdef', 0x3d, '+'}}]}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000a40)='l2tp\x00', r2) [ 486.139338][ T4818] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 486.149333][ T37] audit: type=1804 audit(1618682197.649:519): pid=17836 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/165/file0/bus" dev="ramfs" ino=47038 res=1 errno=0 [ 486.311533][T17866] kAFS: unparsable volume name [ 486.499884][ T4818] usb 2-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=ce.99 [ 486.511265][ T4818] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.522903][ T4818] usb 2-1: config 0 descriptor?? [ 486.561353][ T4818] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 488.429035][ T4818] gspca_stv06xx: I2C: Read error writing address: -71 [ 488.437108][ T4818] usb 2-1: USB disconnect, device number 79 17:56:40 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x40, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000140)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="201179000000790e91c778eee281205fe5a796a30199906c3b65d756cfce2965c03d1874a1921f21191850263501f7ec83267fc8666d5c3bbf82786ef75b44b3216b62ad99291694dac32641ec02050e4d7ca7d9fe925dc7a2f35eff252d8ebd73d083e023068ee5f465398322b2c03d86ab2a6ebec568a013aa4b8456f7e4"], &(0x7f00000000c0)={0x0, 0x3, 0x58, @string={0x58, 0x3, "23338a983878ab91423fc18c82577ac14263492cd336b5e9e9c8986709127ffaaa291b884a3918ee1e026044a53fafaeb6730d578bf675387d35ec9a2c3bcb572850f02a4f662810d884b3b8d1c7e6e81d38bef44578"}}}, &(0x7f0000000440)={0x34, &(0x7f0000000180)={0x40, 0x15, 0x7f, "4893800f6206ae753bcdfaf908f35f297d154182bedcdd74767ecb5583942f4a1d32e262538b094f8e9d8686ad8236d68092aec10e244c4b5e0ccff9108709ea3ac6556dabc87d18b112df13e6ce5d03dfd0d8f37e6759e7cbb6ed906868c4679079b5d86c313590226375f1680b5b996313b5437d50dffc2b52469e6a3680"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0xe0}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000002c0)={0x20, 0x0, 0xf6, {0xf4, "93b4c18e929213f997b6b9c946cd309a860b21242da6837b3d4fa7defdb288f8a6581b20a789697ca88846a1306d76183443543a972df58ff995e451ca76226784ffb2f475ddebd0b97fd069a032f397ff3baef0dcea4258349fcd143a73092f9b9987da83b43a9781420dc3b6e21ce5047b502837afd203ac2c0e3746d326e4f9e1f711c4313a00372f8cb633d13a423eec329c90fe64918760c2f6d1ee298acdc952f51d0e5ca1336dc7e8bb1c143bd59d21aa9f78a758aca424674196690c60fa0ee6128edd8037873c06cd6cc0668b4eef08f1bd019c624e22a60ea06a5d32d3a4ba4b2043e50837d40bc4b4eeb82b2b8ba4"}}, &(0x7f00000003c0)={0x20, 0x1, 0x1, 0x8}, &(0x7f0000000400)={0x20, 0x0, 0x1}}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 17:56:40 executing program 5: fanotify_mark(0xffffffffffffffff, 0xd, 0x0, 0xffffffffffffff9c, 0x0) 17:56:40 executing program 4: clone3(&(0x7f00000011c0)={0x2900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000001180)=[0xffffffffffffffff], 0x1}, 0x58) 17:56:40 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) socket$alg(0x26, 0x5, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) mount$9p_fd(0x0, &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, 0x0) 17:56:40 executing program 3: sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000003c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00', 0x0, 0x8}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(0x0, r0) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0}, 0x0) syz_mount_image$afs(&(0x7f00000006c0)='afs\x00', &(0x7f0000000700)='./file0\x00', 0x5, 0x1, &(0x7f0000000800)=[{&(0x7f0000000740)="1ed938c91af4fa9d2f6480a31b74117b2ab119bdb41e8fde70d77b862bc495c71b2631f219dd1f5a21407d1c2491927207f5c589aab86238edf1a1c26c9edb3d1939104f1acd839a155e39a2261ba0298162e9361fde39876cdf6f78c7eeaa7e5b4003ebff6d36b432548da62e0fb5f0b75ea62c46bc0b88f89e33312101007cd8e681b5ca84033779cd67caa21e", 0x8e, 0x23}], 0x800000, &(0x7f0000000840)={[{@flock_strict='flock=strict'}, {@autocell='autocell'}, {@flock_local='flock=local'}, {@dyn='dyn'}, {@dyn='dyn'}]}) 17:56:40 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x208200) getpid() sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) getpid() read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) 17:56:40 executing program 5: pselect6(0x0, 0x0, 0x0, &(0x7f0000000440), &(0x7f0000000480)={0x0, 0x3938700}, 0x0) 17:56:40 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) socket$alg(0x26, 0x5, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) mount$9p_fd(0x0, &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, 0x0) 17:56:40 executing program 4: openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/dlm_plock\x00', 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000080), 0x0, 0x101}], 0x801, &(0x7f0000000180)={[{@flush_merge='flush_merge'}, {@noflush_merge='noflush_merge'}], [{@smackfsfloor={'smackfsfloor', 0x3d, '\x00]^'}}, {@smackfstransmute={'smackfstransmute'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '/dev/dlm_plock\x00'}}]}) [ 489.037888][T17896] kAFS: unparsable volume name [ 489.056342][ T37] audit: type=1804 audit(1618682200.559:520): pid=17895 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/166/file0/bus" dev="ramfs" ino=47086 res=1 errno=0 [ 489.137504][T17901] kAFS: unparsable volume name 17:56:40 executing program 3: syz_mount_image$afs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000800), 0x0, 0x0) [ 489.163064][ T37] audit: type=1804 audit(1618682200.669:521): pid=17909 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/166/file0/bus" dev="ramfs" ino=47086 res=1 errno=0 17:56:40 executing program 3: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002240)={0x77359400}) [ 489.235575][ T37] audit: type=1804 audit(1618682200.669:522): pid=17909 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/166/file0/bus" dev="ramfs" ino=47086 res=1 errno=0 [ 489.273972][T17913] loop4: detected capacity change from 0 to 1 [ 489.316170][T17895] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 489.345535][T17913] F2FS-fs (loop4): Unable to read 1th superblock 17:56:40 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) socket$alg(0x26, 0x5, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) mount$9p_fd(0x0, &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, 0x0) [ 489.426395][T17913] F2FS-fs (loop4): Unable to read 2th superblock [ 489.438966][ T9682] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 489.859105][ T9682] usb 2-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=ce.99 [ 489.868185][ T9682] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.880271][ T9682] usb 2-1: config 0 descriptor?? [ 489.920604][ T9682] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 491.768396][ T9682] gspca_stv06xx: I2C: Read error writing address: -71 [ 491.777034][ T9682] usb 2-1: USB disconnect, device number 80 17:56:43 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x40, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000140)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="201179000000790e91c778eee281205fe5a796a30199906c3b65d756cfce2965c03d1874a1921f21191850263501f7ec83267fc8666d5c3bbf82786ef75b44b3216b62ad99291694dac32641ec02050e4d7ca7d9fe925dc7a2f35eff252d8ebd73d083e023068ee5f465398322b2c03d86ab2a6ebec568a013aa4b8456f7e4"], &(0x7f00000000c0)={0x0, 0x3, 0x58, @string={0x58, 0x3, "23338a983878ab91423fc18c82577ac14263492cd336b5e9e9c8986709127ffaaa291b884a3918ee1e026044a53fafaeb6730d578bf675387d35ec9a2c3bcb572850f02a4f662810d884b3b8d1c7e6e81d38bef44578"}}}, &(0x7f0000000440)={0x34, &(0x7f0000000180)={0x40, 0x15, 0x7f, "4893800f6206ae753bcdfaf908f35f297d154182bedcdd74767ecb5583942f4a1d32e262538b094f8e9d8686ad8236d68092aec10e244c4b5e0ccff9108709ea3ac6556dabc87d18b112df13e6ce5d03dfd0d8f37e6759e7cbb6ed906868c4679079b5d86c313590226375f1680b5b996313b5437d50dffc2b52469e6a3680"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0xe0}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000002c0)={0x20, 0x0, 0xf6, {0xf4, "93b4c18e929213f997b6b9c946cd309a860b21242da6837b3d4fa7defdb288f8a6581b20a789697ca88846a1306d76183443543a972df58ff995e451ca76226784ffb2f475ddebd0b97fd069a032f397ff3baef0dcea4258349fcd143a73092f9b9987da83b43a9781420dc3b6e21ce5047b502837afd203ac2c0e3746d326e4f9e1f711c4313a00372f8cb633d13a423eec329c90fe64918760c2f6d1ee298acdc952f51d0e5ca1336dc7e8bb1c143bd59d21aa9f78a758aca424674196690c60fa0ee6128edd8037873c06cd6cc0668b4eef08f1bd019c624e22a60ea06a5d32d3a4ba4b2043e50837d40bc4b4eeb82b2b8ba4"}}, &(0x7f00000003c0)={0x20, 0x1, 0x1, 0x8}, &(0x7f0000000400)={0x20, 0x0, 0x1}}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 17:56:43 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcsu\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, 0x0) 17:56:43 executing program 3: syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) 17:56:43 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x208200) getpid() sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) getpid() read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) 17:56:43 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) socket$alg(0x26, 0x5, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) mount$9p_fd(0x0, &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r1}}) 17:56:43 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff}) connect$nfc_llcp(r0, 0x0, 0x0) 17:56:43 executing program 4: pselect6(0x40, &(0x7f00000003c0), 0x0, 0x0, &(0x7f0000000480)={0x0, 0x3938700}, 0x0) 17:56:43 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) socket$alg(0x26, 0x5, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) mount$9p_fd(0x0, &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r1}}) [ 492.334414][ T37] audit: type=1804 audit(1618682203.840:523): pid=17961 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/167/file0/bus" dev="ramfs" ino=47821 res=1 errno=0 [ 492.371642][T17959] 9pnet: Insufficient options for proto=fd 17:56:43 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000001000)={0x0, 0x1010000, 0x800}, 0x20) 17:56:43 executing program 5: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dsp1\x00', 0x0, 0x0) read$dsp(r0, &(0x7f00000002c0)=""/18, 0x12) [ 492.470153][ T37] audit: type=1804 audit(1618682203.950:524): pid=17968 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/167/file0/bus" dev="ramfs" ino=47821 res=1 errno=0 17:56:44 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000011c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x4}]}]}, {0x0, [0x0, 0x0, 0x0]}}, &(0x7f00000001c0)=""/4096, 0x35, 0x1000, 0x1}, 0x20) 17:56:44 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) socket$alg(0x26, 0x5, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) mount$9p_fd(0x0, &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r1}}) [ 492.523549][T17975] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 492.544792][T17977] 9pnet: Insufficient options for proto=fd [ 492.613143][ T37] audit: type=1804 audit(1618682203.950:525): pid=17968 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/167/file0/bus" dev="ramfs" ino=47821 res=1 errno=0 [ 492.646386][T17983] 9pnet: Insufficient options for proto=fd [ 492.668293][ T4818] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 493.038649][ T4818] usb 2-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=ce.99 [ 493.047902][ T4818] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.075101][ T4818] usb 2-1: config 0 descriptor?? [ 493.131087][ T4818] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 494.998028][ T4818] gspca_stv06xx: I2C: Read error writing address: -71 [ 495.012035][ T4818] usb 2-1: USB disconnect, device number 81 17:56:47 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x40, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000180)={0x40, 0x15, 0x7f, "4893800f6206ae753bcdfaf908f35f297d154182bedcdd74767ecb5583942f4a1d32e262538b094f8e9d8686ad8236d68092aec10e244c4b5e0ccff9108709ea3ac6556dabc87d18b112df13e6ce5d03dfd0d8f37e6759e7cbb6ed906868c4679079b5d86c313590226375f1680b5b996313b5437d50dffc2b52469e6a3680"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0xe0}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000002c0)={0x20, 0x0, 0xf6, {0xf4, "93b4c18e929213f997b6b9c946cd309a860b21242da6837b3d4fa7defdb288f8a6581b20a789697ca88846a1306d76183443543a972df58ff995e451ca76226784ffb2f475ddebd0b97fd069a032f397ff3baef0dcea4258349fcd143a73092f9b9987da83b43a9781420dc3b6e21ce5047b502837afd203ac2c0e3746d326e4f9e1f711c4313a00372f8cb633d13a423eec329c90fe64918760c2f6d1ee298acdc952f51d0e5ca1336dc7e8bb1c143bd59d21aa9f78a758aca424674196690c60fa0ee6128edd8037873c06cd6cc0668b4eef08f1bd019c624e22a60ea06a5d32d3a4ba4b2043e50837d40bc4b4eeb82b2b8ba4"}}, &(0x7f00000003c0)={0x20, 0x1, 0x1, 0x8}, &(0x7f0000000400)={0x20, 0x0, 0x1}}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 17:56:47 executing program 4: io_uring_setup(0x3dde, &(0x7f0000000440)={0x0, 0x0, 0x2}) 17:56:47 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) socket$alg(0x26, 0x5, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) mount$9p_fd(0x0, &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}}) 17:56:47 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x208200) getpid() sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) getpid() read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) 17:56:47 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000011c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x4}]}]}, {0x0, [0x0, 0x0, 0x0]}}, &(0x7f00000001c0)=""/4096, 0x35, 0x1000, 0x1}, 0x20) 17:56:47 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = eventfd(0xcde) write$eventfd(r0, &(0x7f0000000000)=0xffffffffffffffe1, 0x8) read$eventfd(r0, &(0x7f0000000100), 0x8) 17:56:47 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) socket$alg(0x26, 0x5, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) mount$9p_fd(0x0, &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}}) [ 495.538878][T18010] 9pnet: Insufficient options for proto=fd 17:56:47 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/mice\x00', 0x220000) accept4$bt_l2cap(r0, 0x0, 0x0, 0x0) 17:56:47 executing program 4: clone3(&(0x7f0000000440)={0x2004000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:56:47 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) socket$alg(0x26, 0x5, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) mount$9p_fd(0x0, &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}}) [ 495.608337][ T37] audit: type=1804 audit(1618682207.120:526): pid=18022 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/168/file0/bus" dev="ramfs" ino=47868 res=1 errno=0 [ 495.648116][T18023] 9pnet: Insufficient options for proto=fd 17:56:47 executing program 3: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x4, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x20, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x0, 0x7f, 0x2}}}}}]}}]}}, 0x0) 17:56:47 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) [ 495.779164][T18038] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 495.808829][ T37] audit: type=1804 audit(1618682207.210:527): pid=18032 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/168/file0/bus" dev="ramfs" ino=47868 res=1 errno=0 [ 495.821352][T18041] 9pnet: Insufficient options for proto=fd [ 495.866499][ T37] audit: type=1804 audit(1618682207.220:528): pid=18032 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/168/file0/bus" dev="ramfs" ino=47868 res=1 errno=0 [ 495.957837][ T9506] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 496.117749][ T4818] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 496.327949][ T9506] usb 2-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=ce.99 [ 496.337015][ T9506] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.354958][ T9506] usb 2-1: config 0 descriptor?? [ 496.361758][ T4818] usb 4-1: Using ep0 maxpacket: 8 [ 496.420289][ T9506] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 496.478012][ T4818] usb 4-1: config 1 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 496.491242][ T4818] usb 4-1: config 1 interface 0 has no altsetting 0 [ 496.657993][ T4818] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 496.667089][ T4818] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.686062][ T4818] usb 4-1: Product: syz [ 496.691622][ T4818] usb 4-1: Manufacturer: syz [ 496.696315][ T4818] usb 4-1: SerialNumber: syz [ 496.991255][ T4818] usb 4-1: USB disconnect, device number 13 [ 497.727723][ T9682] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 497.987474][ T9682] usb 4-1: Using ep0 maxpacket: 8 [ 498.117634][ T9682] usb 4-1: config 1 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 498.130693][ T9682] usb 4-1: config 1 interface 0 has no altsetting 0 [ 498.327665][ T9682] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 498.336892][ T9682] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.346874][ T9682] usb 4-1: Product: syz [ 498.352226][ T9682] usb 4-1: Manufacturer: syz [ 498.356832][ T9682] usb 4-1: SerialNumber: syz [ 498.518791][ T9506] usb 2-1: USB disconnect, device number 82 [ 498.697526][ T9682] usb 4-1: USB disconnect, device number 14 17:56:50 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x40, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 17:56:50 executing program 0: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/dlm_plock\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x1, 0x10, r0, 0x0) 17:56:50 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x208200) r1 = getpid() sched_setscheduler(r1, 0x0, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) getpid() read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) 17:56:50 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000340)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 17:56:50 executing program 4: r0 = getpgid(0x0) process_vm_readv(r0, &(0x7f0000005900)=[{&(0x7f00000058c0)=""/44, 0x2c}], 0x1, &(0x7f0000005f40)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 17:56:50 executing program 3: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x4, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x20, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x0, 0x7f, 0x2}}}}}]}}]}}, 0x0) 17:56:50 executing program 0: process_vm_writev(0x0, 0x0, 0x700, 0x0, 0x0, 0x0) [ 499.121972][ T37] audit: type=1804 audit(1618682210.631:529): pid=18109 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/169/file0/bus" dev="ramfs" ino=47929 res=1 errno=0 17:56:50 executing program 4: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000040)='./file0\x00', 0x4, 0x0, &(0x7f0000000140), 0x801, &(0x7f0000000180)) 17:56:50 executing program 0: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmmsg$nfc_llcp(r0, &(0x7f00000038c0)=[{&(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "bf334da0ee6d5077283f786431632146b78da0136e2a9be8408ecf6127c186293d7e4133ed685719ca7c0e09fa1aad8811e239874e2680a17b59580b7594e7"}, 0x60, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2, &(0x7f0000000180)={0x10}, 0x10}], 0x1, 0x0) 17:56:50 executing program 5: openat$mixer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mixer\x00', 0x701080, 0x0) [ 499.271625][ T37] audit: type=1804 audit(1618682210.701:530): pid=18109 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/169/file0/bus" dev="ramfs" ino=47929 res=1 errno=0 [ 499.353734][ T37] audit: type=1804 audit(1618682210.721:531): pid=18109 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/169/file0/bus" dev="ramfs" ino=47929 res=1 errno=0 [ 499.377456][ T36] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 499.386997][T18121] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 499.457489][ T9475] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 499.476665][T18123] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) 17:56:51 executing program 0: openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x42c40, 0x0) 17:56:51 executing program 5: clone3(&(0x7f0000000600)={0x60a60000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 499.514155][T18123] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 499.522889][T18123] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 499.530798][T18123] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 499.593326][T18123] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 499.601205][T18123] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 499.612416][T18123] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 499.620309][T18123] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 499.637312][ T36] usb 4-1: Using ep0 maxpacket: 8 [ 499.641649][T18139] IPVS: ftp: loaded support on port[0] = 21 [ 499.759254][ T36] usb 4-1: config 1 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 499.765369][T18139] IPVS: ftp: loaded support on port[0] = 21 [ 499.823590][ T9475] usb 2-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=ce.99 [ 499.837799][ T36] usb 4-1: config 1 interface 0 has no altsetting 0 [ 499.877969][ T9475] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.927677][ T9475] usb 2-1: config 0 descriptor?? [ 499.985646][ T9475] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 500.037487][ T36] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 500.057167][ T36] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.065200][ T36] usb 4-1: Product: syz [ 500.087280][ T36] usb 4-1: Manufacturer: syz [ 500.091919][ T36] usb 4-1: SerialNumber: syz [ 500.380406][ T36] usb 4-1: USB disconnect, device number 15 [ 501.298146][ T3219] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.304470][ T3219] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.069315][ T9475] usb 2-1: USB disconnect, device number 83 17:56:54 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x40, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 17:56:54 executing program 4: setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) 17:56:54 executing program 0: openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x4000, 0x0) 17:56:54 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x208200) r1 = getpid() sched_setscheduler(r1, 0x0, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) getpid() read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) 17:56:54 executing program 5: perf_event_open$cgroup(&(0x7f0000000200)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 17:56:54 executing program 3: r0 = getpgid(0x0) process_vm_readv(r0, &(0x7f0000000300)=[{&(0x7f0000000240)=""/140, 0x8c}], 0x1, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/187, 0xbb}], 0x1, 0x0) clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:56:54 executing program 0: write$usbip_server(0xffffffffffffffff, 0x0, 0x0) 17:56:54 executing program 4: openat$mixer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mixer\x00', 0x0, 0x0) [ 502.691021][ T37] audit: type=1804 audit(1618682214.201:532): pid=18222 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/170/file0/bus" dev="ramfs" ino=48029 res=1 errno=0 17:56:54 executing program 3: r0 = syz_io_uring_setup(0x2912, &(0x7f0000000240)={0x0, 0x6516}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) 17:56:54 executing program 5: openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0x80001, 0x0) [ 502.804579][T18232] overlayfs: unrecognized mount option "context=staff_u" or missing value 17:56:54 executing program 4: syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00', 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00', 0x0, 0x8}, 0x10) bpf$ITER_CREATE(0x21, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) syz_mount_image$afs(&(0x7f00000006c0)='afs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x1, &(0x7f0000000800)=[{&(0x7f0000000740)="1ed938c91af4fa9d2f6480a31b74117b2ab119bdb41e8fde70d77b862bc495c71b2631f219dd1f5a21407d1c2491927207f5c589aab86238edf1a1c26c9edb3d1939104f1acd839a155e39a2261ba0298162e9361fde39876cdf6f78c7eeaa7e5b4003ebff6d36b432548da62e0fb5f0b75ea6", 0x73, 0x23}], 0x800000, &(0x7f0000000840)={[{@autocell='autocell'}, {@dyn='dyn'}, {@dyn='dyn'}, {@dyn='dyn'}, {@autocell='autocell'}, {@dyn='dyn'}]}) 17:56:54 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x208200) r1 = getpid() sched_setscheduler(r1, 0x0, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) getpid() read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) [ 502.852055][ T37] audit: type=1804 audit(1618682214.311:533): pid=18222 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/170/file0/bus" dev="ramfs" ino=48029 res=1 errno=0 [ 502.999531][T18244] kAFS: unparsable volume name [ 503.017245][ T37] audit: type=1804 audit(1618682214.531:534): pid=18247 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/171/file0/bus" dev="ramfs" ino=48460 res=1 errno=0 [ 503.029090][ T9475] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 503.049964][ T37] audit: type=1804 audit(1618682214.531:535): pid=18247 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/171/file0/bus" dev="ramfs" ino=48460 res=1 errno=0 [ 503.075431][ T37] audit: type=1804 audit(1618682214.561:536): pid=18247 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/171/file0/bus" dev="ramfs" ino=48460 res=1 errno=0 [ 503.153173][T18248] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 503.165329][T18252] kAFS: unparsable volume name [ 503.507208][ T9475] usb 2-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=ce.99 [ 503.543853][ T9475] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.600326][ T9475] usb 2-1: config 0 descriptor?? [ 503.668875][ T9475] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 505.546545][ T9475] gspca_stv06xx: I2C: Read error writing address: -71 [ 505.555621][ T9475] usb 2-1: USB disconnect, device number 84 17:56:57 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x40, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 17:56:57 executing program 0: ioprio_set$uid(0x3, 0xee00, 0x4004) 17:56:57 executing program 3: pselect6(0x0, 0x0, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)={0x0, 0x3938700}, &(0x7f0000000500)={&(0x7f00000004c0)={[0x9]}, 0x8}) 17:56:57 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000003c0)='batadv\x00', r0) 17:56:57 executing program 4: syz_mount_image$afs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000000800), 0x0, 0x0) 17:56:57 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x208200) r1 = getpid() sched_setscheduler(r1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) getpid() read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) 17:56:57 executing program 0: r0 = getpgid(0x0) process_vm_readv(r0, &(0x7f0000000300)=[{&(0x7f0000000240)=""/140, 0x8c}], 0x1, &(0x7f00000005c0)=[{0x0}, {&(0x7f0000000400)=""/196, 0xc4}], 0x2, 0x0) 17:56:57 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000040)={0x0, [[0xd]]}) [ 506.212793][ T37] audit: type=1804 audit(1618682217.722:537): pid=18285 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/172/file0/bus" dev="ramfs" ino=48485 res=1 errno=0 17:56:57 executing program 0: perf_event_open$cgroup(&(0x7f00000008c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 506.269703][ T37] audit: type=1804 audit(1618682217.782:538): pid=18295 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/172/file0/bus" dev="ramfs" ino=48485 res=1 errno=0 17:56:57 executing program 5: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x193f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:56:57 executing program 3: syz_usb_connect(0x0, 0x41, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xfb, 0x66, 0x60, 0x20, 0x19d2, 0x178, 0xd5be, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2f, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x3, 0x0, 0x2, 0xf4, 0x75, 0xb1, 0x0, [@generic={0x2}], [{{0x9, 0x5, 0xf}}, {{0x9, 0x5, 0xc}}]}}, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x6, 0x33, 0xce}}]}}]}}, 0x0) 17:56:57 executing program 4: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 506.392067][T18295] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 506.451514][ T37] audit: type=1804 audit(1618682217.822:539): pid=18295 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/172/file0/bus" dev="ramfs" ino=48485 res=1 errno=0 [ 506.517424][ T4818] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 506.904371][ T4818] usb 2-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=ce.99 [ 506.921465][ T4818] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.931459][ T3620] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 506.977159][ T4818] usb 2-1: config 0 descriptor?? [ 507.028797][ T4818] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 507.196335][ T3620] usb 4-1: Using ep0 maxpacket: 32 [ 507.336446][ T3620] usb 4-1: config 0 has an invalid interface number: 3 but max is 1 [ 507.344483][ T3620] usb 4-1: config 0 has no interface number 1 [ 507.350802][ T3620] usb 4-1: config 0 interface 3 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 507.360651][ T3620] usb 4-1: config 0 interface 3 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 507.556519][ T3620] usb 4-1: New USB device found, idVendor=19d2, idProduct=0178, bcdDevice=d5.be [ 507.565600][ T3620] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.575004][ T3620] usb 4-1: Product: syz [ 507.580080][ T3620] usb 4-1: Manufacturer: syz [ 507.584708][ T3620] usb 4-1: SerialNumber: syz [ 507.593202][ T3620] usb 4-1: config 0 descriptor?? [ 507.840013][ T3620] usb 4-1: USB disconnect, device number 16 [ 508.616051][ T9475] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 508.856189][ T4818] gspca_stv06xx: I2C: Read error writing address: -71 [ 508.862884][ T9475] usb 4-1: Using ep0 maxpacket: 32 [ 508.867391][ T4818] usb 2-1: USB disconnect, device number 85 [ 508.986098][ T9475] usb 4-1: config 0 has an invalid interface number: 3 but max is 1 [ 508.994274][ T9475] usb 4-1: config 0 has no interface number 1 [ 509.002917][ T9475] usb 4-1: config 0 interface 3 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 509.013565][ T9475] usb 4-1: config 0 interface 3 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 509.176102][ T9475] usb 4-1: New USB device found, idVendor=19d2, idProduct=0178, bcdDevice=d5.be [ 509.185388][ T9475] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.193674][ T9475] usb 4-1: Product: syz [ 509.198003][ T9475] usb 4-1: Manufacturer: syz [ 509.202652][ T9475] usb 4-1: SerialNumber: syz [ 509.209734][ T9475] usb 4-1: config 0 descriptor?? 17:57:00 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x40, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 17:57:00 executing program 5: request_key(&(0x7f00000001c0)='encrypted\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0) keyctl$search(0xa, 0x0, &(0x7f0000000340)='blacklist\x00', 0x0, 0x0) write$UHID_INPUT2(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000540)) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_opts(r0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r1, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x14}, 0x14}}, 0x0) 17:57:00 executing program 0: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/dlm_plock\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 17:57:00 executing program 4: perf_event_open$cgroup(&(0x7f00000008c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xae}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x0) 17:57:00 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x208200) r1 = getpid() sched_setscheduler(r1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) getpid() read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) 17:57:01 executing program 4: syz_mount_image$erofs(0x0, 0x0, 0x0, 0x2, &(0x7f0000002480)=[{&(0x7f00000022c0)="87", 0x1}, {&(0x7f0000002400)='?', 0x1, 0x80000001}], 0x0, 0x0) [ 509.456520][ T9475] usb 4-1: USB disconnect, device number 17 17:57:01 executing program 3: perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 17:57:01 executing program 0: openat$vcsu(0xffffffffffffff9c, &(0x7f0000002540)='/dev/vcsu\x00', 0x4000, 0x0) [ 509.519212][ T37] audit: type=1804 audit(1618682221.032:540): pid=18358 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/173/file0/bus" dev="ramfs" ino=49182 res=1 errno=0 17:57:01 executing program 5: ioctl$SOUND_MIXER_READ_DEVMASK(0xffffffffffffffff, 0x80044dfe, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mixer\x00', 0x701080, 0x0) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dsp1\x00', 0x40, 0x0) read$dsp(r0, &(0x7f00000002c0)=""/18, 0x12) socket$isdn_base(0x22, 0x3, 0x0) [ 509.633414][T18373] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 509.664298][T18375] loop4: detected capacity change from 0 to 264192 17:57:01 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x208200) r1 = getpid() sched_setscheduler(r1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) getpid() read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) [ 509.686304][ T37] audit: type=1804 audit(1618682221.152:541): pid=18358 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/173/file0/bus" dev="ramfs" ino=49182 res=1 errno=0 17:57:01 executing program 3: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x40, 0x0) 17:57:01 executing program 0: openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm_plock\x00', 0x0, 0x0) [ 509.786262][T18375] loop4: detected capacity change from 0 to 264192 [ 509.836930][ T4818] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 509.855304][ T37] audit: type=1804 audit(1618682221.362:542): pid=18391 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/174/file0/bus" dev="ramfs" ino=48569 res=1 errno=0 [ 509.963189][T18396] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 509.982578][ T37] audit: type=1804 audit(1618682221.382:543): pid=18391 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/174/file0/bus" dev="ramfs" ino=48569 res=1 errno=0 [ 510.090926][ T37] audit: type=1804 audit(1618682221.382:544): pid=18391 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/174/file0/bus" dev="ramfs" ino=48569 res=1 errno=0 [ 510.297070][ T4818] usb 2-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=ce.99 [ 510.317661][ T4818] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.372420][ T4818] usb 2-1: config 0 descriptor?? [ 510.438362][ T4818] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 512.315651][ T4818] gspca_stv06xx: I2C: Read error writing address: -71 [ 512.323993][ T4818] usb 2-1: USB disconnect, device number 86 17:57:04 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x40, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 17:57:04 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f0000000400), &(0x7f0000000080)=0x80) 17:57:04 executing program 3: syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x400) 17:57:04 executing program 0: socket$isdn(0x22, 0x3, 0x34) 17:57:04 executing program 5: ioctl$SOUND_MIXER_READ_DEVMASK(0xffffffffffffffff, 0x80044dfe, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mixer\x00', 0x701080, 0x0) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dsp1\x00', 0x40, 0x0) read$dsp(r0, &(0x7f00000002c0)=""/18, 0x12) socket$isdn_base(0x22, 0x3, 0x0) 17:57:04 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x208200) r1 = getpid() sched_setscheduler(r1, 0x0, &(0x7f0000000380)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) getpid() read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) 17:57:04 executing program 3: perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 512.911227][ T37] audit: type=1804 audit(1618682224.423:545): pid=18424 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/175/file0/bus" dev="ramfs" ino=48602 res=1 errno=0 17:57:04 executing program 4: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) pread64(r1, 0x0, 0xfeffffff, 0x0) 17:57:04 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 512.980669][T18430] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 513.044084][ T37] audit: type=1804 audit(1618682224.423:546): pid=18424 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/175/file0/bus" dev="ramfs" ino=48602 res=1 errno=0 17:57:04 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x208200) r1 = getpid() sched_setscheduler(r1, 0x0, &(0x7f0000000380)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) getpid() read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) 17:57:04 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x1f7f) 17:57:04 executing program 0: ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/seq\x00', 0x0) [ 513.145919][ T37] audit: type=1804 audit(1618682224.423:547): pid=18424 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/175/file0/bus" dev="ramfs" ino=48602 res=1 errno=0 [ 513.235846][ T3620] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 513.312862][ T37] audit: type=1804 audit(1618682224.823:548): pid=18447 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/176/file0/bus" dev="ramfs" ino=49251 res=1 errno=0 [ 513.394015][T18451] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 513.409833][ T37] audit: type=1804 audit(1618682224.823:549): pid=18447 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/176/file0/bus" dev="ramfs" ino=49251 res=1 errno=0 [ 513.435693][ T37] audit: type=1804 audit(1618682224.823:550): pid=18447 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/176/file0/bus" dev="ramfs" ino=49251 res=1 errno=0 [ 513.595845][ T3620] usb 2-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=ce.99 [ 513.604932][ T3620] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.621291][ T3620] usb 2-1: config 0 descriptor?? [ 513.667773][ T3620] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 515.545470][ T3620] gspca_stv06xx: I2C: Read error writing address: -71 [ 515.554149][ T3620] usb 2-1: USB disconnect, device number 87 17:57:07 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x40, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 17:57:07 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000040)={0x0, [[0xd], [0x6]]}) 17:57:07 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x208200) r1 = getpid() sched_setscheduler(r1, 0x0, &(0x7f0000000380)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) getpid() read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) 17:57:07 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000011c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union={0x8, 0x0, 0x0, 0x5, 0x1}]}}, &(0x7f00000001c0)=""/4096, 0x26, 0x1000, 0x1}, 0x20) 17:57:07 executing program 5: process_vm_readv(0x0, &(0x7f0000000300)=[{&(0x7f0000000240)=""/140, 0x8c}], 0x1, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/187, 0xbb}, {&(0x7f0000000400)=""/196, 0xc4}, {&(0x7f0000000500)=""/1, 0x1}, {&(0x7f0000000540)=""/12, 0xfffffffffffffe1b}], 0x4, 0x0) 17:57:07 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000011c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, &(0x7f00000001c0)=""/4096, 0x26, 0x1000, 0x1}, 0x20) [ 516.173621][ T37] audit: type=1804 audit(1618682227.683:551): pid=18480 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/177/file0/bus" dev="ramfs" ino=48658 res=1 errno=0 17:57:07 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) accept4$bt_l2cap(r0, 0x0, 0x0, 0xc1800) 17:57:07 executing program 5: clone3(&(0x7f00000002c0)={0x8000, 0x0, 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:57:07 executing program 3: ioprio_set$pid(0x0, 0xffffffffffffffff, 0x3) 17:57:07 executing program 4: mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x30, 0xffffffffffffffff, 0x0) [ 516.274646][T18487] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 516.312362][ T37] audit: type=1804 audit(1618682227.713:552): pid=18480 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/177/file0/bus" dev="ramfs" ino=48658 res=1 errno=0 17:57:07 executing program 0: openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000003fc0)='/dev/dlm_plock\x00', 0x610000, 0x0) 17:57:07 executing program 4: pselect6(0x40, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), 0x0) [ 516.463813][ T37] audit: type=1804 audit(1618682227.723:553): pid=18480 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/177/file0/bus" dev="ramfs" ino=48658 res=1 errno=0 [ 516.525241][ T3620] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 516.895143][ T3620] usb 2-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=ce.99 [ 516.904373][ T3620] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.920618][ T3620] usb 2-1: config 0 descriptor?? [ 516.967201][ T3620] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 518.844848][ T3620] gspca_stv06xx: I2C: Read error writing address: -71 [ 518.856017][ T3620] usb 2-1: USB disconnect, device number 88 17:57:10 executing program 3: clone3(&(0x7f0000000240)={0x100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:57:10 executing program 5: syz_mount_image$afs(&(0x7f00000006c0)='afs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={[{@flock_strict='flock=strict'}, {@dyn='dyn'}]}) 17:57:10 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x208200) r1 = getpid() sched_setscheduler(r1, 0x0, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) getpid() read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) 17:57:10 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000011c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x4, 0x1, 0x8}]}]}, {0x0, [0x0, 0x0, 0x0, 0x41]}}, &(0x7f00000001c0)=""/4096, 0x36, 0x1000, 0x1}, 0x20) 17:57:10 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x40, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 17:57:10 executing program 0: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00', 0x0, 0x8}, 0x10) syz_mount_image$afs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x800000, 0x0) 17:57:10 executing program 3: pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f00000000c0)={0x6}, 0x0, 0x0) [ 519.425226][ T37] audit: type=1804 audit(1618682230.943:554): pid=18526 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/178/file0/bus" dev="ramfs" ino=48703 res=1 errno=0 17:57:11 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000011c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x1}]}]}}, &(0x7f00000001c0)=""/4096, 0x32, 0x1000, 0x1}, 0x20) 17:57:11 executing program 0: syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) 17:57:11 executing program 5: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 519.555279][T18538] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 519.563337][ T37] audit: type=1804 audit(1618682230.973:555): pid=18526 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/178/file0/bus" dev="ramfs" ino=48703 res=1 errno=0 17:57:11 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x208200) r1 = getpid() sched_setscheduler(r1, 0x0, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) getpid() read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) 17:57:11 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) [ 519.706010][ T37] audit: type=1804 audit(1618682230.973:556): pid=18526 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/178/file0/bus" dev="ramfs" ino=48703 res=1 errno=0 17:57:11 executing program 0: r0 = getpgid(0x0) process_vm_readv(r0, &(0x7f00000011c0)=[{0x0}, {&(0x7f0000000080)=""/181, 0xb5}], 0x2, &(0x7f0000001380)=[{&(0x7f0000001240)=""/197, 0xc5}], 0x1, 0x0) [ 519.834902][ T36] usb 2-1: new high-speed USB device number 89 using dummy_hcd 17:57:11 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) connect(r0, &(0x7f0000000480)=@generic={0x0, "5314b7934684ce566b26a1aa0281c14e673f15f5ae8d9e0456d5e1420635d3b6665b5fcc66105f7aa35e7ba2133e640f45cecc5957646adf3b0531450fbfb2a59777d7aeb14ba2e288f060f108b1b5eae522262bf2ddae0526852540b05228a980b14ff8168e9cf8005fef755ad4a1a208f6446fa4fab16f7bf1a4c9410b"}, 0x80) 17:57:11 executing program 4: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000003fc0)='/dev/dlm_plock\x00', 0x200000, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) [ 519.901423][ T37] audit: type=1804 audit(1618682231.414:557): pid=18559 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/179/file0/bus" dev="ramfs" ino=49352 res=1 errno=0 [ 519.974228][ T37] audit: type=1804 audit(1618682231.454:558): pid=18559 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/179/file0/bus" dev="ramfs" ino=49352 res=1 errno=0 [ 520.027942][T18565] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 520.037036][ T9475] usb 6-1: new high-speed USB device number 3 using dummy_hcd 17:57:11 executing program 4: process_vm_readv(0x0, &(0x7f0000005900)=[{&(0x7f00000058c0)=""/44, 0x2c}], 0x1, &(0x7f0000005f40)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) [ 520.057715][ T37] audit: type=1804 audit(1618682231.454:559): pid=18559 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/179/file0/bus" dev="ramfs" ino=49352 res=1 errno=0 [ 520.265029][ T36] usb 2-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=ce.99 [ 520.276194][ T36] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.298953][ T36] usb 2-1: config 0 descriptor?? [ 520.324757][ T9475] usb 6-1: Using ep0 maxpacket: 8 [ 520.351644][ T36] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 520.484652][ T9475] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 520.794710][ T9475] usb 6-1: string descriptor 0 read error: -22 [ 520.801464][ T9475] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 520.812385][ T9475] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.070089][ T9506] usb 6-1: USB disconnect, device number 3 [ 521.844390][ T2923] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 522.114315][ T2923] usb 6-1: Using ep0 maxpacket: 8 [ 522.234428][ T2923] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 522.265683][ T36] gspca_stv06xx: I2C: Read error writing address: -71 [ 522.273951][ T36] usb 2-1: USB disconnect, device number 89 [ 522.494455][ T2923] usb 6-1: string descriptor 0 read error: -22 [ 522.501109][ T2923] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 522.510784][ T2923] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.689509][ T2923] usb 6-1: USB disconnect, device number 4 17:57:14 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x40, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 17:57:14 executing program 0: fsopen(&(0x7f0000000080)='selinuxfs\x00', 0x1) 17:57:14 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x208200) r1 = getpid() sched_setscheduler(r1, 0x0, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) getpid() read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) 17:57:14 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000001000)={&(0x7f0000001080)=""/4096, 0x0, 0x800, 0x0, 0x1}, 0x20) 17:57:14 executing program 3: openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x32b40, 0x0) 17:57:14 executing program 5: rt_sigpending(&(0x7f0000000000), 0x8) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_congestion_control\x00', 0x1, 0x0) write$tcp_congestion(r0, &(0x7f00000000c0)='vegas\x00', 0x6) 17:57:14 executing program 4: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x801, &(0x7f0000000180)) 17:57:14 executing program 3: clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f0000000080)) 17:57:14 executing program 5: perf_event_open$cgroup(&(0x7f0000000200)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 522.856364][ T37] audit: type=1804 audit(1618682234.374:560): pid=18624 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/180/file0/bus" dev="ramfs" ino=48801 res=1 errno=0 17:57:14 executing program 0: select(0x40, &(0x7f0000000380), &(0x7f00000003c0)={0x7795}, 0x0, &(0x7f0000000440)={0x0, 0x2710}) [ 522.941418][T18632] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 522.977327][T18633] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) 17:57:14 executing program 5: syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00', 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000500)='SEG6\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x20026844) bpf$ITER_CREATE(0x21, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) [ 523.019521][ T37] audit: type=1804 audit(1618682234.374:561): pid=18624 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/180/file0/bus" dev="ramfs" ino=48801 res=1 errno=0 [ 523.046377][T18633] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 523.057383][T18633] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 523.066866][T18633] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 523.077555][ T37] audit: type=1804 audit(1618682234.384:562): pid=18624 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/180/file0/bus" dev="ramfs" ino=48801 res=1 errno=0 17:57:14 executing program 0: r0 = getpgid(0x0) process_vm_readv(r0, &(0x7f0000000300)=[{&(0x7f0000000240)=""/140, 0x8c}], 0x1, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/187, 0xbb}, {0x0}], 0x2, 0x0) [ 523.120866][T18633] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 523.130025][ T3620] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 523.194984][T18633] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 523.297051][T18633] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 523.334255][T18633] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 523.560295][ T3620] usb 2-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=ce.99 [ 523.570481][ T3620] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.581805][ T3620] usb 2-1: config 0 descriptor?? [ 523.637230][ T3620] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 525.494111][ T3620] gspca_stv06xx: I2C: Read error writing address: -71 [ 525.502712][ T3620] usb 2-1: USB disconnect, device number 90 17:57:17 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x40, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 17:57:17 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x208200) r1 = getpid() sched_setscheduler(r1, 0x0, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) getpid() read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) 17:57:17 executing program 5: perf_event_open(&(0x7f0000001900)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x440}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:57:17 executing program 0: r0 = gettid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0xc, &(0x7f0000000540)={0x0, 0x0, 0x4}) 17:57:17 executing program 3: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, 0x0) 17:57:17 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x3f7, 0x0, 0x0, 0x0, {0x7, 0x7, './file0', './file0'}}, 0x28}}, 0x0) 17:57:17 executing program 5: mmap$IORING_OFF_CQ_RING(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x0, 0x30, 0xffffffffffffffff, 0x8000000) 17:57:17 executing program 3: openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x44000, 0x0) 17:57:17 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae01, 0x6) [ 526.097721][ T37] audit: type=1804 audit(1618682237.614:563): pid=18689 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/181/file0/bus" dev="ramfs" ino=49469 res=1 errno=0 17:57:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x14, 0x0, 0x1}, 0x14}}, 0x0) 17:57:17 executing program 5: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0xffffffff}, 0x8) [ 526.197036][T18701] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 526.202757][ T37] audit: type=1804 audit(1618682237.654:564): pid=18689 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/181/file0/bus" dev="ramfs" ino=49469 res=1 errno=0 17:57:17 executing program 3: bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000002c0), 0x10) [ 526.356880][ T37] audit: type=1804 audit(1618682237.654:565): pid=18689 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/181/file0/bus" dev="ramfs" ino=49469 res=1 errno=0 [ 526.382598][ T9506] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 526.753947][ T9506] usb 2-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=ce.99 [ 526.763020][ T9506] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.773232][ T9506] usb 2-1: config 0 descriptor?? [ 526.816238][ T9506] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 528.683722][ T9506] gspca_stv06xx: I2C: Read error writing address: -71 [ 528.692945][ T9506] usb 2-1: USB disconnect, device number 91 17:57:20 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x40, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 17:57:20 executing program 4: perf_event_open(&(0x7f0000001580)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10808, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4008}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 17:57:20 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0x80001, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x5, 0x67, 0x0, 0x5, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x2, @perf_config_ext={0x7fff}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x100000, 0x193f}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) prctl$PR_MCE_KILL_GET(0x22) prctl$PR_MCE_KILL_GET(0x22) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000300)=@req3={0x8, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x3}, 0x1c) syz_genetlink_get_family_id$batadv(&(0x7f0000000340)='batadv\x00', r1) accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000380)) syz_genetlink_get_family_id$batadv(&(0x7f00000003c0)='batadv\x00', r0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000840)='devlink\x00', 0xffffffffffffffff) 17:57:20 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x208200) r1 = getpid() sched_setscheduler(r1, 0x0, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) getpid() read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) 17:57:20 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, 0x0) 17:57:20 executing program 3: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000003fc0)='/dev/dlm_plock\x00', 0x200000, 0x0) getpeername$packet(r0, 0x0, 0x0) 17:57:20 executing program 0: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x4, 0x20, 0x31, [{{0x9, 0x4, 0x0, 0x20, 0x1, 0x7, 0x1, 0x2, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x0, 0x7f, 0x2}}}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x80, 0x2, 0x1}, 0x30, &(0x7f0000000080)={0x5, 0xf, 0x30, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x40, "627a641f134e75a69a74145a9a771631"}, @generic={0x3, 0x10, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "b601976782afc146396a0b6a34065536"}]}, 0x3, [{0x4, &(0x7f00000001c0)=@lang_id={0x4}}, {0x0, 0x0}, {0x2, &(0x7f0000000240)=@string={0x2}}]}) [ 529.215350][ T37] audit: type=1804 audit(1618682240.735:566): pid=18735 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/182/file0/bus" dev="ramfs" ino=48910 res=1 errno=0 17:57:20 executing program 3: pselect6(0x40, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)={0x6}, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={[0x9]}, 0x8}) 17:57:20 executing program 4: pselect6(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140), 0x8}) 17:57:20 executing program 5: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) [ 529.326621][ T37] audit: type=1804 audit(1618682240.805:567): pid=18739 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/182/file0/bus" dev="ramfs" ino=48910 res=1 errno=0 [ 529.352566][T18739] overlayfs: unrecognized mount option "context=staff_u" or missing value 17:57:21 executing program 3: process_vm_readv(0x0, &(0x7f0000000300)=[{&(0x7f0000000240)=""/140, 0x8c}], 0x1, 0x0, 0x0, 0x0) [ 529.452366][ T37] audit: type=1804 audit(1618682240.805:568): pid=18739 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/182/file0/bus" dev="ramfs" ino=48910 res=1 errno=0 17:57:21 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x208200) r1 = getpid() sched_setscheduler(r1, 0x0, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) getpid() read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) [ 529.585320][ T37] audit: type=1804 audit(1618682241.105:569): pid=18762 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/183/file0/bus" dev="ramfs" ino=48947 res=1 errno=0 [ 529.613524][ T2923] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 529.635739][T18762] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 529.645202][ T37] audit: type=1804 audit(1618682241.105:570): pid=18762 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/183/file0/bus" dev="ramfs" ino=48947 res=1 errno=0 [ 529.683534][ T3620] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 529.701579][ T37] audit: type=1804 audit(1618682241.105:571): pid=18762 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/183/file0/bus" dev="ramfs" ino=48947 res=1 errno=0 [ 529.845961][ T9475] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 529.923463][ T3620] usb 1-1: Using ep0 maxpacket: 8 [ 530.013489][ T2923] usb 2-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=ce.99 [ 530.022893][ T2923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.038403][ T2923] usb 2-1: config 0 descriptor?? [ 530.093888][ T2923] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 530.113567][ T9475] usb 6-1: Using ep0 maxpacket: 8 [ 530.124624][ T3620] usb 1-1: config 1 interface 0 altsetting 32 bulk endpoint 0x1 has invalid maxpacket 16 [ 530.134919][ T3620] usb 1-1: config 1 interface 0 has no altsetting 0 [ 530.313474][ T9475] usb 6-1: unable to get BOS descriptor or descriptor too short [ 530.413557][ T9475] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 530.493491][ T3620] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 530.502923][ T3620] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.512491][ T3620] usb 1-1: SerialNumber: syz [ 530.533710][T18747] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 530.613587][ T9475] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 530.622790][ T9475] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.632406][ T9475] usb 6-1: Product: syz [ 530.642465][ T9475] usb 6-1: Manufacturer: syz [ 530.647909][ T9475] usb 6-1: SerialNumber: syz [ 530.797367][ T3620] usb 1-1: USB disconnect, device number 4 [ 530.918163][ T9506] usb 6-1: USB disconnect, device number 5 [ 531.523389][ T9475] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 531.693425][ T5] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 531.783200][ T9475] usb 1-1: Using ep0 maxpacket: 8 [ 531.933262][ T5] usb 6-1: Using ep0 maxpacket: 8 [ 531.944663][ T2923] gspca_stv06xx: I2C: Read error writing address: -71 [ 531.955083][ T2923] usb 2-1: USB disconnect, device number 92 [ 532.023303][ T9475] usb 1-1: config 1 interface 0 altsetting 32 bulk endpoint 0x1 has invalid maxpacket 16 [ 532.033750][ T9475] usb 1-1: config 1 interface 0 has no altsetting 0 [ 532.099808][ T5] usb 6-1: unable to get BOS descriptor or descriptor too short [ 532.183407][ T5] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 532.353420][ T5] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 532.362507][ T5] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.372536][ T5] usb 6-1: Product: syz [ 532.377194][ T5] usb 6-1: Manufacturer: syz [ 532.382485][ T5] usb 6-1: SerialNumber: syz [ 532.383275][ T9475] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 532.409026][ T9475] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.443309][ T9475] usb 1-1: can't set config #1, error -71 17:57:23 executing program 3: socket(0x18, 0x0, 0x8) 17:57:23 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/syz1\x00', 0x200002, 0x0) 17:57:23 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x208200) r1 = getpid() sched_setscheduler(r1, 0x0, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) getpid() read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) 17:57:24 executing program 0: syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x6, 0x80001) 17:57:24 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x40, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) [ 532.457615][ T9475] usb 1-1: USB disconnect, device number 5 17:57:24 executing program 5: pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000480)={0xffffffffffffffff}) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000340)='\x00', 0x0, r0) [ 532.510231][ T9506] usb 6-1: USB disconnect, device number 6 17:57:24 executing program 4: bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000640)=0xffffffffffffffff, 0x4) 17:57:24 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x101000, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mixer\x00', 0x701080, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r0, 0x80044d1d, &(0x7f0000000240)) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dsp1\x00', 0x40, 0x0) read$dsp(r1, &(0x7f00000002c0)=""/18, 0x12) socket$isdn_base(0x22, 0x3, 0x0) [ 532.565883][ T37] audit: type=1804 audit(1618682244.085:572): pid=18833 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/184/file0/bus" dev="ramfs" ino=49011 res=1 errno=0 17:57:24 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttynull\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) [ 532.707979][ T37] audit: type=1804 audit(1618682244.145:573): pid=18833 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/184/file0/bus" dev="ramfs" ino=49011 res=1 errno=0 [ 532.744416][T18851] overlayfs: unrecognized mount option "context=staff_u" or missing value 17:57:24 executing program 4: clone3(&(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f00000006c0), 0x0, 0x0, 0x0}, 0x58) 17:57:24 executing program 5: fsopen(&(0x7f0000000080)='selinuxfs\x00', 0x0) [ 532.851221][ T37] audit: type=1804 audit(1618682244.155:574): pid=18833 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/184/file0/bus" dev="ramfs" ino=49011 res=1 errno=0 17:57:24 executing program 3: sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000003c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$afs(&(0x7f00000006c0)='afs\x00', 0x0, 0x5, 0x0, &(0x7f0000000800), 0x800000, &(0x7f0000000840)={[{@flock_strict='flock=strict'}, {@autocell='autocell'}, {@dyn='dyn'}, {@dyn='dyn'}, {@dyn='dyn'}, {@dyn='dyn'}, {@flock_local='flock=local'}], [{@smackfsdef={'smackfsdef', 0x3d, '+'}}]}) [ 532.893523][ T4818] usb 2-1: new high-speed USB device number 93 using dummy_hcd 17:57:24 executing program 4: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/dlm_plock\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x0, 0x10, r0, 0x0) 17:57:24 executing program 5: openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm_plock\x00', 0x40880, 0x0) [ 533.253502][ T4818] usb 2-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=ce.99 [ 533.278135][ T4818] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 17:57:24 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x208200) r1 = getpid() sched_setscheduler(r1, 0x0, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) getpid() read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) 17:57:24 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000011c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x4}]}]}}, &(0x7f00000001c0)=""/4096, 0x32, 0x1000, 0x1}, 0x20) [ 533.359135][ T4818] usb 2-1: config 0 descriptor?? [ 533.435803][ T4818] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 533.452389][ T37] audit: type=1804 audit(1618682244.965:575): pid=18884 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/185/file0/bus" dev="ramfs" ino=49640 res=1 errno=0 [ 533.560836][ T37] audit: type=1804 audit(1618682245.035:576): pid=18884 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/185/file0/bus" dev="ramfs" ino=49640 res=1 errno=0 [ 533.614653][T18889] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 533.664173][ T37] audit: type=1804 audit(1618682245.035:577): pid=18884 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/185/file0/bus" dev="ramfs" ino=49640 res=1 errno=0 [ 535.302858][ T4818] gspca_stv06xx: I2C: Read error writing address: -71 [ 535.311068][ T4818] usb 2-1: USB disconnect, device number 93 17:57:27 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x40, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) 17:57:27 executing program 4: pselect6(0x40, &(0x7f0000000000), &(0x7f0000000080)={0x2}, 0x0, 0x0, 0x0) 17:57:27 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x101000, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mixer\x00', 0x701080, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r0, 0x80044d1d, &(0x7f0000000240)) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dsp1\x00', 0x40, 0x0) read$dsp(r1, &(0x7f00000002c0)=""/18, 0x12) socket$isdn_base(0x22, 0x3, 0x0) 17:57:27 executing program 5: ioctl$SOUND_MIXER_READ_DEVMASK(0xffffffffffffffff, 0x80044dfe, &(0x7f0000000000)) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x101000, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r1, 0x80044dfe, &(0x7f00000000c0)) read$dsp(r0, &(0x7f0000000100)=""/197, 0xc5) openat$mixer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mixer\x00', 0x701080, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r0, 0x80044d1d, &(0x7f0000000240)) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dsp1\x00', 0x40, 0x0) read$dsp(r2, &(0x7f00000002c0)=""/18, 0x12) socket$isdn_base(0x22, 0x3, 0x0) 17:57:27 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='hugetlb.2MB.limit_in_bytes\x00', 0x26e1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x283, &(0x7f0000000780)='bdev!)-%+wlan\x00p\x00\x00\x01\x00Mx_dxl_accesszQ\tU\x97\x12=J\xd5\x8b;YE\xec\x8c;\xf7\xcc\xa7\x8b6\n\xbe\x01\x01\xae\xb6\f4\x87\xd9j\xd8\x0e\xc2\x10\xb1\x7f\x95\x01fE\xaea\x10\x8f\xac\xa9+V\x863Hhk{2\x00\x14I\xf7\xd6\xcd)\x05\x87q6\xed~\xd0\xb2\xf8\x8d\xaa\b\xe4\"\x1c\xbf\x8f_[\x17@\xe5\xec\x10\a\xb95w\x8by}/\x8cw\xe6\x99\xfe \x84]8\x940U\xb3B\xd9\x06\xf2\n\xf7\x1f\xd8v\x7fD\xf2\x87\xf7}V\x89}\xf0\xb7\x8d\x85\xf6\x9b\xcc\xd3Lh.\r\xd3J\"\x1f\xdeW;F.\xdf$\xee\x18\x0e\xad\xa1\xfcN\x88`\xbbj\x9b\xf0\xccr\xc1\xa8\x85E\x85p+\xd1\xbe\x10\rgx\xb8\x93k\x8c\x1dTi\xafq\xde\x06/ \x93O.\xe5<0\xfa\b\x82\xe4c&\x99\xd6psf\xa8\xacjh9\x8bk\x8f\n$\xf2\x06#\xc8\xd2\x00\x00w\x03,\xbb\xed\xf1o\xd8\x19\xd2\r\xbb\xd3\x18E\x0e&\x83\xdfWL?P$\xb4a\f\x154\xdd\xacx\x91<\x97\x13\xab\xe2\xdd\n\x13\x19\xb9U\n\xb5\xb6\xffBQ\x80\xe6\xe6\xaf\xc8\x15_>\xe6\xfc\xb9R\x06\xcd/\x87\xeaP\x9b\xdf5\xcc\xa4RDx\xad\xc0\x8f|\xe3u\xbe\x1e\xd5\xa6\xcc\xb8\x86\x8b0\'\xcc\x01\x9bQ/\xf9\xa7vfa\xdf!\x1axt\xd1\r\xd9&MC\xcc,2\xce\xd2kCJ\x10\x88\xc5#\x92\xa3\xf52)2\xd3\xa02q\xdb\xe4\xe3\x97\x9d\xbc\xc9\xf8\x00\x00\x00\x00\x00\xcbxak\x9f-\xee\x8d\xd4\xc42\xa7\xe1#\\B\xb9\xdf\xd8\xda\xa8k\x8eV\xeau\r\x017\xb66\xb1\x00\x1a!\xb5\xc9\xd5\x06\xf2\xd5\xf8\xc3\xea\xcdZ+\xcd\xa2\xb7@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00U\xdd6\x8d\xd0\x01\x05\x19\xc9(\xb5\xe6^\xb0\xf1\xdd4\x16\xcc\x9f\x01j\xf7Q\xdf\x985\xc3F\x04\xfb\x10\xd8\x0e\x1f!-\x04d\xfb\x13q\x7f\xfb\xb9\x81\xe8\x7f\xe9\x01\xd3\xd0\x88a\xd09-\xf5\xf6\xca\x9c\"\xec\xc4\xd4\x950*\x91PDL\xd5@\xcda_\xdb\xebff\xafd\xb7z\x1d\x99\xbd\xc6P\xfa\x99\x04$\xb2\xcf0#\x84\x91\f\xf4\x17m\a-Gr)\x7f\x92-M\x19IQ%&\xed\xe90\xc0k\xd3\"\xee\xe7\xa4\xd84d$\t\xa9\n\x90\x1dE\xb2\xb2\x00\x1c\x97A\xde\xf8\xe2W%\xe9\xca\xd5\xf58)f\x85\x13|u\xa1%\xbd\xcf\xfe \x99\xb0C\xf5\xf2\xbf\x96el'}, 0x30) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)) 17:57:27 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x208200) r1 = getpid() sched_setscheduler(r1, 0x0, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) getpid() read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) [ 535.866182][ T37] audit: type=1804 audit(1618682247.385:578): pid=18908 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/186/file0/bus" dev="ramfs" ino=49078 res=1 errno=0 17:57:27 executing program 4: process_vm_readv(0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=""/140, 0x8c}], 0x1, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/102400, 0x19000}], 0x1, 0x0) [ 536.029919][T18919] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 536.043313][ T37] audit: type=1804 audit(1618682247.445:579): pid=18908 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/186/file0/bus" dev="ramfs" ino=49078 res=1 errno=0 17:57:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) [ 536.236873][ T37] audit: type=1804 audit(1618682247.445:580): pid=18908 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/186/file0/bus" dev="ramfs" ino=49078 res=1 errno=0 [ 536.292873][ T4818] usb 2-1: new high-speed USB device number 94 using dummy_hcd 17:57:28 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x101000, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mixer\x00', 0x701080, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r0, 0x80044d1d, &(0x7f0000000240)) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dsp1\x00', 0x40, 0x0) read$dsp(r1, &(0x7f00000002c0)=""/18, 0x12) socket$isdn_base(0x22, 0x3, 0x0) 17:57:28 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='hugetlb.2MB.limit_in_bytes\x00', 0x26e1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x283, &(0x7f0000000780)='bdev!)-%+wlan\x00p\x00\x00\x01\x00Mx_dxl_accesszQ\tU\x97\x12=J\xd5\x8b;YE\xec\x8c;\xf7\xcc\xa7\x8b6\n\xbe\x01\x01\xae\xb6\f4\x87\xd9j\xd8\x0e\xc2\x10\xb1\x7f\x95\x01fE\xaea\x10\x8f\xac\xa9+V\x863Hhk{2\x00\x14I\xf7\xd6\xcd)\x05\x87q6\xed~\xd0\xb2\xf8\x8d\xaa\b\xe4\"\x1c\xbf\x8f_[\x17@\xe5\xec\x10\a\xb95w\x8by}/\x8cw\xe6\x99\xfe \x84]8\x940U\xb3B\xd9\x06\xf2\n\xf7\x1f\xd8v\x7fD\xf2\x87\xf7}V\x89}\xf0\xb7\x8d\x85\xf6\x9b\xcc\xd3Lh.\r\xd3J\"\x1f\xdeW;F.\xdf$\xee\x18\x0e\xad\xa1\xfcN\x88`\xbbj\x9b\xf0\xccr\xc1\xa8\x85E\x85p+\xd1\xbe\x10\rgx\xb8\x93k\x8c\x1dTi\xafq\xde\x06/ \x93O.\xe5<0\xfa\b\x82\xe4c&\x99\xd6psf\xa8\xacjh9\x8bk\x8f\n$\xf2\x06#\xc8\xd2\x00\x00w\x03,\xbb\xed\xf1o\xd8\x19\xd2\r\xbb\xd3\x18E\x0e&\x83\xdfWL?P$\xb4a\f\x154\xdd\xacx\x91<\x97\x13\xab\xe2\xdd\n\x13\x19\xb9U\n\xb5\xb6\xffBQ\x80\xe6\xe6\xaf\xc8\x15_>\xe6\xfc\xb9R\x06\xcd/\x87\xeaP\x9b\xdf5\xcc\xa4RDx\xad\xc0\x8f|\xe3u\xbe\x1e\xd5\xa6\xcc\xb8\x86\x8b0\'\xcc\x01\x9bQ/\xf9\xa7vfa\xdf!\x1axt\xd1\r\xd9&MC\xcc,2\xce\xd2kCJ\x10\x88\xc5#\x92\xa3\xf52)2\xd3\xa02q\xdb\xe4\xe3\x97\x9d\xbc\xc9\xf8\x00\x00\x00\x00\x00\xcbxak\x9f-\xee\x8d\xd4\xc42\xa7\xe1#\\B\xb9\xdf\xd8\xda\xa8k\x8eV\xeau\r\x017\xb66\xb1\x00\x1a!\xb5\xc9\xd5\x06\xf2\xd5\xf8\xc3\xea\xcdZ+\xcd\xa2\xb7@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00U\xdd6\x8d\xd0\x01\x05\x19\xc9(\xb5\xe6^\xb0\xf1\xdd4\x16\xcc\x9f\x01j\xf7Q\xdf\x985\xc3F\x04\xfb\x10\xd8\x0e\x1f!-\x04d\xfb\x13q\x7f\xfb\xb9\x81\xe8\x7f\xe9\x01\xd3\xd0\x88a\xd09-\xf5\xf6\xca\x9c\"\xec\xc4\xd4\x950*\x91PDL\xd5@\xcda_\xdb\xebff\xafd\xb7z\x1d\x99\xbd\xc6P\xfa\x99\x04$\xb2\xcf0#\x84\x91\f\xf4\x17m\a-Gr)\x7f\x92-M\x19IQ%&\xed\xe90\xc0k\xd3\"\xee\xe7\xa4\xd84d$\t\xa9\n\x90\x1dE\xb2\xb2\x00\x1c\x97A\xde\xf8\xe2W%\xe9\xca\xd5\xf58)f\x85\x13|u\xa1%\xbd\xcf\xfe \x99\xb0C\xf5\xf2\xbf\x96el'}, 0x30) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)) 17:57:28 executing program 4: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$SIOCX25GCAUSEDIAG(r0, 0x89e6, &(0x7f0000000040)={0x99, 0x9}) r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x5, 0x67, 0x0, 0x5, 0x0, 0x4, 0x8000, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x81, 0x2, @perf_config_ext={0x7fff, 0x3}, 0x4a5, 0x0, 0x2, 0x3, 0xffbe, 0x100000, 0x193f}, 0x0, 0xf, 0xffffffffffffffff, 0x1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) prctl$PR_MCE_KILL_GET(0x22) prctl$PR_MCE_KILL_GET(0x22) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, 0x0, 0x10, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x5}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x57}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x4044004) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000300)=@req3={0x8, 0x7f, 0xffffff61, 0x1, 0x74, 0x3ff, 0x3}, 0x1c) syz_genetlink_get_family_id$batadv(&(0x7f0000000340)='batadv\x00', r1) accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000380)) syz_genetlink_get_family_id$batadv(&(0x7f00000003c0)='batadv\x00', 0xffffffffffffffff) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000400)=@req={0x3, 0x0, 0xd32, 0x1}, 0x10) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0xcb82bc3840b3ca43}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x50, 0x4, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}}, 0x4000000) 17:57:28 executing program 5: syz_mount_image$afs(0x0, 0x0, 0x5, 0x1, &(0x7f0000000800)=[{&(0x7f0000000740)="1e", 0x1}], 0x0, 0x0) [ 536.663147][ T4818] usb 2-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=ce.99 [ 536.690113][ T4818] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.750864][ T4818] usb 2-1: config 0 descriptor?? [ 536.825111][ T4818] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 538.702665][ T4818] gspca_stv06xx: I2C: Read error writing address: -71 [ 538.712960][ T4818] usb 2-1: USB disconnect, device number 94 17:57:30 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x40, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) 17:57:30 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x208200) r1 = getpid() sched_setscheduler(r1, 0x0, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) getpid() read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) 17:57:30 executing program 4: socket(0x2e, 0x0, 0x0) 17:57:30 executing program 5: pipe(&(0x7f0000000080)) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) 17:57:30 executing program 3: ioperm(0x0, 0xffb, 0x69) ioperm(0x0, 0xd2, 0x0) 17:57:30 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x101000, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mixer\x00', 0x701080, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r0, 0x80044d1d, &(0x7f0000000240)) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dsp1\x00', 0x40, 0x0) read$dsp(r1, &(0x7f00000002c0)=""/18, 0x12) socket$isdn_base(0x22, 0x3, 0x0) 17:57:30 executing program 4: r0 = syz_usbip_server_init(0x0) write$usbip_server(r0, 0x0, 0x0) 17:57:30 executing program 5: r0 = getpgid(0x0) tkill(r0, 0x20) 17:57:30 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000002140)='net/protocols\x00') read$FUSE(r0, &(0x7f00000000c0)={0x2020}, 0x2020) [ 539.277830][ T37] audit: type=1804 audit(1618682250.796:581): pid=18972 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/187/file0/bus" dev="ramfs" ino=49702 res=1 errno=0 17:57:30 executing program 3: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/seq\x00', 0x0) [ 539.381927][T18982] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 539.460701][T18988] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 539.471540][ T37] audit: type=1804 audit(1618682250.856:582): pid=18972 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/187/file0/bus" dev="ramfs" ino=49702 res=1 errno=0 17:57:31 executing program 5: perf_event_open$cgroup(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30920, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1002}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 539.608562][ T37] audit: type=1804 audit(1618682250.866:583): pid=18972 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/187/file0/bus" dev="ramfs" ino=49702 res=1 errno=0 17:57:31 executing program 3: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 539.652303][ T9475] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 539.944157][T18982] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 540.032774][ T9475] usb 2-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=ce.99 [ 540.048636][ T9475] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.091925][ T9475] usb 2-1: config 0 descriptor?? [ 540.154424][ T9475] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 542.062040][ T9475] gspca_stv06xx: I2C: Read error writing address: -71 [ 542.071308][ T9475] usb 2-1: USB disconnect, device number 95 17:57:34 executing program 3: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2}}}}}]}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x30, &(0x7f0000000080)={0x5, 0xf, 0x30, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x40, "627a641f134e75a69a74145a9a771631"}, @generic={0x9, 0x10, 0x2, "4261a17aea99"}, @wireless={0xb, 0x10, 0x1, 0x0, 0x0, 0x0, 0xfc}, @ptm_cap={0x3}]}, 0x1, [{0x0, 0x0}]}) 17:57:34 executing program 5: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={0x0}}, 0x0) 17:57:34 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff}) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 17:57:34 executing program 4: syz_mount_image$afs(&(0x7f00000006c0)='afs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={[{@dyn='dyn'}]}) 17:57:34 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x208200) r1 = getpid() sched_setscheduler(r1, 0x0, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) getpid() read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) 17:57:34 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000001000)={0x0, 0x1010000, 0x800, 0x0, 0x1}, 0x20) 17:57:34 executing program 0: perf_event_open$cgroup(&(0x7f0000000980)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 17:57:34 executing program 4: request_key(0x0, &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0) write$UHID_INPUT2(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0)='nl802154\x00', 0xffffffffffffffff) [ 542.702305][ T37] audit: type=1804 audit(1618682254.226:584): pid=19025 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/188/file0/bus" dev="ramfs" ino=50235 res=1 errno=0 17:57:34 executing program 5: r0 = getpgid(0x0) process_vm_writev(r0, &(0x7f0000000380)=[{0x0}, {0x0}, {&(0x7f0000000080)=""/13, 0xd}], 0x3, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1, 0x0) 17:57:34 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff}) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, 0x0, 0x0) 17:57:34 executing program 1: perf_event_open$cgroup(&(0x7f0000000980)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 542.892332][ T4818] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 542.894174][T19036] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 542.918589][ T37] audit: type=1804 audit(1618682254.296:585): pid=19025 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/188/file0/bus" dev="ramfs" ino=50235 res=1 errno=0 17:57:34 executing program 5: clone3(&(0x7f0000000180)={0x14000100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 543.131628][ T37] audit: type=1804 audit(1618682254.306:586): pid=19025 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/188/file0/bus" dev="ramfs" ino=50235 res=1 errno=0 [ 543.157606][ T4818] usb 4-1: Using ep0 maxpacket: 8 [ 543.362632][ T4818] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 543.642257][ T4818] usb 4-1: string descriptor 0 read error: -22 [ 543.648535][ T4818] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 543.659104][ T4818] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.910475][ T4818] usb 4-1: USB disconnect, device number 18 [ 544.691827][ T36] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 544.971852][ T36] usb 4-1: Using ep0 maxpacket: 8 [ 545.212129][ T36] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 545.522065][ T36] usb 4-1: string descriptor 0 read error: -22 [ 545.528391][ T36] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 545.537945][ T36] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 17:57:37 executing program 3: openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000003fc0)='/dev/dlm_plock\x00', 0x200000, 0x0) 17:57:37 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000000)=0x20008, 0x4) 17:57:37 executing program 5: syz_mount_image$erofs(0x0, 0x0, 0x0, 0x2, &(0x7f0000002480)=[{&(0x7f00000022c0)="87", 0x1, 0xe8000000000000}, {&(0x7f0000002400)='?', 0x1, 0x80000001}], 0x0, 0x0) 17:57:37 executing program 4: openat$drirender128(0xffffffffffffff9c, &(0x7f0000002680)='/dev/dri/renderD128\x00', 0xc0400, 0x0) 17:57:37 executing program 1: io_uring_setup(0x304d, &(0x7f0000000300)) 17:57:37 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x208200) r1 = getpid() sched_setscheduler(r1, 0x0, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) getpid() read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) [ 545.603484][ T36] usb 4-1: can't set config #1, error -71 [ 545.612453][ T36] usb 4-1: USB disconnect, device number 19 [ 545.685801][T19088] loop5: detected capacity change from 0 to 264192 17:57:37 executing program 4: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x2e, &(0x7f0000000080)={0x5, 0xf, 0x2e, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "627a641f134e75a69a74145a9a771631"}, @generic={0x7, 0x10, 0x2, "4261a17a"}, @wireless={0xb}, @ptm_cap={0x3}]}}) [ 545.714234][ T37] audit: type=1804 audit(1618682257.237:587): pid=19091 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/189/file0/bus" dev="ramfs" ino=49807 res=1 errno=0 [ 545.768817][ T37] audit: type=1804 audit(1618682257.267:588): pid=19091 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/189/file0/bus" dev="ramfs" ino=49807 res=1 errno=0 17:57:37 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={0x0}}, 0x4001) 17:57:37 executing program 3: perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 545.839633][ T37] audit: type=1804 audit(1618682257.267:589): pid=19091 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/189/file0/bus" dev="ramfs" ino=49807 res=1 errno=0 [ 545.852616][T19099] overlayfs: unrecognized mount option "context=staff_u" or missing value 17:57:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}}, 0x0) 17:57:37 executing program 5: r0 = getpgid(0x0) process_vm_readv(r0, &(0x7f0000000300)=[{&(0x7f0000000240)=""/140, 0x8c}], 0x1, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/187, 0xbb}], 0x1, 0x0) clone3(&(0x7f0000000600)={0x60a60000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:57:37 executing program 0: syz_genetlink_get_family_id$SEG6(&(0x7f0000000500)='SEG6\x00', 0xffffffffffffffff) 17:57:37 executing program 1: syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f0000002480)=[{&(0x7f0000000080)="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", 0x1000, 0x8001}, {&(0x7f00000022c0)="87", 0x1, 0xe8000000000000}, {&(0x7f0000002400)='?', 0x1, 0x80000001}], 0x100030, &(0x7f0000002580)) 17:57:37 executing program 3: syz_genetlink_get_family_id$nl802154(&(0x7f0000000140)='nl802154\x00', 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) [ 546.158318][T19111] IPVS: ftp: loaded support on port[0] = 21 [ 546.191545][ T36] usb 5-1: new high-speed USB device number 15 using dummy_hcd 17:57:37 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) [ 546.359114][T19129] loop1: detected capacity change from 0 to 264192 17:57:37 executing program 0: perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 546.459326][ T36] usb 5-1: Using ep0 maxpacket: 8 17:57:38 executing program 3: perf_event_open$cgroup(&(0x7f0000000200)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 546.533361][T19111] IPVS: ftp: loaded support on port[0] = 21 [ 546.542026][T19129] loop1: detected capacity change from 0 to 264192 17:57:38 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x208200) r1 = getpid() sched_setscheduler(r1, 0x0, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) getpid() read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) [ 546.702081][ T36] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 546.768793][ T37] audit: type=1804 audit(1618682258.287:590): pid=19181 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/190/file0/bus" dev="ramfs" ino=50389 res=1 errno=0 [ 546.883307][ T37] audit: type=1804 audit(1618682258.337:591): pid=19181 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/190/file0/bus" dev="ramfs" ino=50389 res=1 errno=0 [ 546.915510][T19184] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 546.958777][ T37] audit: type=1804 audit(1618682258.337:592): pid=19181 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/190/file0/bus" dev="ramfs" ino=50389 res=1 errno=0 [ 546.994310][ T36] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 547.011440][ T36] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.019683][ T36] usb 5-1: Product: syz [ 547.026722][ T36] usb 5-1: Manufacturer: syz [ 547.036181][ T36] usb 5-1: SerialNumber: syz [ 547.317257][ T9475] usb 5-1: USB disconnect, device number 15 [ 548.101392][ T9475] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 548.361299][ T9475] usb 5-1: Using ep0 maxpacket: 8 [ 548.591597][ T9475] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 17:57:40 executing program 4: syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00', 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={0x0}}, 0x0) r0 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000003c0)=0xffffffffffffffff, 0x4) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00', 0x0, 0x8}, 0x10) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000480), 0x8) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000004c0)={r0, r1, 0x0, r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000500)='SEG6\x00', r3) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x38, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x80}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x88009}, 0x20026844) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000640)=0xffffffffffffffff, 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000680)={r4}, 0x8) perf_event_open$cgroup(0x0, r2, 0xf, 0xffffffffffffffff, 0x1) syz_genetlink_get_family_id$l2tp(&(0x7f0000000a40)='l2tp\x00', r2) 17:57:40 executing program 1: r0 = io_uring_setup(0x3dde, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x1, 0x61}) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x30, r0, 0x0) accept$netrom(0xffffffffffffffff, &(0x7f0000000180)={{0x3, @null}, [@rose, @rose, @null, @default, @netrom, @default, @bcast, @default]}, &(0x7f0000000200)=0x48) getsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, &(0x7f0000000240), 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000800)='/dev/vcsu\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000100)) 17:57:40 executing program 0: clone3(&(0x7f0000000180)={0x14000100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0x0], 0x1}, 0x58) 17:57:40 executing program 3: syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) syz_mount_image$afs(0x0, 0x0, 0x5, 0x1, &(0x7f0000000800)=[{&(0x7f0000000740)="1ed938c91af4", 0x6}], 0x0, 0x0) 17:57:40 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, &(0x7f0000000080)=""/140, 0x0, 0x8c}, 0x20) 17:57:40 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x208200) r1 = getpid() sched_setscheduler(r1, 0x0, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) getpid() read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) [ 548.821525][ T9475] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 548.853668][ T9475] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.886901][ T9475] usb 5-1: Product: syz 17:57:40 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff}) mmap$snddsp_control(&(0x7f0000ffa000/0x3000)=nil, 0x1000, 0x0, 0x10, r0, 0x83000000) [ 548.922531][ T9475] usb 5-1: Manufacturer: syz 17:57:40 executing program 4: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000002c0)={0x0}) [ 548.962719][ T37] audit: type=1804 audit(1618682260.487:593): pid=19215 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/191/file0/bus" dev="ramfs" ino=50414 res=1 errno=0 17:57:40 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x18004, 0x0) [ 549.017750][ T37] audit: type=1804 audit(1618682260.537:594): pid=19226 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/191/file0/bus" dev="ramfs" ino=50414 res=1 errno=0 [ 549.052336][ T9475] usb 5-1: can't set config #1, error -71 17:57:40 executing program 1: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x4, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0x20, 0x1, 0x7, 0x1, 0x2, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x0, 0x0, 0x2}}}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x0, 0x80, 0x2, 0x0, 0x10}, 0x27, &(0x7f0000000080)={0x5, 0xf, 0x27, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "627a641f134e75a69a74145a9a771631"}, @wireless={0xb}, @ptm_cap={0x3}]}}) 17:57:40 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0}}, 0x0) [ 549.081789][ T9475] usb 5-1: USB disconnect, device number 16 [ 549.095489][T19233] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 549.098297][ T37] audit: type=1804 audit(1618682260.537:595): pid=19226 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/191/file0/bus" dev="ramfs" ino=50414 res=1 errno=0 17:57:40 executing program 4: syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', 0x0, 0x0, 0x2, &(0x7f0000002480)=[{&(0x7f0000000080)="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", 0x1000, 0x8001}, {&(0x7f0000002400)='?', 0x1, 0x80000001}], 0x0, &(0x7f0000002580)) 17:57:40 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, 0x0) 17:57:40 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x208200) r1 = getpid() sched_setscheduler(r1, 0x0, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(0x0, 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) getpid() read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) 17:57:40 executing program 0: ioctl$SOUND_MIXER_READ_DEVMASK(0xffffffffffffffff, 0x80044dfe, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r0, 0x80044dfe, &(0x7f00000000c0)) ioctl$SOUND_MIXER_READ_VOLUME(0xffffffffffffffff, 0x80044d1d, 0x0) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dsp1\x00', 0x0, 0x0) read$dsp(r1, &(0x7f00000002c0)=""/18, 0x12) socket$isdn_base(0x22, 0x3, 0x0) 17:57:40 executing program 3: r0 = fsopen(&(0x7f0000000000)='virtiofs\x00', 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000040)='+@\x00', &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c) [ 549.379967][T19251] loop4: detected capacity change from 0 to 264192 17:57:40 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff}) mmap$snddsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, r0, 0x0) [ 549.454285][ T37] audit: type=1804 audit(1618682260.977:596): pid=19259 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/192/file0/bus" dev="ramfs" ino=49940 res=1 errno=0 [ 549.492377][T19259] overlayfs: unrecognized mount option "context=staff_u" or missing value 17:57:41 executing program 3: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f0000000200)={0x0, 0x0}) 17:57:41 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x208200) r1 = getpid() sched_setscheduler(r1, 0x0, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(0x0, 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) getpid() read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) [ 549.503159][T19251] loop4: detected capacity change from 0 to 264192 17:57:41 executing program 3: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x8, &(0x7f0000000080)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0x2}]}}) 17:57:41 executing program 4: syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x6, 0x202042) [ 549.601249][ T9506] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 549.658600][T19271] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 549.841336][ T9506] usb 2-1: Using ep0 maxpacket: 8 [ 549.985434][ T5] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 550.041489][ T9506] usb 2-1: config 1 interface 0 altsetting 32 bulk endpoint 0x1 has invalid maxpacket 16 [ 550.067968][ T9506] usb 2-1: config 1 interface 0 has no altsetting 0 [ 550.231372][ T5] usb 4-1: Using ep0 maxpacket: 8 [ 550.252056][ T9506] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 550.262876][ T9506] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.275082][ T9506] usb 2-1: Product: syz [ 550.279418][ T9506] usb 2-1: Manufacturer: syz [ 550.286809][ T9506] usb 2-1: SerialNumber: syz [ 550.312672][T19248] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 550.431221][ T5] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 550.575517][ T9506] usb 2-1: USB disconnect, device number 96 [ 550.601563][ T5] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 550.610674][ T5] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.620572][ T5] usb 4-1: Product: syz [ 550.625895][ T5] usb 4-1: Manufacturer: syz [ 550.630504][ T5] usb 4-1: SerialNumber: syz [ 550.874037][ T9475] usb 4-1: USB disconnect, device number 20 [ 551.311100][T18192] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 551.561019][T18192] usb 2-1: Using ep0 maxpacket: 8 [ 551.670943][ T5] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 551.761575][T18192] usb 2-1: config 1 interface 0 altsetting 32 bulk endpoint 0x1 has invalid maxpacket 16 [ 551.776131][T18192] usb 2-1: config 1 interface 0 has no altsetting 0 [ 551.941031][T18192] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 551.950400][T18192] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.958915][T18192] usb 2-1: Product: syz [ 551.961028][ T5] usb 4-1: Using ep0 maxpacket: 8 [ 551.963574][T18192] usb 2-1: Manufacturer: syz [ 551.973233][T18192] usb 2-1: SerialNumber: syz [ 551.996717][T19248] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 552.161161][ T5] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 17:57:43 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000042c0)={0x0, 0x3, &(0x7f0000004080)=@framed, &(0x7f00000040c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) 17:57:43 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x208200) r1 = getpid() sched_setscheduler(r1, 0x0, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(0x0, 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) getpid() read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) 17:57:43 executing program 5: ioctl$SOUND_MIXER_READ_VOLUME(0xffffffffffffffff, 0x0, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dsp1\x00', 0x0, 0x0) 17:57:43 executing program 4: sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$ITER_CREATE(0x21, 0x0, 0x0) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) syz_mount_image$afs(&(0x7f00000006c0)='afs\x00', 0x0, 0x0, 0x0, &(0x7f0000000800), 0x0, &(0x7f0000000840)) 17:57:43 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, 0x0, 0x0) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 552.268590][T18192] usb 2-1: USB disconnect, device number 97 [ 552.317961][ T37] kauditd_printk_skb: 1 callbacks suppressed [ 552.317975][ T37] audit: type=1804 audit(1618682263.837:598): pid=19337 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/194/file0/bus" dev="ramfs" ino=50509 res=1 errno=0 17:57:43 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}}, 0xc001) [ 552.361136][ T5] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 552.370672][ T5] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.382343][T19341] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 552.400855][ T5] usb 4-1: Product: syz [ 552.405287][ T5] usb 4-1: Manufacturer: syz [ 552.409982][ T5] usb 4-1: SerialNumber: syz 17:57:43 executing program 5: syz_mount_image$afs(&(0x7f00000006c0)='afs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)) 17:57:44 executing program 1: clone3(&(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) clone3(&(0x7f0000001840)={0x2081000, 0x0, 0x0, 0x0, {}, &(0x7f0000000100)=""/104, 0x68, &(0x7f0000000180)=""/11, 0x0}, 0x58) 17:57:44 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x208200) r1 = getpid() sched_setscheduler(r1, 0x0, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) getpid() read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) 17:57:44 executing program 0: keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f00000030c0)=""/12, 0xc) 17:57:44 executing program 3: ioperm(0x1, 0xfff, 0x68) 17:57:44 executing program 5: r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000740)={'macvtap0\x00', &(0x7f00000006c0)=@ethtool_gfeatures={0x3a, 0x7, [{}, {}, {}, {}, {}, {}, {}]}}) 17:57:44 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, 0x0) [ 552.656331][T18192] usb 4-1: USB disconnect, device number 21 [ 552.705267][ T37] audit: type=1804 audit(1618682264.227:599): pid=19371 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/195/file0/bus" dev="ramfs" ino=50026 res=1 errno=0 17:57:44 executing program 0: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/dlm_plock\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fec000/0x14000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x0) 17:57:44 executing program 3: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00', 0x0, 0x8}, 0x10) [ 552.803414][T19381] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 552.819486][ T37] audit: type=1804 audit(1618682264.227:600): pid=19371 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/195/file0/bus" dev="ramfs" ino=50026 res=1 errno=0 17:57:44 executing program 4: openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/hwrng\x00', 0x262882, 0x0) 17:57:44 executing program 1: getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) 17:57:44 executing program 5: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x4}}]}}, 0x0) 17:57:44 executing program 0: prctl$PR_SVE_GET_VL(0x33, 0x410e) prctl$PR_SVE_GET_VL(0x33, 0x9439) migrate_pages(0x0, 0xb6, &(0x7f00000002c0)=0x3, &(0x7f0000000300)=0x7fffffff) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) clone3(&(0x7f0000001680)={0x241007800, 0x0, &(0x7f0000000540), &(0x7f0000000580), {0xe}, &(0x7f00000005c0)=""/4096, 0x1000, 0x0, &(0x7f0000001640)=[0x0, 0x0, 0x0], 0x3}, 0x58) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000001a80)='/proc/thread-self\x00', 0x800, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000001ac0)='/proc/self\x00', 0x802, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000001b00)='/dev/loop-control\x00', 0x101000, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) [ 553.046539][ T37] audit: type=1804 audit(1618682264.227:601): pid=19371 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/195/file0/bus" dev="ramfs" ino=50026 res=1 errno=0 17:57:44 executing program 3: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:57:44 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/hwrng\x00', 0x262882, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r0, 0xc0984124, 0x0) 17:57:44 executing program 1: bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0xffffffffffffff57) 17:57:44 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x208200) r1 = getpid() sched_setscheduler(r1, 0x0, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) getpid() read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) 17:57:44 executing program 3: socketpair(0x27, 0x0, 0x0, &(0x7f0000000480)) 17:57:44 executing program 1: syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00', 0xffffffffffffffff) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) syz_mount_image$afs(&(0x7f00000006c0)='afs\x00', 0x0, 0x0, 0x0, &(0x7f0000000800), 0x0, &(0x7f0000000840)) 17:57:44 executing program 0: syz_genetlink_get_family_id$batadv(&(0x7f0000000340)='batadv\x00', 0xffffffffffffffff) [ 553.360790][ T9475] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 553.377360][ T37] audit: type=1804 audit(1618682264.897:602): pid=19414 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/196/file0/bus" dev="ramfs" ino=50061 res=1 errno=0 17:57:44 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000042c0)={0x0, 0x0, 0x0, &(0x7f00000040c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) 17:57:45 executing program 3: syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x410000) [ 553.462169][T19416] overlayfs: unrecognized mount option "context=staff_u" or missing value 17:57:45 executing program 0: process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 553.515141][ T37] audit: type=1804 audit(1618682264.897:603): pid=19414 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/196/file0/bus" dev="ramfs" ino=50061 res=1 errno=0 [ 553.660829][ T9475] usb 6-1: Using ep0 maxpacket: 8 [ 553.697760][ T37] audit: type=1804 audit(1618682264.897:604): pid=19414 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/196/file0/bus" dev="ramfs" ino=50061 res=1 errno=0 [ 553.811118][ T9475] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 553.991118][ T9475] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 554.014840][ T9475] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.034064][ T9475] usb 6-1: Product: syz [ 554.045187][ T9475] usb 6-1: Manufacturer: syz [ 554.049923][ T9475] usb 6-1: SerialNumber: syz [ 554.373774][ T9475] usb 6-1: USB disconnect, device number 7 [ 555.110825][ T5] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 555.381018][ T5] usb 6-1: Using ep0 maxpacket: 8 [ 555.531168][ T5] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 555.700743][ T5] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 555.712949][ T5] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.721765][ T5] usb 6-1: Product: syz [ 555.725941][ T5] usb 6-1: Manufacturer: syz [ 555.731086][ T5] usb 6-1: SerialNumber: syz 17:57:47 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$eventfd(r0, &(0x7f0000000040), 0x8) 17:57:47 executing program 1: openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x171001, 0x0) 17:57:47 executing program 4: syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00', 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00', 0x0, 0x8}, 0x10) bpf$ITER_CREATE(0x21, 0x0, 0x0) syz_mount_image$afs(0x0, &(0x7f0000000700)='./file0\x00', 0x5, 0x1, &(0x7f0000000800)=[{&(0x7f0000000740)="1ed938c91af4fa9d2f6480a31b74117b2ab119bdb41e8fde70d77b862bc495c71b2631f219dd1f5a21407d1c2491927207f5c589aab86238edf1a1c26c9edb3d1939104f", 0x44, 0x23}], 0x800000, &(0x7f0000000840)={[{@flock_strict='flock=strict'}, {@autocell='autocell'}, {@dyn='dyn'}, {@dyn='dyn'}, {@dyn='dyn'}, {@autocell='autocell'}, {@flock_local='flock=local'}]}) 17:57:47 executing program 0: clone3(&(0x7f00000011c0)={0x2900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:57:47 executing program 3: perf_event_open$cgroup(&(0x7f0000000200)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 17:57:47 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x208200) r1 = getpid() sched_setscheduler(r1, 0x0, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) getpid() read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) [ 556.032438][ T5] usb 6-1: USB disconnect, device number 8 17:57:47 executing program 0: pselect6(0x40, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)={0x0, 0x3938700}, 0x0) [ 556.075212][ T37] audit: type=1804 audit(1618682267.598:605): pid=19470 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/197/file0/bus" dev="ramfs" ino=50639 res=1 errno=0 17:57:47 executing program 3: clone3(&(0x7f00000012c0)={0x2000100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:57:47 executing program 5: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 556.165136][ T37] audit: type=1804 audit(1618682267.658:606): pid=19470 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/197/file0/bus" dev="ramfs" ino=50639 res=1 errno=0 17:57:47 executing program 1: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10) syz_mount_image$afs(&(0x7f00000006c0)='afs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000000800), 0x0, &(0x7f0000000840)={[{@autocell='autocell'}]}) [ 556.226120][T19485] overlayfs: unrecognized mount option "context=staff_u" or missing value 17:57:47 executing program 3: syz_mount_image$erofs(0x0, 0x0, 0x0, 0x3, &(0x7f0000002480)=[{&(0x7f0000000080)="cecd87a5859b685b9a661abcb50af2572f3b06b294d29f1e71def3d8e243b9183e94106bdf68cb7c9f5781c1435732bb1db3bf547b59a52932a39b583eba98b11a45e195c5eef0d8b677b459f044528abfd4401473c793b4de8732e8f03fca920074791f53381f8aa759758bc494285afd578cdb6ab7b6b897425ec563fd66ba21c185aae19cc56357ea617880a6b3ac8b9365e8696ecb81871ddc5beca33f487b", 0xa1, 0x8001}, {&(0x7f00000022c0)="87", 0x1, 0xe8000000000000}, {&(0x7f0000002400)='?', 0x1, 0x80000001}], 0x0, 0x0) [ 556.398987][ T37] audit: type=1804 audit(1618682267.678:607): pid=19470 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/197/file0/bus" dev="ramfs" ino=50639 res=1 errno=0 17:57:48 executing program 4: syz_usb_connect$printer(0x50a21a1ed22616c8, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) 17:57:48 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 556.482792][T19501] kAFS: unparsable volume name 17:57:48 executing program 5: syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0)='l2tp\x00', 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) 17:57:48 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x208200) r1 = getpid() sched_setscheduler(r1, 0x0, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x11, r2, 0x0) getpid() read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) [ 556.523764][T19502] loop3: detected capacity change from 0 to 264192 17:57:48 executing program 0: syz_mount_image$afs(&(0x7f00000006c0)='afs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={[{@flock_strict='flock=strict'}, {@autocell='autocell'}, {@dyn='dyn'}]}) 17:57:48 executing program 1: clone3(&(0x7f00000001c0)={0x129000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:57:48 executing program 5: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$SIOCX25GCAUSEDIAG(r0, 0x89e6, &(0x7f0000000040)={0x99, 0x9}) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0x80001, 0x0) r2 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x5, 0x67, 0x0, 0x5, 0x0, 0x4, 0x8000, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x81, 0x2, @perf_config_ext={0x7fff, 0x3}, 0x4a5, 0x0, 0x2, 0x3, 0xffbe, 0x100000, 0x193f}, 0x0, 0xf, r1, 0x1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) prctl$PR_MCE_KILL_GET(0x22) prctl$PR_MCE_KILL_GET(0x22) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, 0x0, 0x10, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x5}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x57}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x4044004) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000300)=@req3={0x8, 0x7f, 0xffffff61, 0x1, 0x74, 0x3ff, 0x3}, 0x1c) syz_genetlink_get_family_id$batadv(&(0x7f0000000340)='batadv\x00', r2) accept$packet(r1, 0x0, &(0x7f0000000380)) syz_genetlink_get_family_id$batadv(&(0x7f00000003c0)='batadv\x00', r1) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000400)=@req={0x3, 0x0, 0xd32, 0x1}, 0x10) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0xcb82bc3840b3ca43}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x50, 0x4, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}}, 0x4000000) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x74, 0x4, 0x8, 0x3, 0x0, 0x0, {0x3, 0x0, 0x6}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0x1ff}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0x7fffffff}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x3ff}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0xc6}, @CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0x10000}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0x7fffffff}, @CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffffff9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x101}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4004004}, 0x4000) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x70, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x20008081}, 0x1) syz_genetlink_get_family_id$devlink(&(0x7f0000000840)='devlink\x00', 0xffffffffffffffff) [ 556.641504][T19502] loop3: detected capacity change from 0 to 264192 17:57:48 executing program 0: syz_genetlink_get_family_id$nl802154(&(0x7f0000000140)='nl802154\x00', 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x10, 0x3f2, 0x300, 0x0, 0x25dfdbfd, "", [""]}, 0x10}}, 0x4041) 17:57:48 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x208200) r1 = getpid() sched_setscheduler(r1, 0x0, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x11, r2, 0x0) getpid() read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) 17:57:48 executing program 3: fsopen(&(0x7f0000000000)='ocfs2\x00', 0x0) 17:57:48 executing program 1: ioctl$SOUND_MIXER_READ_DEVMASK(0xffffffffffffffff, 0x80044dfe, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dsp1\x00', 0x0, 0x0) read$dsp(r0, &(0x7f00000002c0)=""/18, 0x12) socket$isdn_base(0x22, 0x3, 0x0) 17:57:48 executing program 5: socketpair(0x2a, 0x0, 0x0, &(0x7f0000002140)) 17:57:48 executing program 4: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:57:48 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x127b) 17:57:48 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, 0x0) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x3f) 17:57:48 executing program 5: r0 = epoll_create1(0x0) r1 = gettid() r2 = gettid() kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f0000000040)) 17:57:48 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x208200) r1 = getpid() sched_setscheduler(r1, 0x0, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x11, r2, 0x0) getpid() read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) 17:57:48 executing program 0: bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000003c0)=0xffffffffffffffff, 0x4) 17:57:48 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKREPORTZONE(r0, 0x2, &(0x7f0000000040)) 17:57:48 executing program 5: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x4402) 17:57:48 executing program 4: io_setup(0xd87, &(0x7f0000000000)=0x0) io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 17:57:48 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x208200) r1 = getpid() sched_setscheduler(r1, 0x0, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r2, 0x0) getpid() read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) 17:57:49 executing program 1: openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x105047, 0x0) 17:57:49 executing program 0: io_setup(0x11, &(0x7f00000000c0)=0x0) io_submit(r0, 0x0, 0x0) 17:57:49 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x80081272) 17:57:49 executing program 3: r0 = socket$inet6(0xa, 0x5, 0x0) poll(&(0x7f0000000100)=[{r0, 0x684}], 0x1, 0x0) [ 557.484537][ T37] kauditd_printk_skb: 6 callbacks suppressed [ 557.484551][ T37] audit: type=1804 audit(1618682269.008:614): pid=19580 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/201/file0/bus" dev="ramfs" ino=51253 res=1 errno=0 17:57:49 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0xc020660b) [ 557.645849][T19591] overlayfs: unrecognized mount option "context=staff_u" or missing value 17:57:49 executing program 3: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x46000, 0x0) 17:57:49 executing program 0: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r1, &(0x7f0000000200)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x0) 17:57:49 executing program 1: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000f80)={0x0, 0x9, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "56d6031c"}, 0x0, 0x0, @planes=&(0x7f0000000500)={0x0, 0x0, @userptr}, 0x7}) [ 557.710016][ T37] audit: type=1804 audit(1618682269.078:615): pid=19580 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/201/file0/bus" dev="ramfs" ino=51253 res=1 errno=0 17:57:49 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) 17:57:49 executing program 4: syz_usbip_server_init(0x3) syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) 17:57:49 executing program 3: mq_open(&(0x7f0000000140)='/ ', 0x0, 0x0, 0x0) [ 558.015055][ T37] audit: type=1804 audit(1618682269.088:616): pid=19580 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/201/file0/bus" dev="ramfs" ino=51253 res=1 errno=0 17:57:49 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x208200) r1 = getpid() sched_setscheduler(r1, 0x0, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r2, 0x0) getpid() read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) 17:57:49 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, 0x0) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x0) 17:57:49 executing program 0: openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x1, 0x0) 17:57:49 executing program 5: syz_open_dev$loop(0x0, 0x0, 0x0) syz_usbip_server_init(0x0) [ 558.060768][T19606] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 558.067369][T19606] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 558.096388][T19606] vhci_hcd vhci_hcd.0: Device attached 17:57:49 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x5) [ 558.125220][T19608] vhci_hcd: connection closed [ 558.125566][T11688] vhci_hcd: stop threads [ 558.134936][T11688] vhci_hcd: release socket [ 558.153216][T11688] vhci_hcd: disconnect device 17:57:49 executing program 1: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x2, 0x40) 17:57:49 executing program 0: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000f80)={0x0, 0x9, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "56d6031c"}, 0x0, 0x0, @planes=0x0}) [ 558.176544][T19618] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN 17:57:49 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x5421) [ 558.256967][ T37] audit: type=1804 audit(1618682269.778:617): pid=19622 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/202/file0/bus" dev="ramfs" ino=51307 res=1 errno=0 17:57:49 executing program 1: openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x64782, 0x0) 17:57:49 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c03) [ 558.375880][ T37] audit: type=1804 audit(1618682269.828:618): pid=19622 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/202/file0/bus" dev="ramfs" ino=51307 res=1 errno=0 [ 558.383471][T19631] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 558.539670][ T37] audit: type=1804 audit(1618682269.828:619): pid=19622 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/202/file0/bus" dev="ramfs" ino=51307 res=1 errno=0 [ 558.654899][T19606] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(3) [ 558.661823][T19606] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 558.709323][T19638] vhci_hcd: connection closed [ 558.715690][T19606] vhci_hcd vhci_hcd.0: Device attached 17:57:50 executing program 4: syz_usbip_server_init(0x3) syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) 17:57:50 executing program 3: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x92d9, 0x0) [ 558.793898][T11711] vhci_hcd: stop threads [ 558.799571][T11711] vhci_hcd: release socket [ 558.819901][T11711] vhci_hcd: disconnect device 17:57:50 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x208200) r1 = getpid() sched_setscheduler(r1, 0x0, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r2, 0x0) getpid() read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) 17:57:50 executing program 0: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x200, 0x24080) 17:57:50 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x127f) 17:57:50 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dri/renderD128\x00', 0x40240, 0x0) 17:57:50 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x125e) [ 558.914584][T19647] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 558.921205][T19647] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 558.980582][T19647] vhci_hcd vhci_hcd.0: Device attached [ 559.013851][T19651] vhci_hcd: connection closed [ 559.014314][T11702] vhci_hcd: stop threads 17:57:50 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) [ 559.030668][T11702] vhci_hcd: release socket [ 559.046438][ T37] audit: type=1804 audit(1618682270.558:620): pid=19659 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/203/file0/bus" dev="ramfs" ino=50846 res=1 errno=0 17:57:50 executing program 0: r0 = epoll_create1(0x0) r1 = gettid() r2 = gettid() r3 = epoll_create1(0x0) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f0000000040)={r3}) 17:57:50 executing program 1: io_uring_setup(0x614c, &(0x7f0000000040)) io_uring_setup(0x3444, &(0x7f00000000c0)={0x0, 0x0, 0x2, 0x0, 0x32b}) [ 559.080293][T11702] vhci_hcd: disconnect device [ 559.152021][ T37] audit: type=1804 audit(1618682270.658:621): pid=19666 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/203/file0/bus" dev="ramfs" ino=50846 res=1 errno=0 17:57:50 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, 0x0) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x0) 17:57:50 executing program 0: socketpair(0xb, 0x0, 0x0, &(0x7f00000001c0)) [ 559.196519][T19666] overlayfs: unrecognized mount option "context=staff_u" or missing value [ 559.296573][ T37] audit: type=1804 audit(1618682270.658:622): pid=19659 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/203/file0/bus" dev="ramfs" ino=50846 res=1 errno=0 17:57:51 executing program 4: unshare(0x400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000000c0)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f0000000180)={0x0, 0x1, 0x2, 0x0}) 17:57:51 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000004140)={0x0, 0x0, 0x0}, 0x0) 17:57:51 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x208200) r1 = getpid() sched_setscheduler(r1, 0x0, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, 0xffffffffffffffff, 0x0) getpid() read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) 17:57:51 executing program 1: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000080)={0x0, 0xc, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "ae10ebf0"}, 0x0, 0x0, @userptr}) 17:57:51 executing program 3: openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcsu\x00', 0xf03, 0x0) 17:57:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000004140)={0x0, 0x0, &(0x7f0000004100)={0x0, 0x60}}, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000500)='wireguard\x00', r0) 17:57:51 executing program 4: unshare(0x400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000000c0)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f0000000180)={0x0, 0x1, 0x2, 0x0}) 17:57:51 executing program 5: syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) io_setup(0x200, &(0x7f0000000040)) syz_open_dev$loop(0x0, 0x0, 0x0) 17:57:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000004140)={0x0, 0x0, &(0x7f0000004100)={0x0, 0x60}}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000500)='wireguard\x00', 0xffffffffffffffff) 17:57:51 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x10d681) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) 17:57:51 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsu\x00', 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, &(0x7f0000000380)) 17:57:51 executing program 4: unshare(0x400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000000c0)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f0000000180)={0x0, 0x1, 0x2, 0x0}) [ 559.829749][ T37] audit: type=1804 audit(1618682271.338:623): pid=19703 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir147766849/syzkaller.SRaEle/204/file0/bus" dev="ramfs" ino=51405 res=1 errno=0 17:57:51 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0xc0101282) 17:57:51 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 559.998553][T19716] overlayfs: unrecognized mount option "context=staff_u" or missing value 17:57:52 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x208200) r1 = getpid() sched_setscheduler(r1, 0x0, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, 0xffffffffffffffff, 0x0) getpid() read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f00000001c0)={[{@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@xino_auto='xino=auto'}], [{@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) 17:57:52 executing program 3: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsu\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00', r0) 17:57:52 executing program 4: unshare(0x400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000000c0)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f0000000180)={0x0, 0x1, 0x2, 0x0}) 17:57:52 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0xc0481273) 17:57:52 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x3f) 17:57:52 executing program 1: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b0f000000000000002b00001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800400018008000400000000000800050000000000"], 0xa4}}, 0x0) [ 560.605943][T19738] ------------[ cut here ]------------ [ 560.612065][T19738] WARNING: CPU: 1 PID: 19738 at net/sched/sch_taprio.c:999 taprio_change+0x4ce7/0x5830 [ 560.623540][T19738] Modules linked in: [ 560.627469][T19738] CPU: 1 PID: 19738 Comm: syz-executor.1 Not tainted 5.12.0-rc7-syzkaller #0 [ 560.636321][T19738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 560.646495][T19738] RIP: 0010:taprio_change+0x4ce7/0x5830 17:57:52 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x5451) [ 560.652301][T19738] Code: f4 b9 ff ff e8 ca bc bb f9 48 8b bc 24 a0 00 00 00 be 03 00 00 00 e8 88 54 17 fc 49 bc 00 00 00 00 00 fc ff df e9 1b eb ff ff <0f> 0b 48 c7 c7 a0 6e d5 8a e8 fb b4 06 00 48 83 7c 24 10 00 0f 84 [ 560.672032][T19738] RSP: 0018:ffffc900074df440 EFLAGS: 00010246 [ 560.678138][T19738] RAX: 0000000000000002 RBX: 0000000000000000 RCX: 1ffff11005c35696 [ 560.692849][T19738] RDX: ffff88801f680000 RSI: 0000000000000000 RDI: 0000000000000000 [ 560.702510][T19738] RBP: ffffc900074df610 R08: ffffffff87bd5624 R09: fffffbfff1f270cc [ 560.710583][T19738] R10: fffffbfff1f270cc R11: 0000000000000000 R12: dffffc0000000000 [ 560.718585][T19738] R13: 0000000000000000 R14: ffffffff87bda400 R15: 1676b6f34ac654b9 [ 560.726847][T19738] FS: 00007fd0c47c6700(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 560.736448][T19738] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 560.743303][T19738] CR2: 0000001b2ee22000 CR3: 00000000130c6000 CR4: 00000000001526e0 [ 560.752549][T19738] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 560.761312][T19738] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 560.769621][T19738] Call Trace: [ 560.773136][T19738] ? rtnl_is_locked+0x11/0x20 [ 560.777961][T19738] ? taprio_peek+0x40/0x40 [ 560.782482][T19738] qdisc_create+0x7d3/0x1510 [ 560.787119][T19738] ? __nla_parse+0x3c/0x50 [ 560.791806][T19738] tc_modify_qdisc+0x97f/0x1e40 [ 560.797013][T19738] ? rcu_lock_release+0x20/0x20 17:57:52 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000000040)) [ 560.802363][T19738] rtnetlink_rcv_msg+0x895/0xd50 [ 560.807563][T19738] ? __local_bh_enable_ip+0xf8/0x170 [ 560.813196][T19738] ? lockdep_hardirqs_on+0x8d/0x130 [ 560.818421][T19738] ? local_bh_enable+0x5/0x20 [ 560.823197][T19738] ? __local_bh_enable_ip+0xf8/0x170 [ 560.828869][T19738] ? __dev_queue_xmit+0x1960/0x2a50 [ 560.834235][T19738] netlink_rcv_skb+0x190/0x3a0 [ 560.839025][T19738] ? rtnetlink_bind+0x80/0x80 [ 560.843815][T19738] netlink_unicast+0x786/0x940 [ 560.848606][T19738] netlink_sendmsg+0x9ae/0xd50 [ 560.853496][T19738] ? netlink_getsockopt+0xa50/0xa50 [ 560.858720][T19738] ____sys_sendmsg+0x519/0x800 [ 560.863694][T19738] ? import_iovec+0xe6/0x120 [ 560.868320][T19738] __sys_sendmsg+0x2bf/0x370 [ 560.873032][T19738] ? __context_tracking_exit+0x7a/0xd0 [ 560.878543][T19738] ? syscall_enter_from_user_mode+0x2e/0x1c0 [ 560.884622][T19738] ? lockdep_hardirqs_on+0x8d/0x130 [ 560.889916][T19738] ? syscall_enter_from_user_mode+0x2e/0x1c0 [ 560.897573][T19738] do_syscall_64+0x2d/0x70 17:57:52 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0}) [ 560.902088][T19738] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 560.908027][T19738] RIP: 0033:0x466459 [ 560.912112][T19738] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 560.931806][T19738] RSP: 002b:00007fd0c47c6188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 560.940316][T19738] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 560.948429][T19738] RDX: 0000000000000000 RSI: 00000000200007c0 RDI: 0000000000000005 [ 560.956694][T19738] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 560.964931][T19738] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 560.972996][T19738] R13: 00007fff6be9331f R14: 00007fd0c47c6300 R15: 0000000000022000 [ 560.981062][T19738] Kernel panic - not syncing: panic_on_warn set ... [ 560.987662][T19738] CPU: 1 PID: 19738 Comm: syz-executor.1 Not tainted 5.12.0-rc7-syzkaller #0 [ 560.996433][T19738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 561.006506][T19738] Call Trace: [ 561.009784][T19738] dump_stack+0x176/0x24e [ 561.014114][T19738] panic+0x291/0x800 [ 561.018003][T19738] ? __warn+0x13e/0x270 [ 561.022149][T19738] __warn+0x26a/0x270 [ 561.026125][T19738] ? taprio_change+0x4ce7/0x5830 [ 561.031257][T19738] ? taprio_change+0x4ce7/0x5830 [ 561.036183][T19738] report_bug+0x1b1/0x2e0 [ 561.040520][T19738] handle_bug+0x3d/0x70 [ 561.044669][T19738] exc_invalid_op+0x16/0x40 [ 561.049168][T19738] asm_exc_invalid_op+0x12/0x20 [ 561.054004][T19738] RIP: 0010:taprio_change+0x4ce7/0x5830 [ 561.059559][T19738] Code: f4 b9 ff ff e8 ca bc bb f9 48 8b bc 24 a0 00 00 00 be 03 00 00 00 e8 88 54 17 fc 49 bc 00 00 00 00 00 fc ff df e9 1b eb ff ff <0f> 0b 48 c7 c7 a0 6e d5 8a e8 fb b4 06 00 48 83 7c 24 10 00 0f 84 [ 561.079351][T19738] RSP: 0018:ffffc900074df440 EFLAGS: 00010246 [ 561.085410][T19738] RAX: 0000000000000002 RBX: 0000000000000000 RCX: 1ffff11005c35696 [ 561.093381][T19738] RDX: ffff88801f680000 RSI: 0000000000000000 RDI: 0000000000000000 [ 561.102119][T19738] RBP: ffffc900074df610 R08: ffffffff87bd5624 R09: fffffbfff1f270cc [ 561.110090][T19738] R10: fffffbfff1f270cc R11: 0000000000000000 R12: dffffc0000000000 [ 561.118048][T19738] R13: 0000000000000000 R14: ffffffff87bda400 R15: 1676b6f34ac654b9 [ 561.126194][T19738] ? taprio_dequeue_soft+0xa00/0xa00 [ 561.131680][T19738] ? taprio_change+0x43e4/0x5830 [ 561.137057][T19738] ? rtnl_is_locked+0x11/0x20 [ 561.141735][T19738] ? taprio_peek+0x40/0x40 [ 561.146138][T19738] qdisc_create+0x7d3/0x1510 [ 561.150740][T19738] ? __nla_parse+0x3c/0x50 [ 561.155147][T19738] tc_modify_qdisc+0x97f/0x1e40 [ 561.160024][T19738] ? rcu_lock_release+0x20/0x20 [ 561.164862][T19738] rtnetlink_rcv_msg+0x895/0xd50 [ 561.169802][T19738] ? __local_bh_enable_ip+0xf8/0x170 [ 561.175080][T19738] ? lockdep_hardirqs_on+0x8d/0x130 [ 561.180269][T19738] ? local_bh_enable+0x5/0x20 [ 561.185115][T19738] ? __local_bh_enable_ip+0xf8/0x170 [ 561.190505][T19738] ? __dev_queue_xmit+0x1960/0x2a50 [ 561.195965][T19738] netlink_rcv_skb+0x190/0x3a0 [ 561.200809][T19738] ? rtnetlink_bind+0x80/0x80 [ 561.205522][T19738] netlink_unicast+0x786/0x940 [ 561.210281][T19738] netlink_sendmsg+0x9ae/0xd50 [ 561.215067][T19738] ? netlink_getsockopt+0xa50/0xa50 [ 561.220253][T19738] ____sys_sendmsg+0x519/0x800 [ 561.225030][T19738] ? import_iovec+0xe6/0x120 [ 561.229626][T19738] __sys_sendmsg+0x2bf/0x370 [ 561.234568][T19738] ? __context_tracking_exit+0x7a/0xd0 [ 561.240283][T19738] ? syscall_enter_from_user_mode+0x2e/0x1c0 [ 561.246360][T19738] ? lockdep_hardirqs_on+0x8d/0x130 [ 561.251551][T19738] ? syscall_enter_from_user_mode+0x2e/0x1c0 [ 561.257518][T19738] do_syscall_64+0x2d/0x70 [ 561.261944][T19738] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 561.267821][T19738] RIP: 0033:0x466459 [ 561.271704][T19738] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 561.291919][T19738] RSP: 002b:00007fd0c47c6188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 561.300425][T19738] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 561.308554][T19738] RDX: 0000000000000000 RSI: 00000000200007c0 RDI: 0000000000000005 [ 561.320542][T19738] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 561.329975][T19738] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 561.338096][T19738] R13: 00007fff6be9331f R14: 00007fd0c47c6300 R15: 0000000000022000 [ 561.348054][T19738] Kernel Offset: disabled [ 561.352635][T19738] Rebooting in 86400 seconds..