\x00') sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000000080)={0x14, r2, 0x1, 0x0, 0x0, {0x12}}, 0x14}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x158, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_BEARER={0x134, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e21, @private=0xa010101}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x2, @mcast1, 0x80000000}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x3, @local}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e21, @local}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}]}, 0x158}}, 0x41) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8900000, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/icmp6\x00') ioctl$VT_ACTIVATE(r3, 0x5606, 0x0) [ 408.337379][ T8850] usb 1-1: USB disconnect, device number 5 [ 408.643446][ T9087] IPVS: ftp: loaded support on port[0] = 21 [ 408.975208][ T8850] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 409.388813][ T8850] usb 1-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice=e0.d8 [ 409.398203][ T8850] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.592397][ T8850] usb 1-1: config 0 descriptor?? [ 409.673348][ T8850] emi26 - firmware loader 1-1:0.0: emi26_probe start [ 409.681175][ T8850] usb 1-1: Direct firmware load for emi26/loader.fw failed with error -2 [ 409.690046][ T8850] usb 1-1: emi26_load_firmware - request_firmware() failed [ 409.697568][ T8850] usb 1-1: emi26_load_firmware - error loading firmware: error = -2 [ 409.706064][ T8850] emi26 - firmware loader: probe of 1-1:0.0 failed with error -5 11:32:35 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000001c0)=@req3={0x10000, 0xff, 0x10000, 0xff}, 0x1c) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040), 0x10) r1 = openat$btrfs_control(0xffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x4080, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="0400c20400f9ff02c20400f1ff197e000000"], 0x18) [ 410.049781][ T8850] usb 1-1: USB disconnect, device number 6 11:32:36 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a2e5f9406a080001d8e0000000010902120001000000200904"], 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000000080)=[{{&(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10, 0x0}}, {{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0xf, 0x0}}], 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x401, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xa9}, 0x1c) 11:32:36 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18d959b5e05f798cd60000000000000000000000000000049d2ffd5900000000"], &(0x7f0000000080)='syzkaller\x00', 0x6, 0x8f, &(0x7f0000000240)=""/143, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 11:32:36 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$qnx6(&(0x7f0000000040)='qnx6\x00', &(0x7f0000000140)='./file0\x00', 0x2, 0x0, &(0x7f00000001c0), 0x80002, &(0x7f0000000300)={[{'bridge\x00'}, {'bridge\x00'}, {'bridge\x00'}], [{@func={'func', 0x3d, 'FILE_CHECK'}}]}) r2 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r3, @ANYBLOB="0174000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000091efdb9305b8c5dbd91000396c000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c0002800600270000000000"], 0x3c}}, 0x0) [ 410.723439][ T8850] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 411.031127][ T9133] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 411.039938][ T9133] netlink: 'syz-executor.1': attribute type 39 has an invalid length. [ 411.093439][ T8850] usb 1-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice=e0.d8 [ 411.103428][ T8850] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.140999][ T8850] usb 1-1: config 0 descriptor?? [ 411.197529][ T8850] emi26 - firmware loader 1-1:0.0: emi26_probe start [ 411.205782][ T8850] usb 1-1: Direct firmware load for emi26/loader.fw failed with error -2 [ 411.214823][ T8850] usb 1-1: emi26_load_firmware - request_firmware() failed [ 411.222160][ T8850] usb 1-1: emi26_load_firmware - error loading firmware: error = -2 [ 411.230545][ T8850] emi26 - firmware loader: probe of 1-1:0.0 failed with error -5 [ 411.244532][ T9138] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 411.252737][ T9138] netlink: 'syz-executor.1': attribute type 39 has an invalid length. [ 411.440705][ T8850] usb 1-1: USB disconnect, device number 7 11:32:37 executing program 1: r0 = socket(0x2, 0x2, 0x0) r1 = epoll_create1(0x0) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) socket(0x28, 0x5, 0x7fff) ftruncate(r2, 0x8200) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f) openat$full(0xffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x600080, 0x0) openat$dlm_plock(0xffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x24000, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000180)={0x8ceb6d73a8b3e350}) r3 = openat$nvram(0xffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x4000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000040)) epoll_wait(r1, &(0x7f000000affb)=[{}], 0x1701, 0xfffffffffffffef7) pkey_mprotect(&(0x7f000000b000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) shutdown(r0, 0x1) r4 = openat$proc_capi20(0xffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x80840, 0x0) ioctl$SIOCX25SFACILITIES(r4, 0x89e3, &(0x7f0000000100)={0x66, 0x9, 0x5, 0xa, 0x4, 0x81}) r5 = dup3(r0, r1, 0x0) shutdown(r5, 0x0) 11:32:38 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, 0x0) lseek(r1, 0x0, 0x2) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={r2}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x74, r4, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0x10, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x8}, @NL80211_ATTR_SCAN_SUPP_RATES={0x40, 0x7d, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x22, 0x3, "0ed08feda201d631498f81063863d1c2aa4d1df975bfd28de1d154ebfaed"}, @NL80211_BAND_60GHZ={0x18, 0x2, "cddea76e97ca0d9c0c7d00a2a258fdbaad8c59e4"}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000080}, 0x4000) [ 412.234174][ T32] audit: type=1800 audit(1608118358.154:2): pid=9158 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15761 res=0 errno=0 [ 412.270644][ T32] audit: type=1804 audit(1608118358.194:3): pid=9158 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/26/bus" dev="sda1" ino=15761 res=1 errno=0 [ 412.295846][ T32] audit: type=1800 audit(1608118358.194:4): pid=9158 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15761 res=0 errno=0 11:32:38 executing program 1: ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000080)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030002, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="20000000600100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000000140)="ed41000001813da47d64053bde904da3dab2f80800000000000000880c7100040000d7f4655fd7f4", 0x28, 0x8c7c}], 0x0, &(0x7f0000013800)) [ 413.047689][ T32] audit: type=1804 audit(1608118358.974:5): pid=9159 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/26/bus" dev="sda1" ino=15761 res=1 errno=0 [ 413.157084][ T32] audit: type=1804 audit(1608118359.014:6): pid=9160 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/26/bus" dev="sda1" ino=15761 res=1 errno=0 [ 413.183051][ T32] audit: type=1800 audit(1608118359.014:7): pid=9160 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15761 res=0 errno=0 11:32:39 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, 0x0) lseek(r1, 0x0, 0x2) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={r2}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x74, r4, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0x10, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x8}, @NL80211_ATTR_SCAN_SUPP_RATES={0x40, 0x7d, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x22, 0x3, "0ed08feda201d631498f81063863d1c2aa4d1df975bfd28de1d154ebfaed"}, @NL80211_BAND_60GHZ={0x18, 0x2, "cddea76e97ca0d9c0c7d00a2a258fdbaad8c59e4"}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000080}, 0x4000) [ 413.414531][ T9166] EXT4-fs error (device loop1): ext4_fill_super:4958: inode #2: comm syz-executor.1: casefold flag without casefold feature [ 413.498224][ T9166] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 413.505104][ T9166] EXT4-fs (loop1): mount failed [ 413.633579][ T32] audit: type=1800 audit(1608118359.554:8): pid=9173 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15764 res=0 errno=0 11:32:39 executing program 1: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, 0x0) lseek(r1, 0x0, 0x2) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={r2}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x74, r4, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0x10, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x8}, @NL80211_ATTR_SCAN_SUPP_RATES={0x40, 0x7d, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x22, 0x3, "0ed08feda201d631498f81063863d1c2aa4d1df975bfd28de1d154ebfaed"}, @NL80211_BAND_60GHZ={0x18, 0x2, "cddea76e97ca0d9c0c7d00a2a258fdbaad8c59e4"}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000080}, 0x4000) [ 413.703435][ T32] audit: type=1804 audit(1608118359.584:9): pid=9174 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/27/bus" dev="sda1" ino=15764 res=1 errno=0 [ 413.728630][ T32] audit: type=1800 audit(1608118359.584:10): pid=9174 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15764 res=0 errno=0 [ 414.081845][ T32] audit: type=1800 audit(1608118360.004:11): pid=9178 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=15691 res=0 errno=0 11:32:40 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, 0x0) lseek(r1, 0x0, 0x2) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={r2}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x74, r4, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0x10, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x8}, @NL80211_ATTR_SCAN_SUPP_RATES={0x40, 0x7d, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x22, 0x3, "0ed08feda201d631498f81063863d1c2aa4d1df975bfd28de1d154ebfaed"}, @NL80211_BAND_60GHZ={0x18, 0x2, "cddea76e97ca0d9c0c7d00a2a258fdbaad8c59e4"}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000080}, 0x4000) 11:32:40 executing program 1: syz_emit_ethernet(0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0) 11:32:41 executing program 1: init_module(&(0x7f0000000000)='gid', 0x3, &(0x7f0000000040)='},+!\x00') syz_mount_image$hfs(&(0x7f0000003940)='hfs\x00', &(0x7f0000003980)='./file0\x00', 0x0, 0x7a, &(0x7f0000005e00), 0x0, &(0x7f0000005ec0)={[{@gid={'gid', 0x3d, 0xffffffffffffffff}}]}) [ 415.843224][ T9191] hfs: unable to parse mount options 11:32:41 executing program 1: setrlimit(0x5, &(0x7f0000000000)={0x0, 0x5}) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000000080)=[{{&(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10, 0x0}}, {{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0xf, 0x0}}], 0x2, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f2, 0x2, 0x70bd27, 0x25dfdbff, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4004000}, 0x4004) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) ioctl$VIDIOC_G_PRIORITY(0xffffffffffffffff, 0x80045643, 0x2) syz_init_net_socket$x25(0x6, 0x5, 0x0) 11:32:42 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, 0x0) lseek(r1, 0x0, 0x2) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={r2}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x74, r4, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0x10, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x8}, @NL80211_ATTR_SCAN_SUPP_RATES={0x40, 0x7d, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x22, 0x3, "0ed08feda201d631498f81063863d1c2aa4d1df975bfd28de1d154ebfaed"}, @NL80211_BAND_60GHZ={0x18, 0x2, "cddea76e97ca0d9c0c7d00a2a258fdbaad8c59e4"}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000080}, 0x4000) 11:32:42 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x2000, &(0x7f0000000100)=ANY=[@ANYBLOB="081000000c000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x6b, 0x8d, 0x10, @dev={0xfe, 0x80, [], 0x23}, @private0, 0x10, 0x20, 0x18, 0x6e29183c}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f00000001c0)={'sit0\x00', r0, 0x29, 0x3f, 0x4, 0x3ff, 0xc, @private2, @remote, 0x20, 0x80, 0x9ae, 0x3}}) 11:32:42 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sco\x00') ioctl$UI_SET_PROPBIT(r0, 0x4004556e, 0x1e) write$P9_RVERSION(r0, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x101, 0x8, '9P2000.u'}, 0x15) r1 = dup(r0) r2 = openat$incfs(r0, &(0x7f0000000080)='.pending_reads\x00', 0x0, 0x1b3) sendmsg$TIPC_NL_NODE_GET(r2, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000100)={0x2e4, 0x0, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2f9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3ff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4d}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7f}]}, @TIPC_NLA_LINK={0x14c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x77}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf63}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_NODE={0x20, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x1c, 0x3, "128d05329f3e594baa03e5f5652ef43715e0b232d433b819"}]}, @TIPC_NLA_MEDIA={0xf0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x37}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x112}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xee6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdc71}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5e0000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x549}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x2e4}, 0x1, 0x0, 0x0, 0x4800}, 0x880) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000480)=0x1, 0x4) ioctl$SNDCTL_DSP_GETTRIGGER(r1, 0x80045010, &(0x7f00000004c0)) syz_mount_image$reiserfs(&(0x7f0000000500)='reiserfs\x00', &(0x7f0000000540)='./file0\x00', 0x79d1, 0x3, &(0x7f00000007c0)=[{&(0x7f0000000580)="4e192f32d6e641d4eb82328b32fe9067668e5ac5e48aa3d086ffbcb89c3565eb4cdc0f53c7b2845aa62e0e46debc5e4d6973220d18635169ccc2c7e8c7775ef449e05c4142d78ec86bca9b598390373cf00d3af629cabf3acfb3740cc2c097ba586a9a48cae58f6b48f0fb9cd91a31b891f8a58e552d9bf1c1051e85a980fd2851bb74d11866155bcbbd4d28981c47d895563c9d136b8a0c9200a12356abdabe76245bcbf93b08976b945170582e8ad458646b05644cd6494a83e8b70da3bea3b35fc60745cc96b7aaef1a1e9526e0f604cb74c7c909cab3", 0xd8, 0x10001}, {&(0x7f0000000680)="126a971730f28c3c689e08f488e51e6bb4c0c08406416759b960b78e24cdf2ddc8497cc4897716fad043edd6c7767c93e4f90061e381dea7fa68166f84ea9ec400645beddba0de42165d54313f4b98e178c4726f9904b911ec903b84b82a38b886d9a9a69d9d8bfffb56021761b58ac2ab92bde271f7df4c8d68530f938cf17f9e667ea0b1d1123b53ec", 0x8a, 0x2}, {&(0x7f0000000740)="3a59cd5a97fbb86e9430a19a4820fe0c827ebf4849f078caeb3526d88ed8ada2ec5416cf7a940d2a5061866271cfafa664a771ba3580ff950d304f13381e7d1be6a1e2d6dce912f510c6f7ae02817df4ecbf5225037f54cb3e4133b65d20a6739014a06cabc5a0edda6719ca720b6283cf5701e9a06be4", 0x77, 0xd53}], 0x29, &(0x7f0000000800)={[{@usrquota='usrquota'}, {@balloc_noborder='block-allocator=noborder'}], [{@context={'context', 0x3d, 'user_u'}}, {@fsuuid={'fsuuid', 0x3d, {[0x34, 0x30, 0x66, 0x37, 0x38, 0x32, 0x45d1d550a67e8db1, 0x36], 0x2d, [0x37, 0x6c, 0x38, 0x32], 0x2d, [0x38, 0x30, 0x63, 0x61], 0x2d, [0x5a, 0x37, 0x34, 0x35], 0x2d, [0x35, 0x34, 0x37, 0x61, 0x32, 0x32, 0x63, 0x33]}}}]}) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x38, 0x0, 0x802, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7, 0x5b}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x95ad71a565862dfa) syz_open_dev$media(&(0x7f0000000980)='/dev/media#\x00', 0x7, 0x200000) prctl$PR_SET_FPEXC(0xc, 0x3) r3 = openat$vcs(0xffffff9c, &(0x7f00000009c0)='/dev/vcs\x00', 0x200000, 0x0) ioctl$sock_inet_SIOCGARP(r3, 0x8954, &(0x7f0000000a00)={{0x2, 0x4e20, @empty}, {0x1, @local}, 0x20, {0x2, 0x4e20, @rand_addr=0x64010100}, 'wlan1\x00'}) r4 = openat$vcsa(0xffffff9c, &(0x7f0000001440)='/dev/vcsa\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000014c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000001580)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x40800000}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x40, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_TTL={0x5, 0x6, 0x1}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x4}, @NL80211_MESHCONF_TTL={0x5, 0x6, 0x8}]}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004}, 0x20040050) setsockopt$IPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x41, &(0x7f00000015c0)={'filter\x00', 0x3, [{}, {}, {}]}, 0x54) sendmsg$NL80211_CMD_DEL_PMK(r4, &(0x7f0000001740)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001700)={&(0x7f0000001680)={0x68, 0x0, 0x8, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004000) bind$xdp(r2, &(0x7f0000001780)={0x2c, 0xc, 0x0, 0x2, r4}, 0x10) 11:32:43 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000040)={'syztnl1\x00', &(0x7f00000001c0)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @dev}}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0093d137f41160a1d39ff05fde390a5ad48d8c08223aa473c6633f24d69cceb7235178b90e107eefcdb25c354a89970d33ae3106cc14ed41e60a5de4424148615d4ac7da0a1224ee6d630dcb53f570bac0a884dd5d78107a3a3e7cd42e858ad74bf505749e71b71d98ac5ba0d607e5046b23306480e88d5e35e1e8eebab804943bca4b97229d923f3bb32562d1febeca475d505d1b77d307d6119afda7565ccb589f5c3db03c64"]) 11:32:43 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, 0x0) lseek(r1, 0x0, 0x2) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={r2}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') [ 417.595758][ T9210] EXT4-fs (loop1): Unrecognized mount option "]J [ 417.595758][ T9210] $mcSp]xz:>|.Ktq[k#0d^5" or missing value [ 417.612191][ T9210] EXT4-fs (loop1): failed to parse options in superblock: ]J [ 417.612191][ T9210] $mcSp]xz:>|.Ktq[k#0d^5 [ 417.737613][ T9210] EXT4-fs (loop1): mounted filesystem without journal. Opts: ]J [ 417.737613][ T9210] $mcSp]xz:>|.Ktq[k#0d^5; ,errors=continue [ 417.755215][ T9210] ext4 filesystem being mounted at /root/syzkaller-testdir468552123/syzkaller.kJYg7v/18/file0 supports timestamps until 2038 (0x7fffffff) [ 417.816665][ T32] kauditd_printk_skb: 8 callbacks suppressed [ 417.816730][ T32] audit: type=1800 audit(1608118363.744:20): pid=9218 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15776 res=0 errno=0 [ 417.867318][ T32] audit: type=1804 audit(1608118363.784:21): pid=9219 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/30/bus" dev="sda1" ino=15776 res=1 errno=0 [ 417.891980][ T32] audit: type=1800 audit(1608118363.784:22): pid=9219 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15776 res=0 errno=0 11:32:44 executing program 1: r0 = socket(0xa, 0x2400000001, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f00000001c0)={[0x77e]}, 0x8, 0x800) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000034000)={0x8000000, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) r3 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendmmsg$inet(r3, &(0x7f0000000080)=[{{&(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10, 0x0}}, {{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0xf, 0x0}}], 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000100)={0x0, 0x2a, "ae338d178eff078851085054f77359387e3b8ff2f0a321f42ed5a0b308a45dc9f339696d9dfcc0a97382"}, &(0x7f0000000140)=0x32) setsockopt$inet6_MCAST_LEAVE_GROUP(r3, 0x29, 0x2d, &(0x7f0000000000)={0x2, {{0xa, 0x4e20, 0x80000000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7fffffff}}}, 0x84) getsockopt$inet6_buf(r0, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90) 11:32:44 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, 0x0) lseek(r1, 0x0, 0x2) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={r2}) 11:32:44 executing program 1: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, 0x0) lseek(r1, 0x0, 0x2) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={r2}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') [ 419.046958][ T32] audit: type=1800 audit(1608118364.964:23): pid=9229 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=15776 res=0 errno=0 [ 419.066957][ T32] audit: type=1804 audit(1608118364.974:24): pid=9229 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir468552123/syzkaller.kJYg7v/20/bus" dev="sda1" ino=15776 res=1 errno=0 [ 419.091179][ T32] audit: type=1800 audit(1608118364.974:25): pid=9229 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=15776 res=0 errno=0 [ 419.409431][ T32] audit: type=1800 audit(1608118365.074:26): pid=9230 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15777 res=0 errno=0 [ 419.429793][ T32] audit: type=1804 audit(1608118365.094:27): pid=9230 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/31/bus" dev="sda1" ino=15777 res=1 errno=0 [ 419.454400][ T32] audit: type=1800 audit(1608118365.094:28): pid=9230 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15777 res=0 errno=0 [ 420.048600][ T9226] IPVS: ftp: loaded support on port[0] = 21 11:32:46 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, 0x0) lseek(r1, 0x0, 0x2) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={r2}) 11:32:46 executing program 1: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, 0x0) lseek(r1, 0x0, 0x2) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={r2}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') [ 420.637651][ T32] audit: type=1800 audit(1608118366.564:29): pid=9273 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15771 res=0 errno=0 [ 421.035353][ T9226] chnl_net:caif_netlink_parms(): no params data found [ 421.502480][ T9226] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.510421][ T9226] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.520291][ T9226] device bridge_slave_0 entered promiscuous mode [ 421.626690][ T9226] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.634203][ T9226] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.644219][ T9226] device bridge_slave_1 entered promiscuous mode 11:32:47 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, 0x0) lseek(r1, 0x0, 0x2) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={r2}) [ 421.842105][ T9226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link 11:32:47 executing program 1: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, 0x0) lseek(r1, 0x0, 0x2) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={r2}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') [ 421.931625][ T9226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 422.025195][ T8850] Bluetooth: hci2: command 0x0409 tx timeout [ 422.081436][ T9226] team0: Port device team_slave_0 added [ 422.141798][ T9226] team0: Port device team_slave_1 added [ 422.262655][ T9226] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 422.271210][ T9226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 422.297894][ T9226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 422.489757][ T9226] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 422.497090][ T9226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 422.524505][ T9226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 422.959616][ T9226] device hsr_slave_0 entered promiscuous mode [ 423.033238][ T9226] device hsr_slave_1 entered promiscuous mode 11:32:49 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, 0x0) lseek(r1, 0x0, 0x2) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) [ 423.080871][ T9226] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 423.088876][ T9226] Cannot create hsr debugfs directory 11:32:49 executing program 1: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, 0x0) lseek(r1, 0x0, 0x2) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={r2}) [ 423.532206][ T32] kauditd_printk_skb: 11 callbacks suppressed [ 423.532271][ T32] audit: type=1800 audit(1608118369.454:41): pid=9447 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15782 res=0 errno=0 [ 423.560476][ T32] audit: type=1804 audit(1608118369.474:42): pid=9447 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/34/bus" dev="sda1" ino=15782 res=1 errno=0 [ 423.586765][ T32] audit: type=1800 audit(1608118369.474:43): pid=9447 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15782 res=0 errno=0 [ 423.931355][ T32] audit: type=1800 audit(1608118369.814:44): pid=9467 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=15786 res=0 errno=0 [ 423.953620][ T32] audit: type=1804 audit(1608118369.874:45): pid=9467 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir468552123/syzkaller.kJYg7v/23/bus" dev="sda1" ino=15786 res=1 errno=0 [ 423.978334][ T32] audit: type=1800 audit(1608118369.874:46): pid=9467 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=15786 res=0 errno=0 [ 424.070599][ T9226] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 424.106565][ T8489] Bluetooth: hci2: command 0x041b tx timeout [ 424.138489][ T9226] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 424.252045][ T9226] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 424.371991][ T9226] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 425.141172][ T9226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 425.219826][ T8489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 425.229780][ T8489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 425.260968][ T9226] 8021q: adding VLAN 0 to HW filter on device team0 [ 425.291955][ T8489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 425.303080][ T8489] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 425.312505][ T8489] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.319868][ T8489] bridge0: port 1(bridge_slave_0) entered forwarding state [ 425.398184][ T8489] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 425.407553][ T8489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 425.417575][ T8489] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 425.427419][ T8489] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.434729][ T8489] bridge0: port 2(bridge_slave_1) entered forwarding state [ 425.444279][ T8489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 425.455166][ T8489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 425.466371][ T8489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 425.476752][ T8489] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 425.521837][ T8489] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 425.532179][ T8489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 425.543068][ T8489] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 425.582435][ T8490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 425.594546][ T8490] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 425.644427][ T8490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 425.654612][ T8490] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 425.674652][ T9226] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 425.757617][ T8490] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 425.766080][ T8490] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 425.811650][ T9226] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 425.876747][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 425.887208][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 425.957815][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 425.967785][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 425.989875][ T9226] device veth0_vlan entered promiscuous mode [ 425.999630][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 426.010815][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 426.048929][ T9226] device veth1_vlan entered promiscuous mode [ 426.127714][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 426.137632][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 426.147444][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 426.157693][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 426.180661][ T9226] device veth0_macvtap entered promiscuous mode [ 426.198849][ T8850] Bluetooth: hci2: command 0x040f tx timeout [ 426.203761][ T9226] device veth1_macvtap entered promiscuous mode [ 426.224482][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 426.234673][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 426.319306][ T9226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 426.330691][ T9226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.342789][ T9226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 426.353559][ T9226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.369522][ T9226] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 426.381326][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 426.392025][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 426.416296][ T9226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 426.428537][ T9226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.438825][ T9226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 426.449609][ T9226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.464487][ T9226] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 426.475280][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 426.485868][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 426.528636][ T9226] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.539176][ T9226] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.548320][ T9226] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.557328][ T9226] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.004829][ T9487] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.013252][ T9487] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.023733][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 427.185407][ T9487] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.194325][ T9487] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.203499][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 11:32:53 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, 0x0) lseek(r1, 0x0, 0x2) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={r2}) 11:32:53 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, 0x0) lseek(r1, 0x0, 0x2) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) 11:32:53 executing program 1: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, 0x0) lseek(r1, 0x0, 0x2) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={r2}) [ 427.796127][ T32] audit: type=1800 audit(1608118373.724:47): pid=9523 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=15793 res=0 errno=0 [ 427.897311][ T32] audit: type=1800 audit(1608118373.754:48): pid=9524 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15797 res=0 errno=0 [ 427.918123][ T32] audit: type=1804 audit(1608118373.784:49): pid=9523 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir468552123/syzkaller.kJYg7v/24/bus" dev="sda1" ino=15793 res=1 errno=0 [ 427.942462][ T32] audit: type=1800 audit(1608118373.784:50): pid=9523 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=15793 res=0 errno=0 [ 428.264492][ T8850] Bluetooth: hci2: command 0x0419 tx timeout 11:32:54 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, 0x0) lseek(r1, 0x0, 0x2) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) 11:32:54 executing program 1: write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000040)={0x14, 0x13, 0x2, {0x42, 0x4, 0x7}}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x9, 0x2, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x1}, @exit], &(0x7f0000000300)='syzkaller\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 11:32:55 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000b40)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x74) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000180)='lock_acquire\x00', r0}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) semget(0x1, 0x0, 0x95) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) r3 = open_tree(r1, &(0x7f0000000040)='./file0\x00', 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r3, 0xc040564a, &(0x7f00000000c0)={0x7, 0x0, 0x300e, 0x20, 0x5, 0x1, 0x2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, 0x0) [ 429.254868][ T32] kauditd_printk_skb: 5 callbacks suppressed [ 429.254935][ T32] audit: type=1800 audit(1608118375.164:56): pid=9534 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15805 res=0 errno=0 [ 429.329782][ T32] audit: type=1804 audit(1608118375.244:57): pid=9534 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/36/bus" dev="sda1" ino=15805 res=1 errno=0 [ 429.354158][ T32] audit: type=1800 audit(1608118375.244:58): pid=9534 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15805 res=0 errno=0 11:32:55 executing program 1: syz_emit_ethernet(0x7a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6054869c00452f00fe8000000000000000000000000000bbff020000000000000000000000000001042081000000000000000800000086dd080088be00000000100000000100000000000000080022eb00000000200000000200000000000000000000000800655800000000"], 0x0) 11:32:56 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, 0x0) lseek(r1, 0x0, 0x2) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={r2}) 11:32:56 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000b40)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x74) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000180)='lock_acquire\x00', r0}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) semget(0x1, 0x0, 0x95) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) r3 = open_tree(r1, &(0x7f0000000040)='./file0\x00', 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r3, 0xc040564a, &(0x7f00000000c0)={0x7, 0x0, 0x300e, 0x20, 0x5, 0x1, 0x2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, 0x0) 11:32:56 executing program 1: r0 = socket(0xa, 0x2400000001, 0x0) r1 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendmmsg$inet(r1, &(0x7f0000000080)=[{{&(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10, 0x0}}, {{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0xf, 0x0}}], 0x2, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000700)={0x0, 0x0, 0x4, [0x6, 0x5, 0x4, 0x9]}, &(0x7f0000000740)=0x10) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000034000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x84) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000080)={0x3, {{0xa, 0x0, 0x0, @mcast1}}}, 0x84) getsockopt$inet6_buf(r0, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000180)) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x8c228, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffff}, 0x42234, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vimc1(0xffffff9c, &(0x7f0000000140)='/dev/video1\x00', 0x2, 0x0) r2 = openat$mice(0xffffff9c, &(0x7f0000000100)='/dev/input/mice\x00', 0x40) execveat(r2, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)=[&(0x7f0000000240)='\x00'], &(0x7f00000004c0)=[&(0x7f00000002c0)='.\x00', &(0x7f0000000380)='/dev/input/mice\x00', &(0x7f00000003c0)='/dev/input/mice\x00', &(0x7f0000000400)='$:){', &(0x7f0000000440)='@*@$^^-:{#(-:\x00', &(0x7f0000000480)='/dev/video1\x00'], 0x1000) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) syz_emit_ethernet(0x7e, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010101, @local}, @dest_unreach={0x3, 0x5, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @empty, @broadcast, {[@timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast1}, {@broadcast}, {@empty}, {@private}, {@dev}, {}, {@local}]}, @timestamp={0x44, 0x4}]}}}}}}}, 0x0) r3 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000800)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f0000000040)={0x0, 0xd, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "0efea3c4"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r3, 0xc0305616, &(0x7f0000000500)={0x0, {0x0, 0x5380}}) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_crypto(r2, &(0x7f00000006c0)={&(0x7f0000000540), 0xc, &(0x7f0000000680)={&(0x7f0000000580)=@upd={0xe8, 0x12, 0x10, 0x70bd28, 0x25dfdbfb, {{'pcrypt(rfc4106-gcm-aesni)\x00'}, [], [], 0x400}, [{0x8, 0x1, 0xfff}]}, 0xe8}, 0x1, 0x0, 0x0, 0x1}, 0x0) [ 430.643430][ T32] audit: type=1800 audit(1608118376.534:59): pid=9555 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15804 res=0 errno=0 [ 430.663379][ T32] audit: type=1804 audit(1608118376.544:60): pid=9555 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/37/bus" dev="sda1" ino=15804 res=1 errno=0 [ 430.687374][ T32] audit: type=1800 audit(1608118376.544:61): pid=9555 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15804 res=0 errno=0 11:32:57 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, 0x0) lseek(r1, 0x0, 0x2) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={r2}) [ 431.449784][ T9560] IPVS: ftp: loaded support on port[0] = 21 [ 431.610137][ T32] audit: type=1800 audit(1608118377.534:62): pid=9566 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15804 res=0 errno=0 [ 431.632539][ T32] audit: type=1804 audit(1608118377.544:63): pid=9566 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/38/bus" dev="sda1" ino=15804 res=1 errno=0 [ 431.656876][ T32] audit: type=1800 audit(1608118377.544:64): pid=9566 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15804 res=0 errno=0 11:32:57 executing program 2: r0 = socket$inet6(0xa, 0x805, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x8) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f00000002c0)="ff02040000eeff0000000000000000000000000000020205", 0x18) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000440)="ae", 0x1}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e21, 0x7fff, @loopback, 0x80000000}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000180)="4c3c96f855302461831ac78c1be829eba32f9a344de5aa76eae83d167dde24ec9bdb16faa90b5ba387947a9561a5c6942b84b9757b8f1b870372fa8b56de115b2f07bc03e86c91a65a932605bf54256a8cce4c89d951879b023a8cd68e3cd4e8217300a1d9b51c4f5075a2018febd3e2b0f815838d722064152db7b719a4840ac473a0725d81c61ec4920c638e8e878551c5810e426c0c134c4f7cce04f1ef5e9c120b36b70a1cad0e5cfa97be83f44e717eb70ebf0b945751a38792fb04c2545f438b834ec457ad37330f6f6fe5b7b84b4de3379c366be09435f2fc4722055ce5bcfa1878a9", 0xe6}, {&(0x7f00000000c0)="c945f25b8b7aae60e48d43170006850bd84d4336df029d6eade1f3fb6808b5ad02c8fb24d655edaedc0035a473a05090a66f25950c895c5b099e200504235048d57319ae8683fee6394b28cb8dfef66703dc9137e91649f23537ed", 0x5b}, {&(0x7f0000000300)="b862032a5f33846181017fbffbf0078ca834e23cc3c779d319354d8699010d65856a2c7365105ba159b7bd437ce488196a9ce5bbbba7b03e95d435ed645ce65eed4fb47989b568fee5a5b91ae6ea490d4bac24461f17ee297678e14ccd783765bb132a407057cfaf8a7c0e640d851ebe9e0fc2c6e47dc36958dbd4ceea70303c8cbce11408529759eab708b99013f4c7017ffeb19230ca7c79002d7816", 0x9d}, {&(0x7f0000000280)="f19b2aba463993b4d49e0711f5a5a26c86055264", 0x14}], 0x4, &(0x7f0000000480)=[@tclass={{0x10, 0x29, 0x43, 0x4}}, @hoplimit={{0x10, 0x29, 0x34, 0xfffffeff}}, @rthdr={{0xb4, 0x29, 0x39, {0x8, 0x14, 0x0, 0x1f, 0x0, [@private0, @private0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x44}}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, @remote, @private2, @mcast2, @mcast2]}}}], 0xd4}}, {{&(0x7f0000000580)={0xa, 0x4e20, 0x5, @loopback, 0x9}, 0x1c, &(0x7f0000000840)=[{&(0x7f00000005c0)="15690fc2fc6f57acf0657649d081d37eab84506ea843f04335473d34ceb8ec883f2ca0fe177b1c606d456a1a", 0x2c}, {&(0x7f0000000600)="f4786e625f4940d067c6c32ded61bc03537cf068ded32a05743c59b545c56a261e00d368f59f01ceac2bb8d1fe7db03dc2a26e0e14b2c455cf50a51a51f1585b5d909451b973982dacd6a11d5e587b1612da138c948b613f20b750ce3e823bbb83af8b614017f8be", 0x68}, {&(0x7f0000000680)="51e6a93ec900c14f7ae2ffe922c9f785a7798a16e4f44cc45ee556f18c1399877dae933ca4636d4d13fca481c3266f03feb28099ea24a7c3a069f2fdfed49fbf6759d9cbaae87556f24780b6963f386b73fc7b96731ce328dd68ff52788fa1aa4cba3585161d553f52d741dd4cd309f1198bbfcd1d88cc66f9b632210463364cc080e7f087d7a2fbcc25e1c1f276c7332e777ff68379863694a4dba9b30677b7379f517af9129230d0668aa97355c948c5adad5dad0adf24244a1b96f17f48568f02cb5e6c3384853d946904122a4e856f8e41f995c6db0c0bf3cf6d6c050ee6794f3e55b541bb7ee30533fc4d95aabc47", 0xf1}, {&(0x7f0000000780)="65602026c0b0daab782e4a2ec9b08a50b4f3e96b9e8b81874f8ee8b36d5f4bb6c3e7be605f3da9e366e6334f607c4775861530d88140f95e44246c843f85", 0x3e}, {&(0x7f00000007c0)="982a6ecd11ae37b18ea3e9042b2b973c6239985fca2439379289745d6f6bcf704c54fb5b44acc5b9cc75343e7b21634fe02a26f73cf90e28acae0cb10510d49bb7f91fd3642b829597866e8e7bdaac09", 0x50}], 0x5, &(0x7f0000000880)}}, {{&(0x7f00000008c0)={0xa, 0x4e20, 0x7fffffff, @private0, 0x7}, 0x1c, &(0x7f0000000980)=[{&(0x7f0000000900)="16e8a2e58b48bfe4840cc9ba07c783b767a9b28d875d77c078065d26c289c274eee720ba7242e2e4bf9f5f849edc17b7d5f3e5d8594847718bb93d462e82d5f37c0b236fecced94a780007fa", 0x4c}], 0x1, &(0x7f00000009c0)=[@rthdrdstopts={{0x9c, 0x29, 0x37, {0x11, 0x10, [], [@jumbo={0xc2, 0x4, 0x3}, @jumbo={0xc2, 0x4, 0x6}, @generic={0xe1, 0x73, "8e1ab16eb4c651613d8d4f347b46b9b1eb1089796556cd751102feb3b68b4da052d4a3d217a98192f4d8270b1ac68ae297007d362aacb7035972ed5769de72278667e71aeced9ad976c3e2726084da5b07ae34d0329ccede5b2ecf8eb0521cadc99206579ca5890b4d2e8621c2342bbb4542b4"}]}}}, @hopopts_2292={{0x3c, 0x29, 0x36, {0x32, 0x4, [], [@hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @enc_lim={0x4, 0x1, 0x4}]}}}, @pktinfo={{0x20, 0x29, 0x32, {@loopback}}}, @pktinfo={{0x20, 0x29, 0x32, {@dev={0xfe, 0x80, [], 0xe}, r4}}}, @pktinfo={{0x20, 0x29, 0x32, {@loopback, r8}}}], 0x138}}], 0x4, 0x0) [ 431.865923][ T9584] IPVS: ftp: loaded support on port[0] = 21 11:32:57 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, 0x0) lseek(r1, 0x0, 0x2) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={r2}) [ 432.077254][ T9599] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 11:32:58 executing program 1: r0 = socket(0xa, 0x2400000001, 0x0) r1 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendmmsg$inet(r1, &(0x7f0000000080)=[{{&(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10, 0x0}}, {{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0xf, 0x0}}], 0x2, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000700)={0x0, 0x0, 0x4, [0x6, 0x5, 0x4, 0x9]}, &(0x7f0000000740)=0x10) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000034000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x84) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000080)={0x3, {{0xa, 0x0, 0x0, @mcast1}}}, 0x84) getsockopt$inet6_buf(r0, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000180)) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x8c228, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffff}, 0x42234, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vimc1(0xffffff9c, &(0x7f0000000140)='/dev/video1\x00', 0x2, 0x0) r2 = openat$mice(0xffffff9c, &(0x7f0000000100)='/dev/input/mice\x00', 0x40) execveat(r2, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)=[&(0x7f0000000240)='\x00'], &(0x7f00000004c0)=[&(0x7f00000002c0)='.\x00', &(0x7f0000000380)='/dev/input/mice\x00', &(0x7f00000003c0)='/dev/input/mice\x00', &(0x7f0000000400)='$:){', &(0x7f0000000440)='@*@$^^-:{#(-:\x00', &(0x7f0000000480)='/dev/video1\x00'], 0x1000) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) syz_emit_ethernet(0x7e, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010101, @local}, @dest_unreach={0x3, 0x5, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @empty, @broadcast, {[@timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast1}, {@broadcast}, {@empty}, {@private}, {@dev}, {}, {@local}]}, @timestamp={0x44, 0x4}]}}}}}}}, 0x0) r3 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000800)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f0000000040)={0x0, 0xd, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "0efea3c4"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r3, 0xc0305616, &(0x7f0000000500)={0x0, {0x0, 0x5380}}) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_crypto(r2, &(0x7f00000006c0)={&(0x7f0000000540), 0xc, &(0x7f0000000680)={&(0x7f0000000580)=@upd={0xe8, 0x12, 0x10, 0x70bd28, 0x25dfdbfb, {{'pcrypt(rfc4106-gcm-aesni)\x00'}, [], [], 0x400}, [{0x8, 0x1, 0xfff}]}, 0xe8}, 0x1, 0x0, 0x0, 0x1}, 0x0) [ 432.243087][ T32] audit: type=1800 audit(1608118378.164:65): pid=9618 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15805 res=0 errno=0 11:32:58 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, 0x0) lseek(r1, 0x0, 0x2) fcntl$setown(r0, 0x8, 0xffffffffffffffff) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)) [ 432.686995][ T9599] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 432.706495][ T9617] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 432.870399][ T9599] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 432.949847][ T9623] syz-executor.2 (9623) used greatest stack depth: 3920 bytes left [ 433.004193][ T9626] IPVS: ftp: loaded support on port[0] = 21 11:32:59 executing program 2: r0 = socket$inet6(0xa, 0x805, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x8) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f00000002c0)="ff02040000eeff0000000000000000000000000000020205", 0x18) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000440)="ae", 0x1}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e21, 0x7fff, @loopback, 0x80000000}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000180)="4c3c96f855302461831ac78c1be829eba32f9a344de5aa76eae83d167dde24ec9bdb16faa90b5ba387947a9561a5c6942b84b9757b8f1b870372fa8b56de115b2f07bc03e86c91a65a932605bf54256a8cce4c89d951879b023a8cd68e3cd4e8217300a1d9b51c4f5075a2018febd3e2b0f815838d722064152db7b719a4840ac473a0725d81c61ec4920c638e8e878551c5810e426c0c134c4f7cce04f1ef5e9c120b36b70a1cad0e5cfa97be83f44e717eb70ebf0b945751a38792fb04c2545f438b834ec457ad37330f6f6fe5b7b84b4de3379c366be09435f2fc4722055ce5bcfa1878a9", 0xe6}, {&(0x7f00000000c0)="c945f25b8b7aae60e48d43170006850bd84d4336df029d6eade1f3fb6808b5ad02c8fb24d655edaedc0035a473a05090a66f25950c895c5b099e200504235048d57319ae8683fee6394b28cb8dfef66703dc9137e91649f23537ed", 0x5b}, {&(0x7f0000000300)="b862032a5f33846181017fbffbf0078ca834e23cc3c779d319354d8699010d65856a2c7365105ba159b7bd437ce488196a9ce5bbbba7b03e95d435ed645ce65eed4fb47989b568fee5a5b91ae6ea490d4bac24461f17ee297678e14ccd783765bb132a407057cfaf8a7c0e640d851ebe9e0fc2c6e47dc36958dbd4ceea70303c8cbce11408529759eab708b99013f4c7017ffeb19230ca7c79002d7816", 0x9d}, {&(0x7f0000000280)="f19b2aba463993b4d49e0711f5a5a26c86055264", 0x14}], 0x4, &(0x7f0000000480)=[@tclass={{0x10, 0x29, 0x43, 0x4}}, @hoplimit={{0x10, 0x29, 0x34, 0xfffffeff}}, @rthdr={{0xb4, 0x29, 0x39, {0x8, 0x14, 0x0, 0x1f, 0x0, [@private0, @private0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x44}}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, @remote, @private2, @mcast2, @mcast2]}}}], 0xd4}}, {{&(0x7f0000000580)={0xa, 0x4e20, 0x5, @loopback, 0x9}, 0x1c, &(0x7f0000000840)=[{&(0x7f00000005c0)="15690fc2fc6f57acf0657649d081d37eab84506ea843f04335473d34ceb8ec883f2ca0fe177b1c606d456a1a", 0x2c}, {&(0x7f0000000600)="f4786e625f4940d067c6c32ded61bc03537cf068ded32a05743c59b545c56a261e00d368f59f01ceac2bb8d1fe7db03dc2a26e0e14b2c455cf50a51a51f1585b5d909451b973982dacd6a11d5e587b1612da138c948b613f20b750ce3e823bbb83af8b614017f8be", 0x68}, {&(0x7f0000000680)="51e6a93ec900c14f7ae2ffe922c9f785a7798a16e4f44cc45ee556f18c1399877dae933ca4636d4d13fca481c3266f03feb28099ea24a7c3a069f2fdfed49fbf6759d9cbaae87556f24780b6963f386b73fc7b96731ce328dd68ff52788fa1aa4cba3585161d553f52d741dd4cd309f1198bbfcd1d88cc66f9b632210463364cc080e7f087d7a2fbcc25e1c1f276c7332e777ff68379863694a4dba9b30677b7379f517af9129230d0668aa97355c948c5adad5dad0adf24244a1b96f17f48568f02cb5e6c3384853d946904122a4e856f8e41f995c6db0c0bf3cf6d6c050ee6794f3e55b541bb7ee30533fc4d95aabc47", 0xf1}, {&(0x7f0000000780)="65602026c0b0daab782e4a2ec9b08a50b4f3e96b9e8b81874f8ee8b36d5f4bb6c3e7be605f3da9e366e6334f607c4775861530d88140f95e44246c843f85", 0x3e}, {&(0x7f00000007c0)="982a6ecd11ae37b18ea3e9042b2b973c6239985fca2439379289745d6f6bcf704c54fb5b44acc5b9cc75343e7b21634fe02a26f73cf90e28acae0cb10510d49bb7f91fd3642b829597866e8e7bdaac09", 0x50}], 0x5, &(0x7f0000000880)}}, {{&(0x7f00000008c0)={0xa, 0x4e20, 0x7fffffff, @private0, 0x7}, 0x1c, &(0x7f0000000980)=[{&(0x7f0000000900)="16e8a2e58b48bfe4840cc9ba07c783b767a9b28d875d77c078065d26c289c274eee720ba7242e2e4bf9f5f849edc17b7d5f3e5d8594847718bb93d462e82d5f37c0b236fecced94a780007fa", 0x4c}], 0x1, &(0x7f00000009c0)=[@rthdrdstopts={{0x9c, 0x29, 0x37, {0x11, 0x10, [], [@jumbo={0xc2, 0x4, 0x3}, @jumbo={0xc2, 0x4, 0x6}, @generic={0xe1, 0x73, "8e1ab16eb4c651613d8d4f347b46b9b1eb1089796556cd751102feb3b68b4da052d4a3d217a98192f4d8270b1ac68ae297007d362aacb7035972ed5769de72278667e71aeced9ad976c3e2726084da5b07ae34d0329ccede5b2ecf8eb0521cadc99206579ca5890b4d2e8621c2342bbb4542b4"}]}}}, @hopopts_2292={{0x3c, 0x29, 0x36, {0x32, 0x4, [], [@hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @enc_lim={0x4, 0x1, 0x4}]}}}, @pktinfo={{0x20, 0x29, 0x32, {@loopback}}}, @pktinfo={{0x20, 0x29, 0x32, {@dev={0xfe, 0x80, [], 0xe}, r4}}}, @pktinfo={{0x20, 0x29, 0x32, {@loopback, r8}}}], 0x138}}], 0x4, 0x0) 11:32:59 executing program 1: r0 = socket(0xa, 0x2400000001, 0x0) r1 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendmmsg$inet(r1, &(0x7f0000000080)=[{{&(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10, 0x0}}, {{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0xf, 0x0}}], 0x2, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000700)={0x0, 0x0, 0x4, [0x6, 0x5, 0x4, 0x9]}, &(0x7f0000000740)=0x10) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000034000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x84) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000080)={0x3, {{0xa, 0x0, 0x0, @mcast1}}}, 0x84) getsockopt$inet6_buf(r0, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000180)) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x8c228, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffff}, 0x42234, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vimc1(0xffffff9c, &(0x7f0000000140)='/dev/video1\x00', 0x2, 0x0) r2 = openat$mice(0xffffff9c, &(0x7f0000000100)='/dev/input/mice\x00', 0x40) execveat(r2, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)=[&(0x7f0000000240)='\x00'], &(0x7f00000004c0)=[&(0x7f00000002c0)='.\x00', &(0x7f0000000380)='/dev/input/mice\x00', &(0x7f00000003c0)='/dev/input/mice\x00', &(0x7f0000000400)='$:){', &(0x7f0000000440)='@*@$^^-:{#(-:\x00', &(0x7f0000000480)='/dev/video1\x00'], 0x1000) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) syz_emit_ethernet(0x7e, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010101, @local}, @dest_unreach={0x3, 0x5, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @empty, @broadcast, {[@timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast1}, {@broadcast}, {@empty}, {@private}, {@dev}, {}, {@local}]}, @timestamp={0x44, 0x4}]}}}}}}}, 0x0) r3 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000800)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f0000000040)={0x0, 0xd, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "0efea3c4"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r3, 0xc0305616, &(0x7f0000000500)={0x0, {0x0, 0x5380}}) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_crypto(r2, &(0x7f00000006c0)={&(0x7f0000000540), 0xc, &(0x7f0000000680)={&(0x7f0000000580)=@upd={0xe8, 0x12, 0x10, 0x70bd28, 0x25dfdbfb, {{'pcrypt(rfc4106-gcm-aesni)\x00'}, [], [], 0x400}, [{0x8, 0x1, 0xfff}]}, 0xe8}, 0x1, 0x0, 0x0, 0x1}, 0x0) 11:32:59 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, 0x0) lseek(r1, 0x0, 0x2) fcntl$setown(r0, 0x8, 0xffffffffffffffff) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)) [ 434.148004][ T9668] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 434.282549][ T32] kauditd_printk_skb: 3 callbacks suppressed [ 434.282614][ T32] audit: type=1800 audit(1608118380.204:69): pid=9672 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15825 res=0 errno=0 [ 434.496468][ T9669] IPVS: ftp: loaded support on port[0] = 21 11:33:00 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, 0x0) lseek(r1, 0x0, 0x2) fcntl$setown(r0, 0x8, 0xffffffffffffffff) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)) [ 435.189508][ T32] audit: type=1800 audit(1608118381.114:70): pid=9680 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15829 res=0 errno=0 [ 435.466396][ T9671] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 11:33:01 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, 0x0) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={r2}) [ 435.821491][ T32] audit: type=1800 audit(1608118381.744:71): pid=9716 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15829 res=0 errno=0 11:33:01 executing program 2: r0 = socket$inet6(0xa, 0x805, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x8) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f00000002c0)="ff02040000eeff0000000000000000000000000000020205", 0x18) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000440)="ae", 0x1}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e21, 0x7fff, @loopback, 0x80000000}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000180)="4c3c96f855302461831ac78c1be829eba32f9a344de5aa76eae83d167dde24ec9bdb16faa90b5ba387947a9561a5c6942b84b9757b8f1b870372fa8b56de115b2f07bc03e86c91a65a932605bf54256a8cce4c89d951879b023a8cd68e3cd4e8217300a1d9b51c4f5075a2018febd3e2b0f815838d722064152db7b719a4840ac473a0725d81c61ec4920c638e8e878551c5810e426c0c134c4f7cce04f1ef5e9c120b36b70a1cad0e5cfa97be83f44e717eb70ebf0b945751a38792fb04c2545f438b834ec457ad37330f6f6fe5b7b84b4de3379c366be09435f2fc4722055ce5bcfa1878a9", 0xe6}, {&(0x7f00000000c0)="c945f25b8b7aae60e48d43170006850bd84d4336df029d6eade1f3fb6808b5ad02c8fb24d655edaedc0035a473a05090a66f25950c895c5b099e200504235048d57319ae8683fee6394b28cb8dfef66703dc9137e91649f23537ed", 0x5b}, {&(0x7f0000000300)="b862032a5f33846181017fbffbf0078ca834e23cc3c779d319354d8699010d65856a2c7365105ba159b7bd437ce488196a9ce5bbbba7b03e95d435ed645ce65eed4fb47989b568fee5a5b91ae6ea490d4bac24461f17ee297678e14ccd783765bb132a407057cfaf8a7c0e640d851ebe9e0fc2c6e47dc36958dbd4ceea70303c8cbce11408529759eab708b99013f4c7017ffeb19230ca7c79002d7816", 0x9d}, {&(0x7f0000000280)="f19b2aba463993b4d49e0711f5a5a26c86055264", 0x14}], 0x4, &(0x7f0000000480)=[@tclass={{0x10, 0x29, 0x43, 0x4}}, @hoplimit={{0x10, 0x29, 0x34, 0xfffffeff}}, @rthdr={{0xb4, 0x29, 0x39, {0x8, 0x14, 0x0, 0x1f, 0x0, [@private0, @private0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x44}}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, @remote, @private2, @mcast2, @mcast2]}}}], 0xd4}}, {{&(0x7f0000000580)={0xa, 0x4e20, 0x5, @loopback, 0x9}, 0x1c, &(0x7f0000000840)=[{&(0x7f00000005c0)="15690fc2fc6f57acf0657649d081d37eab84506ea843f04335473d34ceb8ec883f2ca0fe177b1c606d456a1a", 0x2c}, {&(0x7f0000000600)="f4786e625f4940d067c6c32ded61bc03537cf068ded32a05743c59b545c56a261e00d368f59f01ceac2bb8d1fe7db03dc2a26e0e14b2c455cf50a51a51f1585b5d909451b973982dacd6a11d5e587b1612da138c948b613f20b750ce3e823bbb83af8b614017f8be", 0x68}, {&(0x7f0000000680)="51e6a93ec900c14f7ae2ffe922c9f785a7798a16e4f44cc45ee556f18c1399877dae933ca4636d4d13fca481c3266f03feb28099ea24a7c3a069f2fdfed49fbf6759d9cbaae87556f24780b6963f386b73fc7b96731ce328dd68ff52788fa1aa4cba3585161d553f52d741dd4cd309f1198bbfcd1d88cc66f9b632210463364cc080e7f087d7a2fbcc25e1c1f276c7332e777ff68379863694a4dba9b30677b7379f517af9129230d0668aa97355c948c5adad5dad0adf24244a1b96f17f48568f02cb5e6c3384853d946904122a4e856f8e41f995c6db0c0bf3cf6d6c050ee6794f3e55b541bb7ee30533fc4d95aabc47", 0xf1}, {&(0x7f0000000780)="65602026c0b0daab782e4a2ec9b08a50b4f3e96b9e8b81874f8ee8b36d5f4bb6c3e7be605f3da9e366e6334f607c4775861530d88140f95e44246c843f85", 0x3e}, {&(0x7f00000007c0)="982a6ecd11ae37b18ea3e9042b2b973c6239985fca2439379289745d6f6bcf704c54fb5b44acc5b9cc75343e7b21634fe02a26f73cf90e28acae0cb10510d49bb7f91fd3642b829597866e8e7bdaac09", 0x50}], 0x5, &(0x7f0000000880)}}, {{&(0x7f00000008c0)={0xa, 0x4e20, 0x7fffffff, @private0, 0x7}, 0x1c, &(0x7f0000000980)=[{&(0x7f0000000900)="16e8a2e58b48bfe4840cc9ba07c783b767a9b28d875d77c078065d26c289c274eee720ba7242e2e4bf9f5f849edc17b7d5f3e5d8594847718bb93d462e82d5f37c0b236fecced94a780007fa", 0x4c}], 0x1, &(0x7f00000009c0)=[@rthdrdstopts={{0x9c, 0x29, 0x37, {0x11, 0x10, [], [@jumbo={0xc2, 0x4, 0x3}, @jumbo={0xc2, 0x4, 0x6}, @generic={0xe1, 0x73, "8e1ab16eb4c651613d8d4f347b46b9b1eb1089796556cd751102feb3b68b4da052d4a3d217a98192f4d8270b1ac68ae297007d362aacb7035972ed5769de72278667e71aeced9ad976c3e2726084da5b07ae34d0329ccede5b2ecf8eb0521cadc99206579ca5890b4d2e8621c2342bbb4542b4"}]}}}, @hopopts_2292={{0x3c, 0x29, 0x36, {0x32, 0x4, [], [@hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @enc_lim={0x4, 0x1, 0x4}]}}}, @pktinfo={{0x20, 0x29, 0x32, {@loopback}}}, @pktinfo={{0x20, 0x29, 0x32, {@dev={0xfe, 0x80, [], 0xe}, r4}}}, @pktinfo={{0x20, 0x29, 0x32, {@loopback, r8}}}], 0x138}}], 0x4, 0x0) [ 435.957984][ T32] audit: type=1804 audit(1608118381.824:72): pid=9716 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/43/bus" dev="sda1" ino=15829 res=1 errno=0 [ 435.982599][ T32] audit: type=1800 audit(1608118381.824:73): pid=9716 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15829 res=0 errno=0 11:33:02 executing program 1: r0 = socket(0xa, 0x2400000001, 0x0) r1 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendmmsg$inet(r1, &(0x7f0000000080)=[{{&(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10, 0x0}}, {{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0xf, 0x0}}], 0x2, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000700)={0x0, 0x0, 0x4, [0x6, 0x5, 0x4, 0x9]}, &(0x7f0000000740)=0x10) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000034000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x84) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000080)={0x3, {{0xa, 0x0, 0x0, @mcast1}}}, 0x84) getsockopt$inet6_buf(r0, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000180)) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x8c228, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffff}, 0x42234, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vimc1(0xffffff9c, &(0x7f0000000140)='/dev/video1\x00', 0x2, 0x0) r2 = openat$mice(0xffffff9c, &(0x7f0000000100)='/dev/input/mice\x00', 0x40) execveat(r2, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)=[&(0x7f0000000240)='\x00'], &(0x7f00000004c0)=[&(0x7f00000002c0)='.\x00', &(0x7f0000000380)='/dev/input/mice\x00', &(0x7f00000003c0)='/dev/input/mice\x00', &(0x7f0000000400)='$:){', &(0x7f0000000440)='@*@$^^-:{#(-:\x00', &(0x7f0000000480)='/dev/video1\x00'], 0x1000) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) syz_emit_ethernet(0x7e, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010101, @local}, @dest_unreach={0x3, 0x5, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @empty, @broadcast, {[@timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast1}, {@broadcast}, {@empty}, {@private}, {@dev}, {}, {@local}]}, @timestamp={0x44, 0x4}]}}}}}}}, 0x0) r3 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000800)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f0000000040)={0x0, 0xd, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "0efea3c4"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r3, 0xc0305616, &(0x7f0000000500)={0x0, {0x0, 0x5380}}) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_crypto(r2, &(0x7f00000006c0)={&(0x7f0000000540), 0xc, &(0x7f0000000680)={&(0x7f0000000580)=@upd={0xe8, 0x12, 0x10, 0x70bd28, 0x25dfdbfb, {{'pcrypt(rfc4106-gcm-aesni)\x00'}, [], [], 0x400}, [{0x8, 0x1, 0xfff}]}, 0xe8}, 0x1, 0x0, 0x0, 0x1}, 0x0) [ 436.297125][ T9721] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 11:33:02 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, 0x0) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={r2}) [ 436.895955][ T9732] IPVS: ftp: loaded support on port[0] = 21 [ 437.212113][ T32] audit: type=1800 audit(1608118383.134:74): pid=9736 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15836 res=0 errno=0 [ 437.232173][ T32] audit: type=1804 audit(1608118383.134:75): pid=9736 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/44/bus" dev="sda1" ino=15836 res=1 errno=0 [ 437.256464][ T32] audit: type=1800 audit(1608118383.134:76): pid=9736 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15836 res=0 errno=0 [ 437.518213][ T9723] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 11:33:03 executing program 2: r0 = socket$inet6(0xa, 0x805, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x8) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f00000002c0)="ff02040000eeff0000000000000000000000000000020205", 0x18) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000440)="ae", 0x1}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e21, 0x7fff, @loopback, 0x80000000}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000180)="4c3c96f855302461831ac78c1be829eba32f9a344de5aa76eae83d167dde24ec9bdb16faa90b5ba387947a9561a5c6942b84b9757b8f1b870372fa8b56de115b2f07bc03e86c91a65a932605bf54256a8cce4c89d951879b023a8cd68e3cd4e8217300a1d9b51c4f5075a2018febd3e2b0f815838d722064152db7b719a4840ac473a0725d81c61ec4920c638e8e878551c5810e426c0c134c4f7cce04f1ef5e9c120b36b70a1cad0e5cfa97be83f44e717eb70ebf0b945751a38792fb04c2545f438b834ec457ad37330f6f6fe5b7b84b4de3379c366be09435f2fc4722055ce5bcfa1878a9", 0xe6}, {&(0x7f00000000c0)="c945f25b8b7aae60e48d43170006850bd84d4336df029d6eade1f3fb6808b5ad02c8fb24d655edaedc0035a473a05090a66f25950c895c5b099e200504235048d57319ae8683fee6394b28cb8dfef66703dc9137e91649f23537ed", 0x5b}, {&(0x7f0000000300)="b862032a5f33846181017fbffbf0078ca834e23cc3c779d319354d8699010d65856a2c7365105ba159b7bd437ce488196a9ce5bbbba7b03e95d435ed645ce65eed4fb47989b568fee5a5b91ae6ea490d4bac24461f17ee297678e14ccd783765bb132a407057cfaf8a7c0e640d851ebe9e0fc2c6e47dc36958dbd4ceea70303c8cbce11408529759eab708b99013f4c7017ffeb19230ca7c79002d7816", 0x9d}, {&(0x7f0000000280)="f19b2aba463993b4d49e0711f5a5a26c86055264", 0x14}], 0x4, &(0x7f0000000480)=[@tclass={{0x10, 0x29, 0x43, 0x4}}, @hoplimit={{0x10, 0x29, 0x34, 0xfffffeff}}, @rthdr={{0xb4, 0x29, 0x39, {0x8, 0x14, 0x0, 0x1f, 0x0, [@private0, @private0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x44}}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, @remote, @private2, @mcast2, @mcast2]}}}], 0xd4}}, {{&(0x7f0000000580)={0xa, 0x4e20, 0x5, @loopback, 0x9}, 0x1c, &(0x7f0000000840)=[{&(0x7f00000005c0)="15690fc2fc6f57acf0657649d081d37eab84506ea843f04335473d34ceb8ec883f2ca0fe177b1c606d456a1a", 0x2c}, {&(0x7f0000000600)="f4786e625f4940d067c6c32ded61bc03537cf068ded32a05743c59b545c56a261e00d368f59f01ceac2bb8d1fe7db03dc2a26e0e14b2c455cf50a51a51f1585b5d909451b973982dacd6a11d5e587b1612da138c948b613f20b750ce3e823bbb83af8b614017f8be", 0x68}, {&(0x7f0000000680)="51e6a93ec900c14f7ae2ffe922c9f785a7798a16e4f44cc45ee556f18c1399877dae933ca4636d4d13fca481c3266f03feb28099ea24a7c3a069f2fdfed49fbf6759d9cbaae87556f24780b6963f386b73fc7b96731ce328dd68ff52788fa1aa4cba3585161d553f52d741dd4cd309f1198bbfcd1d88cc66f9b632210463364cc080e7f087d7a2fbcc25e1c1f276c7332e777ff68379863694a4dba9b30677b7379f517af9129230d0668aa97355c948c5adad5dad0adf24244a1b96f17f48568f02cb5e6c3384853d946904122a4e856f8e41f995c6db0c0bf3cf6d6c050ee6794f3e55b541bb7ee30533fc4d95aabc47", 0xf1}, {&(0x7f0000000780)="65602026c0b0daab782e4a2ec9b08a50b4f3e96b9e8b81874f8ee8b36d5f4bb6c3e7be605f3da9e366e6334f607c4775861530d88140f95e44246c843f85", 0x3e}, {&(0x7f00000007c0)="982a6ecd11ae37b18ea3e9042b2b973c6239985fca2439379289745d6f6bcf704c54fb5b44acc5b9cc75343e7b21634fe02a26f73cf90e28acae0cb10510d49bb7f91fd3642b829597866e8e7bdaac09", 0x50}], 0x5, &(0x7f0000000880)}}, {{&(0x7f00000008c0)={0xa, 0x4e20, 0x7fffffff, @private0, 0x7}, 0x1c, &(0x7f0000000980)=[{&(0x7f0000000900)="16e8a2e58b48bfe4840cc9ba07c783b767a9b28d875d77c078065d26c289c274eee720ba7242e2e4bf9f5f849edc17b7d5f3e5d8594847718bb93d462e82d5f37c0b236fecced94a780007fa", 0x4c}], 0x1, &(0x7f00000009c0)=[@rthdrdstopts={{0x9c, 0x29, 0x37, {0x11, 0x10, [], [@jumbo={0xc2, 0x4, 0x3}, @jumbo={0xc2, 0x4, 0x6}, @generic={0xe1, 0x73, "8e1ab16eb4c651613d8d4f347b46b9b1eb1089796556cd751102feb3b68b4da052d4a3d217a98192f4d8270b1ac68ae297007d362aacb7035972ed5769de72278667e71aeced9ad976c3e2726084da5b07ae34d0329ccede5b2ecf8eb0521cadc99206579ca5890b4d2e8621c2342bbb4542b4"}]}}}, @hopopts_2292={{0x3c, 0x29, 0x36, {0x32, 0x4, [], [@hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @enc_lim={0x4, 0x1, 0x4}]}}}, @pktinfo={{0x20, 0x29, 0x32, {@loopback}}}, @pktinfo={{0x20, 0x29, 0x32, {@dev={0xfe, 0x80, [], 0xe}, r4}}}, @pktinfo={{0x20, 0x29, 0x32, {@loopback, r8}}}], 0x138}}], 0x4, 0x0) 11:33:04 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c000000f7ff000400eeffffffffffffff05001e0eb147f0d1ade1f1d8d4d54b7d427c9eb00fde0521adceefafd96c166aeac1910012d5416d510966fa9f282462ee2809c411c67ba4a68591fbba6c527c", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r5 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendmmsg$inet(r5, &(0x7f0000000080)=[{{&(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10, 0x0}}, {{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0xf, 0x0}}], 0x2, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5800000024000b0600"/20, @ANYRES32=r4, @ANYRESDEC=r1, @ANYRESHEX=r3], 0x58}}, 0x0) ioctl$PPPIOCDISCONN(0xffffffffffffffff, 0x7439) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000240)="0503460008003e0000000200c52c", 0xe, 0x0, 0x0, 0x0) 11:33:04 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, 0x0) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={r2}) [ 438.367253][ T9779] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 438.677170][ T32] audit: type=1800 audit(1608118384.604:77): pid=9789 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15839 res=0 errno=0 11:33:04 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) setpriority(0x0, r0, 0x10ffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = open(&(0x7f0000000100)='./file0\x00', 0x44200, 0xc) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000240)={0x8, 0x1, 0xf8, 0x2, 0xffff}, 0xc) accept4(0xffffffffffffffff, &(0x7f0000000040)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0, 0x80000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000001f000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000380)="3e650f0d8c4c070f20c06635000001000f22c066b9da0b000066b80080000066ba000000000f300f143dba4100edba2100b001eeba4300b80f00ef0fc732b8bf0f8ee866b86e0000000f23c00f21f86635020006000f23f8", 0x58}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]}) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(0xffffffffffffffff, 0x8010661b, &(0x7f0000000000)) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 438.818300][ T32] audit: type=1804 audit(1608118384.644:78): pid=9789 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/45/bus" dev="sda1" ino=15839 res=1 errno=0 [ 438.987709][ T9779] bond0: (slave bond_slave_0): Releasing backup interface [ 439.172408][ T9783] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 11:33:05 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, 0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={r2}) 11:33:05 executing program 2: keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffc, 0x0, 0x0) syz_mount_image$udf(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$hfs(&(0x7f00000021c0)='hfs\x00', &(0x7f0000002200)='./file0/file0\x00', 0x0, 0x0, &(0x7f00000024c0), 0x0, &(0x7f0000002540)=ANY=[@ANYBLOB='codepage=koi8-r,codepagE=cp861,\x00']) [ 440.053811][ T32] kauditd_printk_skb: 1 callbacks suppressed [ 440.053876][ T32] audit: type=1800 audit(1608118385.974:80): pid=9817 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15842 res=0 errno=0 [ 440.080258][ T32] audit: type=1804 audit(1608118385.984:81): pid=9817 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/46/bus" dev="sda1" ino=15842 res=1 errno=0 [ 440.107959][ T32] audit: type=1800 audit(1608118385.984:82): pid=9817 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15842 res=0 errno=0 [ 440.211170][ T9816] hfs: unable to parse mount options [ 440.398621][ T9825] hfs: unable to parse mount options 11:33:06 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, 0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={r2}) 11:33:06 executing program 2: syz_mount_image$xfs(&(0x7f0000000100)='xfs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000000600), 0x810, &(0x7f0000000000)=ANY=[@ANYBLOB="6c6fc337e296a9cf0ed8672c6e0b0741e447d1d0157a37206f646973636172642c6e6f67727069642c6e6f6c61726765696f2c696e6f646536342c70726a71756f74612c00"]) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x80000001, 0x0], 0x2, 0x800, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x1, 0x3628, 0x7, 0x10001, 0x3, 0x7fff, 0x2, 0x2}}) ioctl$DRM_IOCTL_FREE_BUFS(r0, 0x4008641a, &(0x7f00000001c0)={0x9, &(0x7f0000000180)=[0xffffffc0, 0x8, 0x7, 0x0, 0x20, 0x636, 0x82, 0x0, 0x100]}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(0xffffffffffffffff, 0xc0804124, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) ioctl$KDSETLED(r0, 0x4b32, 0x9) [ 440.840475][ T32] audit: type=1800 audit(1608118386.764:83): pid=9830 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15836 res=0 errno=0 [ 440.987284][ T32] audit: type=1804 audit(1608118386.834:84): pid=9830 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/47/bus" dev="sda1" ino=15836 res=1 errno=0 [ 441.012650][ T32] audit: type=1800 audit(1608118386.834:85): pid=9830 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15836 res=0 errno=0 11:33:07 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, 0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={r2}) [ 441.265084][ T9836] xfs: Unknown parameter 'lo7▩g' [ 441.336707][ T9836] xfs: Unknown parameter 'lo7▩g' 11:33:07 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000180)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) recvfrom$l2tp6(0xffffffffffffffff, &(0x7f0000000100)=""/13, 0xd, 0x140, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast1}, 0x20) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000001c0), 0x60) r2 = syz_io_uring_complete(0x0) ioctl$SIOCAX25CTLCON(r2, 0x89e8, &(0x7f0000000300)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3, 0x80000000, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f0000000280)={'mangle\x00'}, &(0x7f0000000380)=0x54) open(&(0x7f0000000000)='./file0\x00', 0x20000, 0x4e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x800000000080002, 0x0) bind$qrtr(r4, &(0x7f0000000080)={0x2a, 0xffffffff, 0x2}, 0xc) sendmmsg$alg(r4, &(0x7f0000000140)=[{0x0, 0x0, 0x0}], 0x1, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r6, @ANYBLOB="000000000000000008000400", @ANYRES32=r5], 0x28}}, 0x0) [ 441.483552][ T32] audit: type=1800 audit(1608118387.404:86): pid=9846 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15847 res=0 errno=0 [ 441.576274][ T32] audit: type=1804 audit(1608118387.474:87): pid=9846 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/48/bus" dev="sda1" ino=15847 res=1 errno=0 [ 441.576594][ T32] audit: type=1800 audit(1608118387.474:88): pid=9846 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15847 res=0 errno=0 11:33:07 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={r2}) [ 442.117489][ T32] audit: type=1800 audit(1608118388.044:89): pid=9852 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15848 res=0 errno=0 11:33:09 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) lseek(r1, 0x0, 0x2) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={r2}) 11:33:10 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) lseek(r1, 0x0, 0x2) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={r2}) 11:33:10 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) lseek(r1, 0x0, 0x2) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={r2}) 11:33:11 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) ftruncate(0xffffffffffffffff, 0x1000) lseek(0xffffffffffffffff, 0x0, 0x2) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r1 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={r1}) [ 445.221078][ T32] kauditd_printk_skb: 11 callbacks suppressed [ 445.221143][ T32] audit: type=1800 audit(1608118391.144:101): pid=9893 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15848 res=0 errno=0 [ 445.330970][ T32] audit: type=1804 audit(1608118391.174:102): pid=9893 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/53/bus" dev="sda1" ino=15848 res=1 errno=0 [ 445.355322][ T32] audit: type=1800 audit(1608118391.174:103): pid=9893 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15848 res=0 errno=0 11:33:12 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) setpriority(0x0, r0, 0x10ffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = open(&(0x7f0000000100)='./file0\x00', 0x44200, 0xc) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000240)={0x8, 0x1, 0xf8, 0x2, 0xffff}, 0xc) accept4(0xffffffffffffffff, &(0x7f0000000040)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0, 0x80000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000001f000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000380)="3e650f0d8c4c070f20c06635000001000f22c066b9da0b000066b80080000066ba000000000f300f143dba4100edba2100b001eeba4300b80f00ef0fc732b8bf0f8ee866b86e0000000f23c00f21f86635020006000f23f8", 0x58}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]}) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(0xffffffffffffffff, 0x8010661b, &(0x7f0000000000)) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) ioctl$KVM_RUN(r4, 0xae80, 0x0) 11:33:12 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) ftruncate(0xffffffffffffffff, 0x1000) lseek(0xffffffffffffffff, 0x0, 0x2) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r1 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={r1}) [ 446.537301][ T32] audit: type=1800 audit(1608118392.464:104): pid=9899 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15849 res=0 errno=0 [ 446.624788][ T32] audit: type=1804 audit(1608118392.494:105): pid=9900 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/54/bus" dev="sda1" ino=15849 res=1 errno=0 [ 446.649403][ T32] audit: type=1800 audit(1608118392.494:106): pid=9900 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15849 res=0 errno=0 11:33:12 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) ftruncate(0xffffffffffffffff, 0x1000) lseek(0xffffffffffffffff, 0x0, 0x2) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r1 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={r1}) [ 447.045570][ T32] audit: type=1800 audit(1608118392.974:107): pid=9907 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15849 res=0 errno=0 [ 447.065680][ T32] audit: type=1804 audit(1608118392.974:108): pid=9907 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/55/bus" dev="sda1" ino=15849 res=1 errno=0 [ 447.090055][ T32] audit: type=1800 audit(1608118392.974:109): pid=9907 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15849 res=0 errno=0 11:33:13 executing program 0: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r1 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r0, r1, 0x0, 0x8000fffffffe) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)={r1}) [ 447.491734][ T32] audit: type=1804 audit(1608118393.414:110): pid=9911 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/56/bus" dev="sda1" ino=15849 res=1 errno=0 11:33:14 executing program 0: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r1 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r0, r1, 0x0, 0x8000fffffffe) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)={r1}) 11:33:14 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) setpriority(0x0, r0, 0x10ffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = open(&(0x7f0000000100)='./file0\x00', 0x44200, 0xc) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000240)={0x8, 0x1, 0xf8, 0x2, 0xffff}, 0xc) accept4(0xffffffffffffffff, &(0x7f0000000040)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0, 0x80000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000001f000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000380)="3e650f0d8c4c070f20c06635000001000f22c066b9da0b000066b80080000066ba000000000f300f143dba4100edba2100b001eeba4300b80f00ef0fc732b8bf0f8ee866b86e0000000f23c00f21f86635020006000f23f8", 0x58}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]}) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(0xffffffffffffffff, 0x8010661b, &(0x7f0000000000)) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) ioctl$KVM_RUN(r4, 0xae80, 0x0) 11:33:15 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000180)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) recvfrom$l2tp6(0xffffffffffffffff, &(0x7f0000000100)=""/13, 0xd, 0x140, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast1}, 0x20) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000001c0), 0x60) r2 = syz_io_uring_complete(0x0) ioctl$SIOCAX25CTLCON(r2, 0x89e8, &(0x7f0000000300)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3, 0x80000000, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f0000000280)={'mangle\x00'}, &(0x7f0000000380)=0x54) open(&(0x7f0000000000)='./file0\x00', 0x20000, 0x4e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x800000000080002, 0x0) bind$qrtr(r4, &(0x7f0000000080)={0x2a, 0xffffffff, 0x2}, 0xc) sendmmsg$alg(r4, &(0x7f0000000140)=[{0x0, 0x0, 0x0}], 0x1, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r6, @ANYBLOB="000000000000000008000400", @ANYRES32=r5], 0x28}}, 0x0) 11:33:15 executing program 0: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r1 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r0, r1, 0x0, 0x8000fffffffe) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)={r1}) 11:33:16 executing program 0: r0 = open(0x0, 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={r2}) [ 450.974638][ T32] kauditd_printk_skb: 5 callbacks suppressed [ 450.974715][ T32] audit: type=1804 audit(1608118396.904:116): pid=9939 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/59/bus" dev="sda1" ino=15849 res=1 errno=0 [ 451.007498][ T32] audit: type=1800 audit(1608118396.904:117): pid=9939 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15849 res=0 errno=0 11:33:17 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) setpriority(0x0, r0, 0x10ffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = open(&(0x7f0000000100)='./file0\x00', 0x44200, 0xc) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000240)={0x8, 0x1, 0xf8, 0x2, 0xffff}, 0xc) accept4(0xffffffffffffffff, &(0x7f0000000040)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0, 0x80000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000001f000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000380)="3e650f0d8c4c070f20c06635000001000f22c066b9da0b000066b80080000066ba000000000f300f143dba4100edba2100b001eeba4300b80f00ef0fc732b8bf0f8ee866b86e0000000f23c00f21f86635020006000f23f8", 0x58}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]}) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(0xffffffffffffffff, 0x8010661b, &(0x7f0000000000)) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) ioctl$KVM_RUN(r4, 0xae80, 0x0) 11:33:17 executing program 0: r0 = open(0x0, 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={r2}) [ 452.232105][ T32] audit: type=1804 audit(1608118398.154:118): pid=9946 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/60/bus" dev="sda1" ino=15862 res=1 errno=0 [ 452.256422][ T32] audit: type=1800 audit(1608118398.154:119): pid=9946 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15862 res=0 errno=0 11:33:18 executing program 2: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) setpriority(0x0, r0, 0x10ffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = open(&(0x7f0000000100)='./file0\x00', 0x44200, 0xc) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000240)={0x8, 0x1, 0xf8, 0x2, 0xffff}, 0xc) accept4(0xffffffffffffffff, &(0x7f0000000040)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0, 0x80000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000001f000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000380)="3e650f0d8c4c070f20c06635000001000f22c066b9da0b000066b80080000066ba000000000f300f143dba4100edba2100b001eeba4300b80f00ef0fc732b8bf0f8ee866b86e0000000f23c00f21f86635020006000f23f8", 0x58}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]}) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(0xffffffffffffffff, 0x8010661b, &(0x7f0000000000)) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) ioctl$KVM_RUN(r4, 0xae80, 0x0) 11:33:19 executing program 0: r0 = open(0x0, 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={r2}) [ 453.478244][ T32] audit: type=1804 audit(1608118399.404:120): pid=9957 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/61/bus" dev="sda1" ino=15862 res=1 errno=0 [ 453.502393][ T32] audit: type=1800 audit(1608118399.404:121): pid=9957 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15862 res=0 errno=0 11:33:19 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={r2}) [ 453.838120][ T9950] IPVS: ftp: loaded support on port[0] = 21 [ 454.138159][ T32] audit: type=1804 audit(1608118400.034:122): pid=9980 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/62/bus" dev="sda1" ino=15863 res=1 errno=0 [ 454.162484][ T32] audit: type=1800 audit(1608118400.034:123): pid=9980 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15863 res=0 errno=0 [ 454.862770][ T9950] chnl_net:caif_netlink_parms(): no params data found 11:33:21 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={r2}) [ 455.204462][ T32] audit: type=1804 audit(1608118401.124:124): pid=10094 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/63/bus" dev="sda1" ino=15864 res=1 errno=0 [ 455.229682][ T32] audit: type=1800 audit(1608118401.134:125): pid=10094 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15864 res=0 errno=0 [ 455.230152][ T9950] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.256887][ T9950] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.266669][ T9950] device bridge_slave_0 entered promiscuous mode [ 455.287766][ T9950] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.296618][ T9950] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.306512][ T9950] device bridge_slave_1 entered promiscuous mode [ 455.379516][ T9950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 455.424152][ T9950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 11:33:21 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={r2}) [ 455.591728][ T9950] team0: Port device team_slave_0 added [ 455.661753][ T9950] team0: Port device team_slave_1 added [ 455.715811][ T8489] Bluetooth: hci3: command 0x0409 tx timeout [ 455.792110][ T9950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 455.799653][ T9950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 455.828190][ T9950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 455.850485][ T9950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 455.857844][ T9950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 455.885101][ T9950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 455.963178][ T9950] device hsr_slave_0 entered promiscuous mode [ 455.980592][ T9950] device hsr_slave_1 entered promiscuous mode [ 455.989634][ T9950] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 455.998525][ T9950] Cannot create hsr debugfs directory [ 456.339576][ T9950] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 456.369313][ T9950] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 456.447202][ T9950] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 456.490192][ T9950] netdevsim netdevsim3 netdevsim3: renamed from eth3 11:33:22 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(0x0, 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={r2}) [ 456.847703][ T32] kauditd_printk_skb: 2 callbacks suppressed [ 456.847769][ T32] audit: type=1800 audit(1608118402.774:128): pid=10187 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15864 res=0 errno=0 [ 456.874287][ T32] audit: type=1804 audit(1608118402.784:129): pid=10187 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/65/bus" dev="sda1" ino=15864 res=1 errno=0 [ 456.904301][ T32] audit: type=1800 audit(1608118402.784:130): pid=10187 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15864 res=0 errno=0 11:33:23 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(0x0, 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={r2}) 11:33:23 executing program 1: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={r2}) [ 457.160857][ T9950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 457.269644][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 457.279223][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 457.316917][ T9950] 8021q: adding VLAN 0 to HW filter on device team0 [ 457.359703][ T32] audit: type=1800 audit(1608118403.284:131): pid=10191 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15869 res=0 errno=0 [ 457.380101][ T32] audit: type=1804 audit(1608118403.284:132): pid=10193 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/66/bus" dev="sda1" ino=15869 res=1 errno=0 [ 457.407169][ T32] audit: type=1800 audit(1608118403.284:133): pid=10193 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15869 res=0 errno=0 [ 457.477610][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 457.487720][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 457.497313][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.504945][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state 11:33:23 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(0x0, 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={r2}) [ 457.668479][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 457.678053][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 457.688439][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 457.698434][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.706077][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 457.715713][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 457.728876][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 457.739953][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 457.750740][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 457.761971][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 457.772806][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 457.774537][ T32] audit: type=1804 audit(1608118403.454:134): pid=10194 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir468552123/syzkaller.kJYg7v/35/bus" dev="sda1" ino=15870 res=1 errno=0 [ 457.806027][ T32] audit: type=1800 audit(1608118403.454:135): pid=10194 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=15870 res=0 errno=0 [ 457.829153][ T8489] Bluetooth: hci3: command 0x041b tx timeout [ 457.877291][ T9950] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 457.888134][ T9950] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 458.109077][ T9950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 458.201786][ T32] audit: type=1800 audit(1608118404.124:136): pid=10198 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15874 res=0 errno=0 [ 458.251116][ T9739] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 458.263382][ T9739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 458.273137][ T9739] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 458.283803][ T9739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 458.293591][ T9739] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 458.303350][ T9739] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 458.311187][ T9739] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 458.311992][ T32] audit: type=1804 audit(1608118404.174:137): pid=10198 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/67/bus" dev="sda1" ino=15874 res=1 errno=0 11:33:24 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={r2}) [ 458.507378][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 458.517365][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 458.527725][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 458.617940][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 458.628072][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 458.676102][ T9739] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 458.685786][ T9739] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 458.706098][ T9950] device veth0_vlan entered promiscuous mode [ 458.819586][ T9950] device veth1_vlan entered promiscuous mode [ 459.075117][ T8850] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 459.085429][ T8850] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 459.094953][ T8850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 459.104941][ T8850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 459.154549][ T9950] device veth0_macvtap entered promiscuous mode [ 459.184849][ T9950] device veth1_macvtap entered promiscuous mode [ 459.258220][ T8850] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 459.268094][ T8850] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 459.289251][ T9950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 459.300692][ T9950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.310851][ T9950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 459.321547][ T9950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.331684][ T9950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 459.342278][ T9950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.356476][ T9950] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 459.373761][ T8850] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 459.384556][ T8850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 459.506272][ T9950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 459.517332][ T9950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.527534][ T9950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 459.539679][ T9950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.550014][ T9950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 459.560788][ T9950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.575125][ T9950] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 459.588212][ T8850] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 459.599276][ T8850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 459.624563][ T9950] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.635614][ T9950] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.644639][ T9950] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.654040][ T9950] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.890821][ T8850] Bluetooth: hci3: command 0x040f tx timeout [ 460.051713][ T675] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 460.059836][ T675] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 460.071924][ T8492] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 460.178006][ T9487] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 460.187664][ T9487] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 460.195989][ T8489] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 11:33:27 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000140)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000240)) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x1) 11:33:27 executing program 1: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={r2}) 11:33:27 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={r2}) 11:33:27 executing program 2: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) setpriority(0x0, r0, 0x10ffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = open(&(0x7f0000000100)='./file0\x00', 0x44200, 0xc) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000240)={0x8, 0x1, 0xf8, 0x2, 0xffff}, 0xc) accept4(0xffffffffffffffff, &(0x7f0000000040)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0, 0x80000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000001f000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000380)="3e650f0d8c4c070f20c06635000001000f22c066b9da0b000066b80080000066ba000000000f300f143dba4100edba2100b001eeba4300b80f00ef0fc732b8bf0f8ee866b86e0000000f23c00f21f86635020006000f23f8", 0x58}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]}) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(0xffffffffffffffff, 0x8010661b, &(0x7f0000000000)) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 461.953345][ T9499] Bluetooth: hci3: command 0x0419 tx timeout 11:33:27 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={r2}) 11:33:28 executing program 3: syz_emit_ethernet(0x1e, &(0x7f0000000000)={@multicast, @multicast, @void, {@can={0xc, {{0x2, 0x0, 0x1, 0x1}, 0x8, 0x1, 0x0, 0x0, "8f000f9e7baec5c4"}}}}, 0x0) [ 462.418777][ T32] kauditd_printk_skb: 10 callbacks suppressed [ 462.418845][ T32] audit: type=1800 audit(1608118408.344:148): pid=10248 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15889 res=0 errno=0 [ 462.583545][ T32] audit: type=1804 audit(1608118408.424:149): pid=10249 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/70/bus" dev="sda1" ino=15889 res=1 errno=0 [ 462.607967][ T32] audit: type=1800 audit(1608118408.424:150): pid=10249 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15889 res=0 errno=0 11:33:28 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9) r1 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) keyctl$chown(0x4, r1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20000) r2 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') sched_setattr(0x0, &(0x7f0000000580)={0x38, 0x0, 0x0, 0x800, 0xffff, 0x4, 0x5092764e, 0xffff, 0x4}, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000400)=0xbf3, 0xffffffffffffffff, 0x0, 0x7, 0x0) r3 = getpid() migrate_pages(0x0, 0x5, &(0x7f0000000200)=0xb02, &(0x7f0000000240)=0x1) process_vm_readv(r3, &(0x7f0000000080)=[{&(0x7f0000000100)=""/108, 0x6c}], 0x1, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/83, 0x53}], 0x1, 0x0) setns(r2, 0x0) r4 = memfd_create(0x0, 0x0) ftruncate(r4, 0x3) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b9010000000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c1101000000000000000001130000000022001701", 0xa0, 0x8800}, {&(0x7f0000014600)="2200170100000000011700080000000008007809140b2a3a0802", 0x1a, 0x8b800}], 0x0, &(0x7f0000000040)={[{@gid={'gid'}}, {@overriderock='overriderockperm'}]}) write$nbd(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="678070cab45f00c1890e0544914466980100000000000300f8ffffffd97f003d58c7ddf52f34aa6a432c00260554bca3092ee0b6b65e61cd4b13e09c025aa3371973a0e58f3aee6cbe26ddea3816c5526d52b3d3f7c4bb822d98835a48785e3fa51620390830209e6f955e"], 0x56) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c010089cedc1bede4260cf40d3ebed40b18accadf1c6c7f4e57461080f7c089a22d92003d1488b0c4e34cc6a2a92456d900ea263286", @ANYRESOCT, @ANYBLOB="000226bd7000fedbdf2506000000080004000000ff012c0001800800061ebbfaec2d9400776c63000700060064680000060004004e20000008000800120a000008000b00736970002400028008000600ff07000005000d000000010000000c000280080003000200000300000000000000000a000000080006007110000008000900fffbffff080003000100000034000280080003000100030000000800090006000000080006000800000008000900010000001c0000000100000000200000060007004e210000080003000200000008000600f24c9b61300003800600040080040000080001000100000006000400ee00000014000600fe80360b363f24ea00000000000000000000000000aa0800"], 0x12c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 11:33:28 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x0) lseek(r1, 0x0, 0x2) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={r2}) 11:33:28 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x3d, 0x60, 0xb3, 0x8, 0x1fb9, 0x201, 0xc07e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x21, 0x8b, 0x48}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000c00)={0x2c, &(0x7f0000000d00)={0x0, 0x0, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x44, &(0x7f0000000780)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x0, 0x0, 0xf, "a6689987636a247f26df2d264d9998"}, 0x0, 0x0, 0x0, 0x0}) [ 463.038599][ T32] audit: type=1800 audit(1608118408.964:151): pid=10256 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15887 res=0 errno=0 [ 463.241393][ T32] audit: type=1804 audit(1608118408.994:152): pid=10256 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/71/bus" dev="sda1" ino=15887 res=1 errno=0 [ 463.265894][ T32] audit: type=1800 audit(1608118408.994:153): pid=10256 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15887 res=0 errno=0 11:33:29 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x0) lseek(r1, 0x0, 0x2) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={r2}) [ 463.716172][ T9739] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 463.963115][ T9739] usb 4-1: Using ep0 maxpacket: 8 [ 464.084111][ T9739] usb 4-1: New USB device found, idVendor=1fb9, idProduct=0201, bcdDevice=c0.7e [ 464.093606][ T9739] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 11:33:30 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9) r1 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) keyctl$chown(0x4, r1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20000) r2 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') sched_setattr(0x0, &(0x7f0000000580)={0x38, 0x0, 0x0, 0x800, 0xffff, 0x4, 0x5092764e, 0xffff, 0x4}, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000400)=0xbf3, 0xffffffffffffffff, 0x0, 0x7, 0x0) r3 = getpid() migrate_pages(0x0, 0x5, &(0x7f0000000200)=0xb02, &(0x7f0000000240)=0x1) process_vm_readv(r3, &(0x7f0000000080)=[{&(0x7f0000000100)=""/108, 0x6c}], 0x1, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/83, 0x53}], 0x1, 0x0) setns(r2, 0x0) r4 = memfd_create(0x0, 0x0) ftruncate(r4, 0x3) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b9010000000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c1101000000000000000001130000000022001701", 0xa0, 0x8800}, {&(0x7f0000014600)="2200170100000000011700080000000008007809140b2a3a0802", 0x1a, 0x8b800}], 0x0, &(0x7f0000000040)={[{@gid={'gid'}}, {@overriderock='overriderockperm'}]}) write$nbd(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="678070cab45f00c1890e0544914466980100000000000300f8ffffffd97f003d58c7ddf52f34aa6a432c00260554bca3092ee0b6b65e61cd4b13e09c025aa3371973a0e58f3aee6cbe26ddea3816c5526d52b3d3f7c4bb822d98835a48785e3fa51620390830209e6f955e"], 0x56) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c010089cedc1bede4260cf40d3ebed40b18accadf1c6c7f4e57461080f7c089a22d92003d1488b0c4e34cc6a2a92456d900ea263286", @ANYRESOCT, @ANYBLOB="000226bd7000fedbdf2506000000080004000000ff012c0001800800061ebbfaec2d9400776c63000700060064680000060004004e20000008000800120a000008000b00736970002400028008000600ff07000005000d000000010000000c000280080003000200000300000000000000000a000000080006007110000008000900fffbffff080003000100000034000280080003000100030000000800090006000000080006000800000008000900010000001c0000000100000000200000060007004e210000080003000200000008000600f24c9b61300003800600040080040000080001000100000006000400ee00000014000600fe80360b363f24ea00000000000000000000000000aa0800"], 0x12c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) [ 464.130291][ T32] audit: type=1800 audit(1608118410.054:154): pid=10269 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15897 res=0 errno=0 [ 464.169422][ T9739] usb 4-1: config 0 descriptor?? [ 464.228223][ T9739] cp210x 4-1:0.0: cp210x converter detected [ 464.254394][ T32] audit: type=1804 audit(1608118410.104:155): pid=10269 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/72/bus" dev="sda1" ino=15897 res=1 errno=0 [ 464.279339][ T32] audit: type=1800 audit(1608118410.104:156): pid=10269 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15897 res=0 errno=0 11:33:30 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x0) lseek(r1, 0x0, 0x2) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={r2}) [ 464.654318][ T9739] cp210x 4-1:0.0: failed to get vendor val 0x3711 size 2: 0 [ 464.661819][ T9739] cp210x 4-1:0.0: GPIO initialisation failed: -5 [ 464.858136][ T32] audit: type=1800 audit(1608118410.744:157): pid=10282 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15897 res=0 errno=0 11:33:31 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(0xffffffffffffffff, 0x0, 0x2) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={r2}) [ 465.114661][ T9739] cp210x ttyUSB0: failed set request 0x3 status: -71 [ 465.121776][ T9739] cp210x: probe of ttyUSB0 failed with error -71 [ 465.193198][ T9739] usb 4-1: USB disconnect, device number 2 [ 465.200941][ T9739] cp210x 4-1:0.0: device disconnected 11:33:31 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9) r1 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) keyctl$chown(0x4, r1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20000) r2 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') sched_setattr(0x0, &(0x7f0000000580)={0x38, 0x0, 0x0, 0x800, 0xffff, 0x4, 0x5092764e, 0xffff, 0x4}, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000400)=0xbf3, 0xffffffffffffffff, 0x0, 0x7, 0x0) r3 = getpid() migrate_pages(0x0, 0x5, &(0x7f0000000200)=0xb02, &(0x7f0000000240)=0x1) process_vm_readv(r3, &(0x7f0000000080)=[{&(0x7f0000000100)=""/108, 0x6c}], 0x1, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/83, 0x53}], 0x1, 0x0) setns(r2, 0x0) r4 = memfd_create(0x0, 0x0) ftruncate(r4, 0x3) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b9010000000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c1101000000000000000001130000000022001701", 0xa0, 0x8800}, {&(0x7f0000014600)="2200170100000000011700080000000008007809140b2a3a0802", 0x1a, 0x8b800}], 0x0, &(0x7f0000000040)={[{@gid={'gid'}}, {@overriderock='overriderockperm'}]}) write$nbd(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="678070cab45f00c1890e0544914466980100000000000300f8ffffffd97f003d58c7ddf52f34aa6a432c00260554bca3092ee0b6b65e61cd4b13e09c025aa3371973a0e58f3aee6cbe26ddea3816c5526d52b3d3f7c4bb822d98835a48785e3fa51620390830209e6f955e"], 0x56) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c010089cedc1bede4260cf40d3ebed40b18accadf1c6c7f4e57461080f7c089a22d92003d1488b0c4e34cc6a2a92456d900ea263286", @ANYRESOCT, @ANYBLOB="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"], 0x12c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 11:33:31 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(0xffffffffffffffff, 0x0, 0x2) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={r2}) [ 465.883723][ T9739] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 466.124036][ T9739] usb 4-1: Using ep0 maxpacket: 8 [ 466.258349][ T9739] usb 4-1: New USB device found, idVendor=1fb9, idProduct=0201, bcdDevice=c0.7e [ 466.268006][ T9739] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.357427][ T9739] usb 4-1: config 0 descriptor?? [ 466.409533][ T9739] cp210x 4-1:0.0: cp210x converter detected [ 466.655029][ T9739] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 466.664983][ T9739] cp210x 4-1:0.0: querying part number failed [ 466.684964][ T9739] cp210x ttyUSB0: failed get req 0x4 size 2 status: -71 [ 466.692220][ T9739] cp210x: probe of ttyUSB0 failed with error -71 [ 466.728274][ T9739] usb 4-1: USB disconnect, device number 3 [ 466.736259][ T9739] cp210x 4-1:0.0: device disconnected 11:33:32 executing program 2: syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x40030, &(0x7f00000005c0)={[{@uid={'uid'}}]}) ioctl$CHAR_RAW_ROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f0000000140)) 11:33:32 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9) r1 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) keyctl$chown(0x4, r1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20000) r2 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') sched_setattr(0x0, &(0x7f0000000580)={0x38, 0x0, 0x0, 0x800, 0xffff, 0x4, 0x5092764e, 0xffff, 0x4}, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000400)=0xbf3, 0xffffffffffffffff, 0x0, 0x7, 0x0) r3 = getpid() migrate_pages(0x0, 0x5, &(0x7f0000000200)=0xb02, &(0x7f0000000240)=0x1) process_vm_readv(r3, &(0x7f0000000080)=[{&(0x7f0000000100)=""/108, 0x6c}], 0x1, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/83, 0x53}], 0x1, 0x0) setns(r2, 0x0) r4 = memfd_create(0x0, 0x0) ftruncate(r4, 0x3) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b9010000000001b9000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c1101000000000000000001130000000022001701", 0xa0, 0x8800}, {&(0x7f0000014600)="2200170100000000011700080000000008007809140b2a3a0802", 0x1a, 0x8b800}], 0x0, &(0x7f0000000040)={[{@gid={'gid'}}, {@overriderock='overriderockperm'}]}) write$nbd(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="678070cab45f00c1890e0544914466980100000000000300f8ffffffd97f003d58c7ddf52f34aa6a432c00260554bca3092ee0b6b65e61cd4b13e09c025aa3371973a0e58f3aee6cbe26ddea3816c5526d52b3d3f7c4bb822d98835a48785e3fa51620390830209e6f955e"], 0x56) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c010089cedc1bede4260cf40d3ebed40b18accadf1c6c7f4e57461080f7c089a22d92003d1488b0c4e34cc6a2a92456d900ea263286", @ANYRESOCT, @ANYBLOB="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"], 0x12c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 11:33:32 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(0xffffffffffffffff, 0x0, 0x2) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={r2}) 11:33:32 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x3d, 0x60, 0xb3, 0x8, 0x1fb9, 0x201, 0xc07e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x21, 0x8b, 0x48}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000c00)={0x2c, &(0x7f0000000d00)={0x0, 0x0, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x44, &(0x7f0000000780)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x0, 0x0, 0xf, "a6689987636a247f26df2d264d9998"}, 0x0, 0x0, 0x0, 0x0}) [ 467.403148][ T9739] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 467.643260][ T9739] usb 4-1: Using ep0 maxpacket: 8 11:33:33 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={r2}) [ 467.764060][ T9739] usb 4-1: New USB device found, idVendor=1fb9, idProduct=0201, bcdDevice=c0.7e [ 467.773544][ T9739] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 11:33:33 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0xff2c) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) r2 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendmmsg$inet(r2, &(0x7f0000000080)=[{{&(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x2a, 0x0}}, {{&(0x7f0000000040)={0x2, 0x2, @broadcast}, 0xf, 0x0}}], 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x320, 0xffffffff, 0xc8, 0x190, 0x0, 0xffffffff, 0xffffffff, 0x258, 0x258, 0x258, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@uncond, 0x0, 0xa4, 0xc8}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0xb, 0x7, 0x5}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x4, 0x6, 0x800}}}, {{@ipv6={@ipv4={[], [], @broadcast}, @private2={0xfc, 0x2, [], 0x1}, [0xffffffff, 0xffffffff, 0x0, 0xff000000], [0x0, 0xff000000, 0xff, 0xffffffff], 'wg0\x00', 'rose0\x00', {}, {0xff}, 0x3c, 0x2}, 0x0, 0xa4, 0xc8}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x7}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x37c) [ 467.866209][ T9739] usb 4-1: config 0 descriptor?? 11:33:33 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)}, 0x40011) [ 467.918603][ T9739] cp210x 4-1:0.0: cp210x converter detected [ 468.148299][ T32] kauditd_printk_skb: 11 callbacks suppressed [ 468.148352][ T32] audit: type=1800 audit(1608118414.074:169): pid=10343 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15909 res=0 errno=0 [ 468.288104][ T32] audit: type=1804 audit(1608118414.124:170): pid=10345 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/77/bus" dev="sda1" ino=15909 res=1 errno=0 [ 468.313300][ T32] audit: type=1800 audit(1608118414.124:171): pid=10345 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15909 res=0 errno=0 11:33:34 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800000000201e040128000000000001090224002100000000090401000d0300000009210000000122290009058103"], 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x3, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x930}, @in6={0xa, 0x4e21, 0x7, @loopback, 0x40}, @in6={0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, [], 0x30}, 0x1}], 0x54) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x29, {0xffffffffffffff85, 0x6, "90a6895aefd79b87429d14ba8a6a2c922a8bb666b2dfea61dcba9f5bf786627df702a30d6479aa"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 468.358923][ T9739] cp210x 4-1:0.0: failed to get vendor val 0x3711 size 2: 0 [ 468.366586][ T9739] cp210x 4-1:0.0: GPIO initialisation failed: -5 11:33:34 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={r2}) 11:33:34 executing program 1: r0 = syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000d40)=ANY=[@ANYBLOB="12010000090000082505a8a40700000001010902240001010000000904000012070103000905010200ffe000000905820241"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000200)=ANY=[], 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000000)=""/168, &(0x7f00000000c0)=0xa8) [ 468.726726][ T32] audit: type=1800 audit(1608118414.654:172): pid=10356 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15909 res=0 errno=0 [ 468.773915][ T32] audit: type=1804 audit(1608118414.694:173): pid=10356 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/78/bus" dev="sda1" ino=15909 res=1 errno=0 [ 468.798494][ T32] audit: type=1800 audit(1608118414.694:174): pid=10356 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15909 res=0 errno=0 [ 468.853333][ T9739] cp210x ttyUSB0: failed set request 0x3 status: -71 [ 468.860354][ T9739] cp210x: probe of ttyUSB0 failed with error -71 [ 468.949925][ T9739] usb 4-1: USB disconnect, device number 4 [ 468.957774][ T9739] cp210x 4-1:0.0: device disconnected 11:33:35 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={r2}) [ 469.045718][ T9499] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 469.316001][ T9499] usb 3-1: Using ep0 maxpacket: 32 [ 469.322759][ T32] audit: type=1800 audit(1608118415.244:175): pid=10371 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15915 res=0 errno=0 [ 469.343047][ T32] audit: type=1804 audit(1608118415.264:176): pid=10371 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/79/bus" dev="sda1" ino=15915 res=1 errno=0 [ 469.367083][ T32] audit: type=1800 audit(1608118415.264:177): pid=10371 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15915 res=0 errno=0 [ 469.473125][ T8492] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 469.494140][ T9499] usb 3-1: config 0 has too many interfaces: 33, using maximum allowed: 32 [ 469.503063][ T9499] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 33 [ 469.512120][ T9499] usb 3-1: config 0 has no interface number 0 [ 469.518564][ T9499] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 469.530562][ T9499] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 469.540906][ T9499] usb 3-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 469.554097][ T9499] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 469.563827][ T9499] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.580965][ T9499] usb 3-1: config 0 descriptor?? 11:33:35 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x3d, 0x60, 0xb3, 0x8, 0x1fb9, 0x201, 0xc07e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x21, 0x8b, 0x48}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000c00)={0x2c, &(0x7f0000000d00)={0x0, 0x0, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x44, &(0x7f0000000780)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x0, 0x0, 0xf, "a6689987636a247f26df2d264d9998"}, 0x0, 0x0, 0x0, 0x0}) 11:33:35 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={r2}) [ 469.835574][ T8492] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 64 [ 469.846704][ T8492] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 65, setting to 64 [ 469.857857][ T8492] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 470.014486][ T8492] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 470.024048][ T8492] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 470.032161][ T8492] usb 2-1: SerialNumber: syz [ 470.071649][ T32] audit: type=1800 audit(1608118415.994:178): pid=10380 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15909 res=0 errno=0 [ 470.097802][ T9499] prodikeys 0003:041E:2801.0001: unknown main item tag 0x0 [ 470.153812][T10367] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 470.176048][T10367] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 470.177647][ T9499] prodikeys 0003:041E:2801.0001: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.2-1/input1 [ 470.195823][ T9499] prodikeys 0003:041E:2801.0001: output report is empty [ 470.203237][ T9499] hid_prodikeys: hid-prodikeys: failed to find output report [ 470.203237][ T9499] [ 470.246083][ T8492] hub 2-1:1.0: bad descriptor, ignoring hub [ 470.252250][ T8492] hub: probe of 2-1:1.0 failed with error -5 [ 470.263390][ T9739] usb 4-1: new high-speed USB device number 5 using dummy_hcd 11:33:36 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={r2}) [ 470.409027][ T9499] usb 3-1: USB disconnect, device number 2 [ 470.470100][T10367] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 470.500632][T10367] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 470.508596][ T9739] usb 4-1: Using ep0 maxpacket: 8 [ 470.637502][ T9739] usb 4-1: New USB device found, idVendor=1fb9, idProduct=0201, bcdDevice=c0.7e [ 470.646900][ T9739] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.695577][ T9739] usb 4-1: config 0 descriptor?? [ 470.737362][ T9739] cp210x 4-1:0.0: cp210x converter detected [ 470.781029][ T8492] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 471.073421][ T9499] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 471.096809][ T8492] usb 2-1: USB disconnect, device number 2 [ 471.126013][ T8492] usblp0: removed [ 471.167794][ T9739] cp210x 4-1:0.0: failed to get vendor val 0x3711 size 2: 0 [ 471.175353][ T9739] cp210x 4-1:0.0: GPIO initialisation failed: -5 [ 471.323333][ T9499] usb 3-1: Using ep0 maxpacket: 32 [ 471.485028][ T9499] usb 3-1: config 0 has too many interfaces: 33, using maximum allowed: 32 [ 471.493899][ T9499] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 33 [ 471.503151][ T9499] usb 3-1: config 0 has no interface number 0 [ 471.509377][ T9499] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 471.520459][ T9499] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 471.530440][ T9499] usb 3-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 471.544084][ T9499] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 471.553330][ T9499] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.564340][ T8492] usb 2-1: new full-speed USB device number 3 using dummy_hcd 11:33:37 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r2 = open(0x0, 0x105050, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={r2}) [ 471.605540][ T9739] cp210x ttyUSB0: failed set request 0x3 status: -71 [ 471.612537][ T9739] cp210x: probe of ttyUSB0 failed with error -71 [ 471.671236][ T9739] usb 4-1: USB disconnect, device number 5 [ 471.681154][ T9739] cp210x 4-1:0.0: device disconnected 11:33:37 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800000000201e040128000000000001090224002100000000090401000d0300000009210000000122290009058103"], 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x3, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x930}, @in6={0xa, 0x4e21, 0x7, @loopback, 0x40}, @in6={0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, [], 0x30}, 0x1}], 0x54) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x29, {0xffffffffffffff85, 0x6, "90a6895aefd79b87429d14ba8a6a2c922a8bb666b2dfea61dcba9f5bf786627df702a30d6479aa"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 471.944721][ T8492] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 64 [ 471.955883][ T8492] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 65, setting to 64 [ 471.967171][ T9499] usb 3-1: config 0 descriptor?? [ 471.974057][ T8492] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 472.036510][ T9499] usb 3-1: can't set config #0, error -71 [ 472.074900][ T9499] usb 3-1: USB disconnect, device number 3 11:33:38 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x3d, 0x60, 0xb3, 0x8, 0x1fb9, 0x201, 0xc07e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x21, 0x8b, 0x48}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000c00)={0x2c, &(0x7f0000000d00)={0x0, 0x0, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x44, &(0x7f0000000780)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x0, 0x0, 0xf, "a6689987636a247f26df2d264d9998"}, 0x0, 0x0, 0x0, 0x0}) 11:33:38 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x41000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = inotify_init() ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0x400017e) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "02e1000000060e008946e3c600fd8400"}) lsetxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='trusted.overlay.nlink\x00', &(0x7f00000002c0)={'U+', 0x800}, 0x16, 0x2) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x80000000, 0x0, 0x0, 0x5}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) dup3(r2, r0, 0x0) writev(r1, &(0x7f0000001400)=[{&(0x7f00000001c0)="0c2d750117c27053ad0cbae0c5cb85b18ef456bbf62609dedd4fa1de187cd879402db1e98e3c75bc14d46c33c6e60055d27cb5b7f7e846bbcb94aebcc8f0bbf5e22818094eefc78432b31b8946c8d6ec1cbe3a5748e30ba28001053731fc02fa0536d54703f57d1df255cb82675e899d7cc1dec15dfd7c326cd9ee927fe6719121520c7bbd7dfd28a1200b6a489844dc860a6809f26b862fd5782d0ac9ee5cbe04ccf568c5610ad0485ef20f1a186291e99875d8379cefc5ba3312f56c75f6691656912f66140b35e78fd9d08159a831f3b7", 0xd2}, {&(0x7f0000000100)="68072908b5d9f835b07c52d556d402a3a2385a", 0x13}, {0x0}, {&(0x7f0000000340)="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", 0x1000}, {0x0}], 0x5) [ 472.413765][ T8492] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 472.423160][ T8492] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 11:33:38 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r2 = open(0x0, 0x105050, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={r2}) [ 472.510016][ T8492] usb 2-1: can't set config #1, error -71 [ 472.541025][ T8492] usb 2-1: USB disconnect, device number 3 [ 472.753181][ T9739] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 472.994242][ T9739] usb 3-1: Using ep0 maxpacket: 32 [ 473.063396][ T8492] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 473.114000][ T9739] usb 3-1: config 0 has too many interfaces: 33, using maximum allowed: 32 [ 473.122770][ T9739] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 33 [ 473.132109][ T9739] usb 3-1: config 0 has no interface number 0 [ 473.138503][ T9739] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 473.149715][ T9739] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 11:33:39 executing program 1: recvfrom$x25(0xffffffffffffffff, &(0x7f0000000140)=""/237, 0xed, 0x20, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x80000000048, &(0x7f0000000040)=0x200005, 0x4) sendmmsg$inet6(r0, &(0x7f0000001840)=[{{&(0x7f0000000100)={0xa, 0x4621, 0x0, @mcast2={0xff, 0x3}}, 0x1c, 0x0}}], 0x1, 0x800) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000240)={0x0, 0x0, [], @raw_data=[0x7ff, 0x3, 0xfffffff9, 0x9, 0x2065, 0x7fff, 0x400, 0xab0, 0x7, 0x2, 0x2, 0x3ff, 0x3, 0x1ff, 0xfce, 0x1, 0x475, 0x1, 0xfff, 0x7c07b9ef, 0x0, 0x104, 0x8, 0x8, 0x5, 0x0, 0x400, 0x3, 0x10000, 0x9, 0x2, 0x3]}) [ 473.159805][ T9739] usb 3-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 473.173082][ T9739] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 473.182272][ T9739] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 11:33:39 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r2 = open(0x0, 0x105050, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={r2}) [ 473.313221][ T8492] usb 4-1: Using ep0 maxpacket: 8 [ 473.434040][ T8492] usb 4-1: New USB device found, idVendor=1fb9, idProduct=0201, bcdDevice=c0.7e [ 473.443408][ T8492] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.473563][ T9739] usb 3-1: config 0 descriptor?? [ 473.505662][ T8492] usb 4-1: config 0 descriptor?? [ 473.570962][ T8492] cp210x 4-1:0.0: cp210x converter detected [ 473.596917][ T32] kauditd_printk_skb: 7 callbacks suppressed [ 473.596983][ T32] audit: type=1800 audit(1608118419.524:186): pid=10461 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15922 res=0 errno=0 11:33:39 executing program 1: syz_mount_image$hpfs(&(0x7f0000000100)='hpfs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x48, &(0x7f0000001540)=[{0x0, 0x0, 0x818}], 0x0, &(0x7f0000000000)) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000000080)=[{{&(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10, 0x0}}, {{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0xf, 0x0}}], 0x2, 0x0) getpeername$tipc(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10) 11:33:39 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={r2}) [ 473.949578][ T9739] prodikeys 0003:041E:2801.0002: unknown main item tag 0x0 [ 473.973454][ T8492] cp210x 4-1:0.0: failed to get vendor val 0x3711 size 2: 0 [ 473.980931][ T8492] cp210x 4-1:0.0: GPIO initialisation failed: -5 [ 474.026291][ T9739] prodikeys 0003:041E:2801.0002: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.2-1/input1 [ 474.041181][ T9739] prodikeys 0003:041E:2801.0002: output report is empty [ 474.048796][ T9739] hid_prodikeys: hid-prodikeys: failed to find output report [ 474.048796][ T9739] [ 474.148961][ T32] audit: type=1800 audit(1608118420.074:187): pid=10469 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15929 res=0 errno=0 [ 474.211037][ T9739] usb 3-1: USB disconnect, device number 4 [ 474.283984][T10472] hpfs: hpfs_map_sector(): read error [ 474.292752][ T32] audit: type=1804 audit(1608118420.114:188): pid=10469 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/85/bus" dev="sda1" ino=15929 res=1 errno=0 [ 474.404034][ T8492] cp210x ttyUSB0: failed set request 0x3 status: -71 [ 474.411271][ T8492] cp210x: probe of ttyUSB0 failed with error -71 [ 474.457655][T10472] hpfs: hpfs_map_sector(): read error [ 474.487855][ T8492] usb 4-1: USB disconnect, device number 6 [ 474.495529][ T8492] cp210x 4-1:0.0: device disconnected 11:33:40 executing program 1: syz_mount_image$hpfs(&(0x7f0000000100)='hpfs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x48, &(0x7f0000001540)=[{0x0, 0x0, 0x818}], 0x0, &(0x7f0000000000)) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000000080)=[{{&(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10, 0x0}}, {{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0xf, 0x0}}], 0x2, 0x0) getpeername$tipc(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10) 11:33:40 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x81, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$TCSETXF(0xffffffffffffffff, 0x5434, &(0x7f0000000000)={0x9, 0x9c6f, [0xd3f9, 0x7, 0x6, 0x5, 0x33e]}) syz_usb_control_io(r0, &(0x7f0000000540)={0x18, &(0x7f0000000080)=ANY=[@ANYRES16=r0], 0x0, 0x0, 0x0, 0x0}, 0x0) [ 475.105775][T10500] hpfs: hpfs_map_sector(): read error 11:33:41 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x3d, 0x60, 0xb3, 0x8, 0x1fb9, 0x201, 0xc07e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x21, 0x8b, 0x48}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000c00)={0x2c, &(0x7f0000000d00)={0x0, 0x0, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x44, &(0x7f0000000780)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 11:33:41 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={r2}) 11:33:41 executing program 1: r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0), 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x54, r0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, [], 0x1}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1f}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x54}, 0x1, 0x0, 0x0, 0x8040}, 0x20048800) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc00c5512, &(0x7f0000000180)=@usbdevfs_driver={0x0, 0x8, &(0x7f0000000040)="9d83823101502a80be47afe9310704f188dc1c9e51d9a8366a7ab5e5156a16129ceec5cb260554e614cc636b2dc488732056d2d91cc1eec0414f4af9345623af48dc3dc53cf351dd353f4188b55673d726ee28e9322d7831182107e1493406242e90d272f2ac8b628e7f300cad596bc91bd9e1ed3e94c04c4f944c7eaf1a9862e468c408e7bf671ba308811d1c4196dcb4bb0a64fe67a4f503ed0bfecf9f1820ed915ffa368de0"}) syz_mount_image$nilfs2(&(0x7f0000000000)='nilfs2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934d9d44b9a000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c0001000dadd32bf8764466dbb0c25de8a84ef61", 0xa8, 0x400}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='order=relaxed,order=relaxed,order=stric4,']) [ 475.553073][ T9739] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 475.679388][T10515] NILFS (loop1): unable to read secondary superblock (blocksize = 1024) [ 475.688090][T10515] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 475.698518][ T32] audit: type=1800 audit(1608118421.614:189): pid=10516 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15934 res=0 errno=0 [ 475.723462][ T9499] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 475.773889][ T32] audit: type=1804 audit(1608118421.664:190): pid=10516 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/86/bus" dev="sda1" ino=15934 res=1 errno=0 [ 475.924558][ T9739] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 475.935985][ T9739] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 475.949302][ T9739] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 475.959371][ T9739] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 475.972656][ T9739] usb 3-1: New USB device found, idVendor=5543, idProduct=0081, bcdDevice= 0.40 [ 475.974624][ T9499] usb 4-1: Using ep0 maxpacket: 8 [ 475.984543][ T9739] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 11:33:42 executing program 1: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x26f) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000380)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000000040)) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) [ 476.114662][ T9499] usb 4-1: New USB device found, idVendor=1fb9, idProduct=0201, bcdDevice=c0.7e [ 476.124275][ T9499] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.213101][ T9499] usb 4-1: config 0 descriptor?? [ 476.257250][ T9499] cp210x 4-1:0.0: cp210x converter detected [ 476.306781][ T9739] usb 3-1: config 0 descriptor?? 11:33:42 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={r2}) [ 476.684038][ T9499] cp210x 4-1:0.0: failed to get vendor val 0x3711 size 2: 0 [ 476.691707][ T9499] cp210x 4-1:0.0: GPIO initialisation failed: -5 11:33:42 executing program 1: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={r2}) [ 476.895658][ T9499] cp210x ttyUSB0: failed get req 0x4 size 2 status: -71 [ 476.904476][ T9499] cp210x: probe of ttyUSB0 failed with error -71 [ 476.969550][ T9499] usb 4-1: USB disconnect, device number 7 [ 476.977762][ T9499] cp210x 4-1:0.0: device disconnected [ 477.033412][ T9739] usbhid 3-1:0.0: can't add hid device: -71 [ 477.039818][ T9739] usbhid: probe of 3-1:0.0 failed with error -71 [ 477.082366][ T32] audit: type=1800 audit(1608118423.004:191): pid=10543 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15935 res=0 errno=0 [ 477.115195][ T9739] usb 3-1: USB disconnect, device number 5 [ 477.179957][ T32] audit: type=1804 audit(1608118423.054:192): pid=10543 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/87/bus" dev="sda1" ino=15935 res=1 errno=0 [ 477.338250][ T32] audit: type=1800 audit(1608118423.204:193): pid=10553 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=15938 res=0 errno=0 [ 477.358298][ T32] audit: type=1804 audit(1608118423.224:194): pid=10553 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir468552123/syzkaller.kJYg7v/49/bus" dev="sda1" ino=15938 res=1 errno=0 11:33:43 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x3d, 0x60, 0xb3, 0x8, 0x1fb9, 0x201, 0xc07e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x21, 0x8b, 0x48}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000c00)={0x2c, &(0x7f0000000d00)={0x0, 0x0, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0}) [ 477.804326][ T9499] usb 3-1: new high-speed USB device number 6 using dummy_hcd 11:33:43 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={r2}) [ 478.198760][ T9499] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 478.209808][ T9499] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 478.221008][ T9499] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 478.231044][ T9499] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 478.244382][ T9499] usb 3-1: New USB device found, idVendor=5543, idProduct=0081, bcdDevice= 0.40 [ 478.253653][ T9499] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.279397][ T9499] usb 3-1: config 0 descriptor?? 11:33:44 executing program 1: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={r2}) [ 478.393617][ T32] audit: type=1800 audit(1608118424.314:195): pid=10565 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15763 res=0 errno=0 [ 478.424667][ T8489] usb 4-1: new high-speed USB device number 8 using dummy_hcd 11:33:44 executing program 2: perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1) preadv(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x4, 0x0) r0 = syz_open_dev$hidraw(&(0x7f0000000080)='/dev/hidraw#\x00', 0x0, 0x200080) ioctl$FS_IOC_GETVERSION(r0, 0x80047601, &(0x7f00000000c0)) syz_open_procfs(0x0, &(0x7f00000001c0)) [ 478.664913][ T8489] usb 4-1: Using ep0 maxpacket: 8 11:33:44 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={r2}) [ 478.713578][ T9499] usbhid 3-1:0.0: can't add hid device: -71 [ 478.719961][ T9499] usbhid: probe of 3-1:0.0 failed with error -71 [ 478.746519][ T32] kauditd_printk_skb: 2 callbacks suppressed [ 478.746583][ T32] audit: type=1800 audit(1608118424.674:198): pid=10568 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=15935 res=0 errno=0 [ 478.800191][ T9499] usb 3-1: USB disconnect, device number 6 [ 478.830298][ T8489] usb 4-1: New USB device found, idVendor=1fb9, idProduct=0201, bcdDevice=c0.7e [ 478.839627][ T8489] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.913089][ T32] audit: type=1804 audit(1608118424.714:199): pid=10569 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir468552123/syzkaller.kJYg7v/50/bus" dev="sda1" ino=15935 res=1 errno=0 [ 478.924129][ T8489] usb 4-1: config 0 descriptor?? [ 479.011558][ T8489] cp210x 4-1:0.0: cp210x converter detected [ 479.147693][ T32] audit: type=1800 audit(1608118425.074:200): pid=10579 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15947 res=0 errno=0 [ 479.221889][ T32] audit: type=1804 audit(1608118425.134:201): pid=10579 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/89/bus" dev="sda1" ino=15947 res=1 errno=0 [ 479.246378][ T32] audit: type=1800 audit(1608118425.134:202): pid=10579 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15947 res=0 errno=0 11:33:45 executing program 2: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x7}}}}}]}}]}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000280)={0x54, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1f}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x40}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x0, 0x3c, 0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0xfffffffffffffeba}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, &(0x7f0000000000)="017a2fc908593b70934c4ab9c647d1b33743edf8eaf28eba8203b6e06f3f11de8bf2d7fc5950c02a27132b2392e7daf06f6997b757b4d6664196b722714600e631f93ec8bb84426c6b6335bc90a145bd1632d706822790736421fb1e89cf56e38cb114bb49b9827f273e4ad04e1e3c7167977f606d8cffdceeba412fe4ad2c19356386a06c013d769b0b080de43f321aeddad1a1446ed4d5ca76681bb119b464c8bbea63d259") r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000000080)=[{{&(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10, 0x0}}, {{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0xf, 0x0}}], 0x2, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f0000000180)={0x3, &(0x7f0000000300)=[{}, {@fixed}, {@fixed}]}) [ 479.445692][ T8489] cp210x 4-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 479.453436][ T8489] cp210x 4-1:0.0: GPIO initialisation failed: -71 11:33:45 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={r2}) [ 479.544691][ T8489] cp210x ttyUSB0: failed get req 0x4 size 2 status: -71 [ 479.551972][ T8489] cp210x: probe of ttyUSB0 failed with error -71 [ 479.671847][ T8489] usb 4-1: USB disconnect, device number 8 [ 479.679932][ T8489] cp210x 4-1:0.0: device disconnected 11:33:45 executing program 1: syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201070090c5d108f30c75938be00000000109021b000100000000090400000105994d5afb93bece4b"], 0x0) [ 480.002340][ T32] audit: type=1800 audit(1608118425.924:203): pid=10597 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15905 res=0 errno=0 11:33:46 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x3d, 0x60, 0xb3, 0x8, 0x1fb9, 0x201, 0xc07e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x21, 0x8b, 0x48}}]}}]}}, 0x0) [ 480.090945][ T32] audit: type=1804 audit(1608118425.954:204): pid=10597 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/90/bus" dev="sda1" ino=15905 res=1 errno=0 [ 480.115607][ T32] audit: type=1800 audit(1608118425.954:205): pid=10597 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15905 res=0 errno=0 11:33:46 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={r2}) [ 480.203094][ T9739] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 480.436151][ T32] audit: type=1800 audit(1608118426.364:206): pid=10606 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15949 res=0 errno=0 [ 480.456437][ T9739] usb 3-1: Using ep0 maxpacket: 32 [ 480.541063][ T32] audit: type=1804 audit(1608118426.394:207): pid=10607 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/91/bus" dev="sda1" ino=15949 res=1 errno=0 11:33:46 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={r2}) [ 480.583825][ T9739] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 480.595749][ T9739] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 480.636918][ T8492] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 480.663516][ T8489] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 480.796623][ T9739] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 480.806081][ T9739] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.814925][ T9739] usb 3-1: Product: syz [ 480.819234][ T9739] usb 3-1: Manufacturer: syz [ 480.824189][ T9739] usb 3-1: SerialNumber: syz [ 480.886782][ T8492] usb 4-1: Using ep0 maxpacket: 8 [ 480.956488][ T9739] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 481.014164][ T8492] usb 4-1: New USB device found, idVendor=1fb9, idProduct=0201, bcdDevice=c0.7e [ 481.023584][ T8492] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.067599][ T8489] usb 2-1: config 0 has an invalid descriptor of length 251, skipping remainder of the config [ 481.078193][ T8489] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 481.092138][ T8489] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=e0.8b [ 481.093107][ T8492] usb 4-1: config 0 descriptor?? [ 481.102750][ T8489] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 11:33:47 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={r2}) [ 481.165180][ T7] usb 3-1: USB disconnect, device number 7 [ 481.236325][ T8489] usb 2-1: config 0 descriptor?? [ 481.241500][ T8492] cp210x 4-1:0.0: cp210x converter detected [ 481.383217][ T8492] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 481.390980][ T8492] cp210x 4-1:0.0: querying part number failed [ 481.430892][ T8492] cp210x ttyUSB0: failed get req 0x4 size 2 status: -71 [ 481.438614][ T8492] cp210x: probe of ttyUSB0 failed with error -71 [ 481.520726][ T8492] usb 4-1: USB disconnect, device number 9 [ 481.525487][ T8489] usb 2-1: string descriptor 0 read error: -71 [ 481.528572][ T8492] cp210x 4-1:0.0: device disconnected [ 481.583358][ T8489] ath6kl: Failed to submit usb control message: -71 [ 481.590244][ T8489] ath6kl: unable to send the bmi data to the device: -71 [ 481.597866][ T8489] ath6kl: Unable to send get target info: -71 [ 481.649223][ T8489] ath6kl: Failed to init ath6kl core: -71 [ 481.656279][ T8489] ath6kl_usb: probe of 2-1:0.0 failed with error -71 [ 481.677967][ T8489] usb 2-1: USB disconnect, device number 4 11:33:47 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r2, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={r2}) [ 481.953440][ T7] usb 3-1: new high-speed USB device number 8 using dummy_hcd 11:33:47 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x3d, 0x60, 0xb3, 0x8, 0x1fb9, 0x201, 0xc07e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x21, 0x8b, 0x48}}]}}]}}, 0x0) 11:33:48 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r2, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={r2}) [ 482.193090][ T7] usb 3-1: Using ep0 maxpacket: 32 [ 482.270202][ T8501] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 482.314200][ T7] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 482.324848][ T7] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 482.514164][ T8489] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 482.545248][ T7] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 482.554839][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.563844][ T7] usb 3-1: Product: syz [ 482.568181][ T7] usb 3-1: Manufacturer: syz [ 482.573097][ T7] usb 3-1: SerialNumber: syz [ 482.664289][ T8501] usb 2-1: config 0 has an invalid descriptor of length 251, skipping remainder of the config [ 482.674910][ T8501] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 482.688086][ T8501] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=e0.8b [ 482.697461][ T8501] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.748983][ T7] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 482.773103][ T8489] usb 4-1: Using ep0 maxpacket: 8 11:33:48 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r2, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={r2}) [ 482.870002][ T8501] usb 2-1: config 0 descriptor?? [ 482.914404][ T8489] usb 4-1: New USB device found, idVendor=1fb9, idProduct=0201, bcdDevice=c0.7e [ 482.923819][ T8489] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.991922][ T8489] usb 4-1: config 0 descriptor?? 11:33:48 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x3d, 0x60, 0xb3, 0x8, 0x1fb9, 0x201, 0xc07e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x21, 0x8b, 0x48}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000c00)={0x2c, &(0x7f0000000d00)={0x0, 0x0, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0}) [ 483.021047][ T9499] usb 3-1: USB disconnect, device number 8 [ 483.041167][ T8489] cp210x 4-1:0.0: cp210x converter detected [ 483.143528][ T8501] usb 2-1: string descriptor 0 read error: -71 [ 483.176144][ T8501] ath6kl: Failed to submit usb control message: -71 [ 483.183452][ T8501] ath6kl: unable to send the bmi data to the device: -71 [ 483.190668][ T8501] ath6kl: Unable to send get target info: -71 [ 483.243402][ T8489] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 483.252472][ T8489] cp210x 4-1:0.0: querying part number failed [ 483.341187][ T8489] cp210x ttyUSB0: failed get req 0x4 size 2 status: -71 [ 483.348693][ T8489] cp210x: probe of ttyUSB0 failed with error -71 [ 483.389335][ T8501] ath6kl: Failed to init ath6kl core: -71 [ 483.426975][ T8501] ath6kl_usb: probe of 2-1:0.0 failed with error -71 11:33:49 executing program 1: syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201070090c5d108f30c75938be00000000109021b000100000000090400000105994d5afb93bece4b"], 0x0) 11:33:49 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(0xffffffffffffffff, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={r2}) [ 483.447152][ T8489] usb 4-1: USB disconnect, device number 10 [ 483.456176][ T8489] cp210x 4-1:0.0: device disconnected [ 483.512252][ T8501] usb 2-1: USB disconnect, device number 5 11:33:49 executing program 4: init_module(&(0x7f0000000000)='^}-\x00', 0x4, &(0x7f0000000040)='):{[{$-\x00') getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000080)=0x52, &(0x7f00000000c0)=0x1) r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x60, 0x200) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000000140)={0x1, '!'}, 0x2) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0f8565c, &(0x7f0000000180)={0x7, 0x2000000, 0x3, {0x7, @raw_data="76d9374a632e66ef586b3c52b00f1f4647677191fe9f671badf9371c9a97a8c8a5710124cfac5589ed006a7dc9f486d3ef55ad5c8142595aa7c38a6c0ba32380cd4d56020c26583e5c3ed8600c4c6ed93cf8bcb29674d5ebff10949c07b3b63fffebe21466515e2e0f21d6b287f24d88e56e5839a552a092612ed3977ceb5a57f8f448ccddb42bc4090262991168c800c1d7673e7043d13fccf80cadb08702ba179fb0a2712f0f681aa21aa8aa21e86dda53fd2600f2d1cf3c04a627d8adc44ccb19a847f1961311"}, 0x1f}) semctl$SEM_STAT_ANY(0xffffffffffffffff, 0x0, 0x14, &(0x7f0000000280)=""/62) r1 = openat$nvram(0xffffff9c, &(0x7f00000002c0)='/dev/nvram\x00', 0x80080, 0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000300)) openat$cgroup(r0, &(0x7f0000000340)='syz1\x00', 0x200002, 0x0) lseek(r1, 0x7fffffff, 0x3) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000380)={0x0, 0xde, "db3a95453a71afdcda57424a25e8cc59ba776c9ad6c18ca4b48bab93967399198815fccc43a6a2d7d5def4e5c571ea50e85f55a1ca90886fb11620d3c4e878cbaa8bb4f4831b34c9f8876ebd794ca7a3da0839e447ac06ed0ad78d4f659bec1e2b15016c00cc22771544d06230d040573e62b6d6cc917a51e00dc5491f3c10df8cb41bc23062354a3ac8d97d7634aff9a55b0d40e3f340b499c828d326f16f2ee48641d380ee4bb6e06f34403f089dc4d459198642bc395d4b0667a01fce03638cab1bf8f14a5ea2c43a0c80f12b0da5424ef787d49b1a22da26cf03844d"}, &(0x7f0000000480)=0xe6) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f00000004c0)={{0x88, @empty, 0x4e22, 0x1, 'lblcr\x00', 0x26, 0xfffffffe, 0x72}, {@empty, 0x4e24, 0x1, 0x3f, 0x7, 0x8001}}, 0x44) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000540)=0x2, 0x4) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40008000) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000680)={0x5, 0x40, 0x101, 0x40, 0x0, 0x235}) ioctl$SNDCTL_DSP_SUBDIVIDE(r1, 0xc0045009, &(0x7f00000006c0)) sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x0, 0x100, 0x70bd29, 0x25dfdbfd}, 0x14}}, 0x4804) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000840)=0x6) [ 483.772207][ T32] kauditd_printk_skb: 16 callbacks suppressed [ 483.772275][ T32] audit: type=1800 audit(1608118429.694:224): pid=10689 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15957 res=0 errno=0 [ 483.874985][ T9499] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 483.883200][ T32] audit: type=1804 audit(1608118429.774:225): pid=10689 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/97/bus" dev="sda1" ino=15957 res=1 errno=0 [ 483.907355][ T32] audit: type=1800 audit(1608118429.774:226): pid=10689 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15957 res=0 errno=0 11:33:50 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x3d, 0x60, 0xb3, 0x8, 0x1fb9, 0x201, 0xc07e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x21, 0x8b, 0x48}}]}}]}}, 0x0) [ 484.403287][ T9499] usb 3-1: Using ep0 maxpacket: 8 [ 484.433113][ T8501] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 484.525930][ T9499] usb 3-1: New USB device found, idVendor=1fb9, idProduct=0201, bcdDevice=c0.7e [ 484.535453][ T9499] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.621042][ T9499] usb 3-1: config 0 descriptor?? [ 484.677592][ T9499] cp210x 3-1:0.0: cp210x converter detected 11:33:50 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(0xffffffffffffffff, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={r2}) [ 484.797078][ T8501] usb 2-1: config 0 has an invalid descriptor of length 251, skipping remainder of the config [ 484.807760][ T8501] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 484.821245][ T8501] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=e0.8b [ 484.830525][ T8501] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.874446][ T7] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 484.943763][ T8501] usb 2-1: config 0 descriptor?? [ 485.020509][ T32] audit: type=1800 audit(1608118430.944:227): pid=10700 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15957 res=0 errno=0 [ 485.087938][ T32] audit: type=1804 audit(1608118430.994:228): pid=10700 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/98/bus" dev="sda1" ino=15957 res=1 errno=0 [ 485.113693][ T32] audit: type=1800 audit(1608118430.994:229): pid=10700 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15957 res=0 errno=0 [ 485.117153][ T9499] cp210x 3-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 485.134759][ T7] usb 4-1: Using ep0 maxpacket: 8 [ 485.141403][ T9499] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 485.219555][ T9499] cp210x ttyUSB0: failed get req 0x4 size 2 status: -71 [ 485.227095][ T9499] cp210x: probe of ttyUSB0 failed with error -71 [ 485.241029][ T8501] usb 2-1: string descriptor 0 read error: -71 [ 485.304093][ T7] usb 4-1: New USB device found, idVendor=1fb9, idProduct=0201, bcdDevice=c0.7e [ 485.311773][ T8501] ath6kl: Failed to submit usb control message: -71 [ 485.313572][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.328629][ T8501] ath6kl: unable to send the bmi data to the device: -71 [ 485.335897][ T8501] ath6kl: Unable to send get target info: -71 [ 485.344732][ T7] usb 4-1: config 0 descriptor?? [ 485.392064][ T7] cp210x 4-1:0.0: cp210x converter detected [ 485.489336][ T9499] usb 3-1: USB disconnect, device number 9 [ 485.497540][ T9499] cp210x 3-1:0.0: device disconnected [ 485.577306][ T8501] ath6kl: Failed to init ath6kl core: -71 [ 485.613323][ T7] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 485.621192][ T7] cp210x 4-1:0.0: querying part number failed [ 485.643508][ T8501] ath6kl_usb: probe of 2-1:0.0 failed with error -71 [ 485.675646][ T7] cp210x ttyUSB0: failed get req 0x4 size 2 status: -71 [ 485.683835][ T7] cp210x: probe of ttyUSB0 failed with error -71 [ 485.737935][ T8501] usb 2-1: USB disconnect, device number 6 [ 485.815847][ T7] usb 4-1: USB disconnect, device number 11 [ 485.824108][ T7] cp210x 4-1:0.0: device disconnected 11:33:52 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(0xffffffffffffffff, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={r2}) 11:33:52 executing program 1: syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201070090c5d108f30c75938be00000000109021b000100000000090400000105994d5afb93bece4b"], 0x0) 11:33:52 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x3d, 0x60, 0xb3, 0x8, 0x1fb9, 0x201, 0xc07e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x21, 0x8b, 0x48}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000c00)={0x2c, &(0x7f0000000d00)={0x0, 0x0, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0}) 11:33:52 executing program 3: syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000c00)={0x2c, &(0x7f0000000d00)={0x0, 0x0, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0}) [ 486.470722][ T32] audit: type=1800 audit(1608118432.394:230): pid=10736 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15956 res=0 errno=0 [ 486.572218][ T32] audit: type=1804 audit(1608118432.464:231): pid=10736 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/99/bus" dev="sda1" ino=15956 res=1 errno=0 [ 486.596590][ T32] audit: type=1800 audit(1608118432.464:232): pid=10736 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15956 res=0 errno=0 [ 486.793616][ T7] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 486.984225][ T8492] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 487.155497][ T7] usb 2-1: config 0 has an invalid descriptor of length 251, skipping remainder of the config [ 487.166767][ T7] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 487.180280][ T7] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=e0.8b [ 487.189658][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.255984][ T8492] usb 3-1: Using ep0 maxpacket: 8 [ 487.306053][ T7] usb 2-1: config 0 descriptor?? [ 487.374485][ T8492] usb 3-1: New USB device found, idVendor=1fb9, idProduct=0201, bcdDevice=c0.7e [ 487.383973][ T8492] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 11:33:53 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={r2}) [ 487.416834][ T8492] usb 3-1: config 0 descriptor?? [ 487.458358][ T8492] cp210x 3-1:0.0: cp210x converter detected [ 487.583627][ T7] usb 2-1: string descriptor 0 read error: -71 [ 487.613569][ T7] ath6kl: Failed to submit usb control message: -71 [ 487.620560][ T7] ath6kl: unable to send the bmi data to the device: -71 11:33:53 executing program 3: syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000c00)={0x2c, &(0x7f0000000d00)={0x0, 0x0, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0}) [ 487.628129][ T7] ath6kl: Unable to send get target info: -71 [ 487.673295][ T7] ath6kl: Failed to init ath6kl core: -71 [ 487.680261][ T7] ath6kl_usb: probe of 2-1:0.0 failed with error -71 [ 487.709467][ T7] usb 2-1: USB disconnect, device number 7 [ 487.742189][ T32] audit: type=1800 audit(1608118433.664:233): pid=10756 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15956 res=0 errno=0 [ 487.873531][ T8492] cp210x 3-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 487.881300][ T8492] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 487.935316][ T8492] cp210x ttyUSB0: failed get req 0x4 size 2 status: -71 [ 487.942766][ T8492] cp210x: probe of ttyUSB0 failed with error -71 [ 488.029450][ T8492] usb 3-1: USB disconnect, device number 10 [ 488.037724][ T8492] cp210x 3-1:0.0: device disconnected 11:33:54 executing program 1: syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201070090c5d108f30c75938be00000000109021b000100000000090400000105994d5afb93bece4b"], 0x0) [ 488.294222][T10746] IPVS: ftp: loaded support on port[0] = 21 11:33:54 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x3d, 0x60, 0xb3, 0x8, 0x1fb9, 0x201, 0xc07e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x21, 0x8b, 0x48}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000c00)={0x2c, &(0x7f0000000d00)={0x0, 0x0, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0}) 11:33:54 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={r2}) [ 489.036818][ T8492] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 489.134370][ T32] kauditd_printk_skb: 2 callbacks suppressed [ 489.134433][ T32] audit: type=1800 audit(1608118435.054:236): pid=10845 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15972 res=0 errno=0 [ 489.160662][ T32] audit: type=1804 audit(1608118435.074:237): pid=10845 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/101/bus" dev="sda1" ino=15972 res=1 errno=0 [ 489.184930][ T32] audit: type=1800 audit(1608118435.074:238): pid=10845 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15972 res=0 errno=0 [ 489.411740][ T8492] usb 2-1: config 0 has an invalid descriptor of length 251, skipping remainder of the config [ 489.423050][ T8492] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 489.436897][ T8492] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=e0.8b [ 489.446220][ T8492] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.510881][T10746] chnl_net:caif_netlink_parms(): no params data found [ 489.533178][ T9739] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 489.711189][ T8492] usb 2-1: config 0 descriptor?? [ 489.775615][ T9739] usb 3-1: Using ep0 maxpacket: 8 [ 489.894510][ T9739] usb 3-1: New USB device found, idVendor=1fb9, idProduct=0201, bcdDevice=c0.7e [ 489.905465][ T9739] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.993529][ T8492] usb 2-1: string descriptor 0 read error: -71 [ 490.038353][ T8492] ath6kl: Failed to submit usb control message: -71 [ 490.045611][ T8492] ath6kl: unable to send the bmi data to the device: -71 [ 490.053136][ T8492] ath6kl: Unable to send get target info: -71 [ 490.075289][ T9739] usb 3-1: config 0 descriptor?? [ 490.097962][ T8492] ath6kl: Failed to init ath6kl core: -71 [ 490.111696][ T8492] ath6kl_usb: probe of 2-1:0.0 failed with error -71 [ 490.126696][ T9739] cp210x 3-1:0.0: cp210x converter detected [ 490.202576][T10746] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.212250][T10746] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.222222][T10746] device bridge_slave_0 entered promiscuous mode [ 490.253571][ T8492] usb 2-1: USB disconnect, device number 8 [ 490.318112][ T8490] Bluetooth: hci4: command 0x0409 tx timeout [ 490.399949][T10746] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.407517][T10746] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.420605][T10746] device bridge_slave_1 entered promiscuous mode [ 490.532413][T10746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 490.553210][ T9739] cp210x 3-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 490.560984][ T9739] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 490.590797][ T9739] cp210x ttyUSB0: failed get req 0x4 size 2 status: -71 [ 490.598328][ T9739] cp210x: probe of ttyUSB0 failed with error -71 [ 490.621883][T10746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 490.680244][ T9739] usb 3-1: USB disconnect, device number 11 [ 490.688204][ T9739] cp210x 3-1:0.0: device disconnected [ 490.804166][T10746] team0: Port device team_slave_0 added [ 490.834924][T10746] team0: Port device team_slave_1 added [ 490.891421][T10746] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 490.898829][T10746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 490.926584][T10746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 490.951126][T10746] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 490.959008][T10746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 490.985358][T10746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 491.065932][T10746] device hsr_slave_0 entered promiscuous mode [ 491.079477][T10746] device hsr_slave_1 entered promiscuous mode [ 491.101306][T10746] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 491.109648][T10746] Cannot create hsr debugfs directory [ 491.716880][T10746] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 491.789305][T10746] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 491.836992][T10746] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 491.897263][T10746] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 492.347142][ T9499] Bluetooth: hci4: command 0x041b tx timeout [ 493.119601][T10746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 493.370797][ T8501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 493.381031][ T8501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 493.445112][T10746] 8021q: adding VLAN 0 to HW filter on device team0 [ 493.547449][ T8501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 493.558126][ T8501] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 493.567543][ T8501] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.574918][ T8501] bridge0: port 1(bridge_slave_0) entered forwarding state [ 493.734812][ T8501] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 493.744485][ T8501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 493.754699][ T8501] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 493.765325][ T8501] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.772592][ T8501] bridge0: port 2(bridge_slave_1) entered forwarding state [ 493.782256][ T8501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 493.793656][ T8501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 493.804785][ T8501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 493.815487][ T8501] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 494.061277][T10746] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 494.072393][T10746] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 494.423815][ T8501] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 494.434066][ T8501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 494.444873][ T8501] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 494.456178][ T8501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 494.465944][ T8501] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 494.476468][ T8501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 494.486109][ T8501] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 494.637060][T10746] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 494.926171][ T9499] Bluetooth: hci4: command 0x040f tx timeout [ 494.933754][ T9499] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 494.943138][ T9499] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 494.951037][ T9499] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 495.724727][ T8501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 495.735902][ T8501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 495.991229][ T9499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 496.001068][ T9499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 496.072883][T10746] device veth0_vlan entered promiscuous mode [ 496.104898][ T9499] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 496.115102][ T9499] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 496.192044][T10746] device veth1_vlan entered promiscuous mode [ 496.673651][ T9499] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 496.675448][ T9499] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 496.691367][ T9499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 496.701456][ T9499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 496.816359][T10746] device veth0_macvtap entered promiscuous mode [ 496.898101][T10746] device veth1_macvtap entered promiscuous mode [ 496.941419][ T9499] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 496.952214][ T9499] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 497.060963][ T8489] Bluetooth: hci4: command 0x0419 tx timeout [ 497.213374][T10746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 497.224932][T10746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.235124][T10746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 497.245789][T10746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.255825][T10746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 497.266440][T10746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.276672][T10746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 497.287283][T10746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.302397][T10746] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 497.324172][ T9499] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 497.335256][ T9499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 497.458536][T10746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 497.470401][T10746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.480597][T10746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 497.491306][T10746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.501455][T10746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 497.512146][T10746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.522259][T10746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 497.532956][T10746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.548223][T10746] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 497.556633][ T8501] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 497.567534][ T8501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 497.626232][T10746] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.636594][T10746] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.645722][T10746] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.654710][T10746] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.232144][ T675] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 498.240596][ T675] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 498.254659][ T8501] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 498.422272][ T675] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 498.430587][ T675] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 498.446241][ T8501] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 11:34:04 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0xc, 0x0, 0x1}}], {0x14, 0x10}}, 0x5c}}, 0x0) 11:34:04 executing program 3: syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000c00)={0x2c, &(0x7f0000000d00)={0x0, 0x0, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0}) 11:34:04 executing program 1: 11:34:04 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={r2}) 11:34:04 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x3d, 0x60, 0xb3, 0x8, 0x1fb9, 0x201, 0xc07e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x21, 0x8b, 0x48}}]}}]}}, 0x0) [ 499.059133][ T32] audit: type=1800 audit(1608118444.984:239): pid=11056 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15986 res=0 errno=0 [ 499.208466][ T32] audit: type=1804 audit(1608118445.014:240): pid=11056 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/102/bus" dev="sda1" ino=15986 res=1 errno=0 [ 499.235419][ T32] audit: type=1800 audit(1608118445.014:241): pid=11056 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15986 res=0 errno=0 11:34:05 executing program 1: [ 499.415391][ T7] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 499.664215][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 499.794332][ T7] usb 3-1: New USB device found, idVendor=1fb9, idProduct=0201, bcdDevice=c0.7e [ 499.803755][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 11:34:05 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0xc, 0x0, 0x1}}], {0x14, 0x10}}, 0x5c}}, 0x0) [ 499.963957][ T7] usb 3-1: config 0 descriptor?? [ 500.006916][ T7] cp210x 3-1:0.0: cp210x converter detected 11:34:06 executing program 3: r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000c00)={0x2c, &(0x7f0000000d00)={0x0, 0x0, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0}) [ 500.213371][ T7] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 500.221149][ T7] cp210x 3-1:0.0: querying part number failed 11:34:06 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={r2}) 11:34:06 executing program 1: [ 500.305441][ T7] cp210x ttyUSB0: failed get req 0x4 size 2 status: -71 [ 500.313648][ T7] cp210x: probe of ttyUSB0 failed with error -71 [ 500.473408][ T7] usb 3-1: USB disconnect, device number 12 [ 500.481384][ T7] cp210x 3-1:0.0: device disconnected 11:34:06 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x3, 0xff) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = open(&(0x7f0000000100)='./bus\x00', 0x11250c2, 0x0) r3 = creat(&(0x7f0000000280)='./bus\x00', 0x0) ftruncate(r3, 0x208200) ioctl$UI_SET_PHYS(r3, 0x4004556c, &(0x7f0000000140)='syz1\x00') socket(0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x4c, 0x0, 0x0) getsockopt$inet6_buf(r4, 0x29, 0x20, &(0x7f0000000000)=""/25, &(0x7f0000000040)=0x19) sendfile(r0, r2, 0x0, 0x800000000075) [ 500.782538][ T32] audit: type=1800 audit(1608118446.704:242): pid=11081 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15979 res=0 errno=0 [ 500.909560][ T32] audit: type=1804 audit(1608118446.764:243): pid=11081 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/103/bus" dev="sda1" ino=15979 res=1 errno=0 [ 500.934164][ T32] audit: type=1800 audit(1608118446.764:244): pid=11081 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15979 res=0 errno=0 11:34:06 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x3d, 0x60, 0xb3, 0x8, 0x1fb9, 0x201, 0xc07e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x21, 0x8b, 0x48}}]}}]}}, 0x0) 11:34:07 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={r2}) 11:34:07 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201070090c5d108f30c75938be00000000109021b000100000000090400000105994d5afb93bece4b"], 0x0) 11:34:07 executing program 3: r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000c00)={0x2c, &(0x7f0000000d00)={0x0, 0x0, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0}) [ 501.611995][ T32] audit: type=1800 audit(1608118447.534:245): pid=11092 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15777 res=0 errno=0 [ 501.813735][ T8492] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 501.840980][ T32] audit: type=1800 audit(1608118447.674:246): pid=11096 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15991 res=0 errno=0 [ 501.861628][ T32] audit: type=1804 audit(1608118447.714:247): pid=11096 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/104/bus" dev="sda1" ino=15991 res=1 errno=0 [ 501.887785][ T32] audit: type=1800 audit(1608118447.714:248): pid=11096 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15991 res=0 errno=0 [ 502.073631][ T9499] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 502.153227][ T8492] usb 3-1: Using ep0 maxpacket: 8 [ 502.276380][ T8492] usb 3-1: New USB device found, idVendor=1fb9, idProduct=0201, bcdDevice=c0.7e [ 502.285717][ T8492] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.333427][ T9499] usb 2-1: Using ep0 maxpacket: 8 11:34:08 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x3, 0xff) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = open(&(0x7f0000000100)='./bus\x00', 0x11250c2, 0x0) r3 = creat(&(0x7f0000000280)='./bus\x00', 0x0) ftruncate(r3, 0x208200) ioctl$UI_SET_PHYS(r3, 0x4004556c, &(0x7f0000000140)='syz1\x00') socket(0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x4c, 0x0, 0x0) getsockopt$inet6_buf(r4, 0x29, 0x20, &(0x7f0000000000)=""/25, &(0x7f0000000040)=0x19) sendfile(r0, r2, 0x0, 0x800000000075) [ 502.409683][ T8492] usb 3-1: config 0 descriptor?? [ 502.465195][ T9499] usb 2-1: config 0 has an invalid descriptor of length 251, skipping remainder of the config [ 502.476075][ T9499] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 502.480727][ T8492] cp210x 3-1:0.0: cp210x converter detected [ 502.489228][ T9499] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=e0.8b [ 502.489332][ T9499] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.673431][ T8492] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 502.681142][ T8492] cp210x 3-1:0.0: querying part number failed [ 502.728570][ T9499] usb 2-1: config 0 descriptor?? 11:34:08 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={r2}) [ 502.753182][ T8492] cp210x ttyUSB0: failed get req 0x4 size 2 status: -71 [ 502.760630][ T8492] cp210x: probe of ttyUSB0 failed with error -71 [ 502.850929][ T8492] usb 3-1: USB disconnect, device number 13 [ 502.859065][ T8492] cp210x 3-1:0.0: device disconnected [ 503.003817][ T9499] usb 2-1: string descriptor 0 read error: -71 [ 503.084038][ T9499] ath6kl: Failed to submit usb control message: -71 [ 503.090979][ T9499] ath6kl: unable to send the bmi data to the device: -71 [ 503.098763][ T9499] ath6kl: Unable to send get target info: -71 11:34:09 executing program 3: r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000c00)={0x2c, &(0x7f0000000d00)={0x0, 0x0, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0}) [ 503.340525][ T9499] ath6kl: Failed to init ath6kl core: -71 [ 503.401463][ T9499] ath6kl_usb: probe of 2-1:0.0 failed with error -71 11:34:09 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x3d, 0x60, 0xb3, 0x8, 0x1fb9, 0x201, 0xc07e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x21, 0x8b, 0x48}}]}}]}}, 0x0) [ 503.583643][ T9499] usb 2-1: USB disconnect, device number 9 11:34:09 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x3, 0xff) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = open(&(0x7f0000000100)='./bus\x00', 0x11250c2, 0x0) r3 = creat(&(0x7f0000000280)='./bus\x00', 0x0) ftruncate(r3, 0x208200) ioctl$UI_SET_PHYS(r3, 0x4004556c, &(0x7f0000000140)='syz1\x00') socket(0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x4c, 0x0, 0x0) getsockopt$inet6_buf(r4, 0x29, 0x20, &(0x7f0000000000)=""/25, &(0x7f0000000040)=0x19) sendfile(r0, r2, 0x0, 0x800000000075) 11:34:09 executing program 1: syz_usb_connect(0x0, 0x2d, 0x0, 0x0) [ 504.364761][ T9499] usb 3-1: new high-speed USB device number 14 using dummy_hcd 11:34:10 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)={r2}) [ 504.508928][ T32] kauditd_printk_skb: 4 callbacks suppressed [ 504.508994][ T32] audit: type=1800 audit(1608118450.434:253): pid=11145 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15996 res=0 errno=0 11:34:10 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x3d, 0x60, 0xb3, 0x0, 0x1fb9, 0x201, 0xc07e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x21, 0x8b, 0x48}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000c00)={0x2c, &(0x7f0000000d00)={0x0, 0x0, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0}) [ 504.835028][ T9499] usb 3-1: Using ep0 maxpacket: 8 [ 504.974170][ T9499] usb 3-1: New USB device found, idVendor=1fb9, idProduct=0201, bcdDevice=c0.7e [ 504.983464][ T9499] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.021196][ T32] audit: type=1800 audit(1608118450.944:254): pid=11149 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15992 res=0 errno=0 [ 505.041694][ T32] audit: type=1804 audit(1608118450.944:255): pid=11149 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/106/bus" dev="sda1" ino=15992 res=1 errno=0 11:34:11 executing program 1: syz_usb_connect(0x0, 0x2d, 0x0, 0x0) [ 505.048784][ T9499] usb 3-1: config 0 descriptor?? [ 505.065899][ T32] audit: type=1800 audit(1608118450.944:256): pid=11149 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15992 res=0 errno=0 11:34:11 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x3, 0xff) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = open(&(0x7f0000000100)='./bus\x00', 0x11250c2, 0x0) r3 = creat(&(0x7f0000000280)='./bus\x00', 0x0) ftruncate(r3, 0x208200) ioctl$UI_SET_PHYS(r3, 0x4004556c, &(0x7f0000000140)='syz1\x00') socket(0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x4c, 0x0, 0x0) getsockopt$inet6_buf(r4, 0x29, 0x20, &(0x7f0000000000)=""/25, &(0x7f0000000040)=0x19) sendfile(r0, r2, 0x0, 0x800000000075) [ 505.326651][ T9499] cp210x 3-1:0.0: cp210x converter detected [ 505.401964][ T9499] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 505.409934][ T9499] cp210x 3-1:0.0: querying part number failed [ 505.488991][ T9499] cp210x ttyUSB0: failed get req 0x4 size 2 status: -71 [ 505.497194][ T9499] cp210x: probe of ttyUSB0 failed with error -71 [ 505.617575][ T9499] usb 3-1: USB disconnect, device number 14 [ 505.625667][ T9499] cp210x 3-1:0.0: device disconnected [ 505.763400][ T8501] usb 4-1: new high-speed USB device number 12 using dummy_hcd 11:34:12 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)={r2}) [ 506.042980][ T8501] usb 4-1: device descriptor read/64, error 18 [ 506.070231][ T32] audit: type=1800 audit(1608118451.974:257): pid=11170 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=16007 res=0 errno=0 11:34:12 executing program 2: syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000c00)={0x2c, &(0x7f0000000d00)={0x0, 0x0, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0}) 11:34:12 executing program 1: syz_usb_connect(0x0, 0x2d, 0x0, 0x0) 11:34:12 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x3, 0xff) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = open(&(0x7f0000000100)='./bus\x00', 0x11250c2, 0x0) r3 = creat(&(0x7f0000000280)='./bus\x00', 0x0) ftruncate(r3, 0x208200) ioctl$UI_SET_PHYS(r3, 0x4004556c, &(0x7f0000000140)='syz1\x00') socket(0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x4c, 0x0, 0x0) getsockopt$inet6_buf(r4, 0x29, 0x20, &(0x7f0000000000)=""/25, &(0x7f0000000040)=0x19) sendfile(r0, r2, 0x0, 0x800000000075) [ 506.455371][ T8501] usb 4-1: device descriptor read/64, error 18 [ 506.515241][ T32] audit: type=1800 audit(1608118452.444:258): pid=11175 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15978 res=0 errno=0 [ 506.614860][ T32] audit: type=1804 audit(1608118452.484:259): pid=11175 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/107/bus" dev="sda1" ino=15978 res=1 errno=0 [ 506.639194][ T32] audit: type=1800 audit(1608118452.484:260): pid=11175 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15978 res=0 errno=0 [ 506.753288][ T8501] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 507.156880][ T32] audit: type=1800 audit(1608118453.074:261): pid=11183 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=16008 res=0 errno=0 [ 507.233421][ T8501] usb 4-1: device descriptor read/64, error 18 11:34:13 executing program 2: syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000c00)={0x2c, &(0x7f0000000d00)={0x0, 0x0, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0}) 11:34:13 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) 11:34:13 executing program 4: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)={r2}) 11:34:13 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) [ 507.653038][ T8501] usb 4-1: device descriptor read/64, error 18 [ 507.775224][ T8501] usb usb4-port1: attempt power cycle [ 507.964476][ T32] audit: type=1800 audit(1608118453.884:262): pid=11194 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=16006 res=0 errno=0 [ 508.224575][ T7] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 508.503855][ T8501] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 508.513148][ T7] usb 2-1: device descriptor read/64, error 18 11:34:14 executing program 2: syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000c00)={0x2c, &(0x7f0000000d00)={0x0, 0x0, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0}) 11:34:14 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x3d, 0x60, 0xb3, 0x0, 0x1fb9, 0x201, 0xc07e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x21, 0x8b, 0x48}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000c00)={0x2c, &(0x7f0000000d00)={0x0, 0x0, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0}) [ 508.673173][ T8501] usb 4-1: device descriptor read/8, error -71 [ 508.898131][ T8501] usb 4-1: device descriptor read/8, error -71 [ 508.905376][ T7] usb 2-1: device descriptor read/64, error 18 11:34:15 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) 11:34:15 executing program 4: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)={r2}) [ 509.173365][ T7] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 509.447950][ T7] usb 2-1: device descriptor read/64, error 18 [ 509.493917][ T8501] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 509.543988][ T32] kauditd_printk_skb: 9 callbacks suppressed [ 509.544065][ T32] audit: type=1804 audit(1608118455.464:272): pid=11215 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/109/bus" dev="sda1" ino=16011 res=1 errno=0 [ 509.576102][ T32] audit: type=1800 audit(1608118455.464:273): pid=11215 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16011 res=0 errno=0 [ 509.604766][ T8501] usb 4-1: Invalid ep0 maxpacket: 0 [ 509.616406][ T8501] usb usb4-port1: unable to enumerate USB device 11:34:15 executing program 2: r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000c00)={0x2c, &(0x7f0000000d00)={0x0, 0x0, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0}) [ 509.878015][ T7] usb 2-1: device descriptor read/64, error 18 11:34:15 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) [ 510.030437][ T7] usb usb2-port1: attempt power cycle [ 510.483470][ T32] audit: type=1800 audit(1608118456.404:274): pid=11225 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16015 res=0 errno=0 [ 510.505205][ T32] audit: type=1804 audit(1608118456.414:275): pid=11225 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/110/bus" dev="sda1" ino=16015 res=1 errno=0 11:34:16 executing program 4: unshare(0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380)='nl80211\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="0cea980000000000dfff000008009f00ffff070022f733390b93275d"], 0x38}}, 0x0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x100c0}, 0x80) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x9a1603, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r4, 0x800000c004500a, &(0x7f0000000300)) socket(0x10, 0x803, 0x0) ioctl$SNAPSHOT_UNFREEZE(0xffffffffffffffff, 0x3302) socket$vsock_stream(0x28, 0x1, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x4, &(0x7f00000002c0)={0x0, 0x0}) timerfd_create(0x9, 0x0) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc04c565d, &(0x7f0000000340)={0x9, 0x3, 0x4, 0x400, 0x5, {}, {0x1, 0x1, 0x1, 0x9, 0x9, 0x4, "8623f832"}, 0x49, 0x1, @planes=&(0x7f0000000040)={0x2, 0xfffffffc, @userptr=0x6, 0x8}}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xa}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) [ 510.529765][ T32] audit: type=1800 audit(1608118456.414:276): pid=11225 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16015 res=0 errno=0 [ 510.755214][ T7] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 510.881362][T11229] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 510.946129][ T7] usb 2-1: device descriptor read/8, error -61 [ 511.099022][T11230] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 11:34:17 executing program 2: r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000c00)={0x2c, &(0x7f0000000d00)={0x0, 0x0, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0}) 11:34:17 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) [ 511.393429][ T7] usb 2-1: device descriptor read/8, error -71 11:34:17 executing program 4: unshare(0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380)='nl80211\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="0cea980000000000dfff000008009f00ffff070022f733390b93275d"], 0x38}}, 0x0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x100c0}, 0x80) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x9a1603, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r4, 0x800000c004500a, &(0x7f0000000300)) socket(0x10, 0x803, 0x0) ioctl$SNAPSHOT_UNFREEZE(0xffffffffffffffff, 0x3302) socket$vsock_stream(0x28, 0x1, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x4, &(0x7f00000002c0)={0x0, 0x0}) timerfd_create(0x9, 0x0) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc04c565d, &(0x7f0000000340)={0x9, 0x3, 0x4, 0x400, 0x5, {}, {0x1, 0x1, 0x1, 0x9, 0x9, 0x4, "8623f832"}, 0x49, 0x1, @planes=&(0x7f0000000040)={0x2, 0xfffffffc, @userptr=0x6, 0x8}}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xa}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) 11:34:17 executing program 0 (fault-call:7 fault-nth:0): r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) [ 511.859478][T11242] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 511.969188][ T32] audit: type=1800 audit(1608118457.894:277): pid=11243 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16015 res=0 errno=0 [ 512.040093][T11243] FAULT_INJECTION: forcing a failure. [ 512.040093][T11243] name failslab, interval 1, probability 0, space 0, times 1 [ 512.054695][T11243] CPU: 0 PID: 11243 Comm: syz-executor.0 Not tainted 5.10.0-rc4-syzkaller #0 [ 512.061233][ T9499] Bluetooth: hci0: command 0x0406 tx timeout [ 512.063541][T11243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 512.063571][T11243] Call Trace: [ 512.063734][T11243] dump_stack+0x21c/0x280 [ 512.087491][T11243] should_fail+0x8b7/0x9e0 [ 512.092047][T11243] __should_failslab+0x1fd/0x2a0 [ 512.097134][T11243] should_failslab+0x29/0x70 [ 512.102827][T11243] kmem_cache_alloc_trace+0x10b/0x1020 [ 512.108505][T11243] ? kmsan_get_metadata+0x116/0x180 [ 512.114795][T11243] ? kmsan_alloc_page+0x1cf/0x1f0 [ 512.119966][T11243] ? alloc_pipe_info+0x167/0xbd0 [ 512.125062][T11243] ? kmsan_internal_set_origin+0x85/0xc0 [ 512.127135][ T32] audit: type=1804 audit(1608118457.954:278): pid=11243 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/111/bus" dev="sda1" ino=16015 res=1 errno=0 [ 512.130825][T11243] ? kmsan_get_metadata+0x116/0x180 [ 512.130930][T11243] alloc_pipe_info+0x167/0xbd0 [ 512.131009][T11243] ? kmsan_get_metadata+0x116/0x180 [ 512.131142][T11243] ? kmsan_get_metadata+0x116/0x180 [ 512.155099][ T32] audit: type=1800 audit(1608118457.954:279): pid=11243 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16015 res=0 errno=0 [ 512.160047][T11243] splice_direct_to_actor+0x1331/0x14c0 [ 512.160171][T11243] ? do_splice_direct+0x5f0/0x5f0 [ 512.165330][ T32] audit: type=1804 audit(1608118457.984:280): pid=11244 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/111/bus" dev="sda1" ino=16015 res=1 errno=0 [ 512.170193][T11243] ? security_file_permission+0x1f0/0x230 [ 512.170320][T11243] ? rw_verify_area+0x4be/0x7a0 [ 512.239995][T11243] do_splice_direct+0x39e/0x5f0 [ 512.245007][T11243] do_sendfile+0x14ae/0x28c0 [ 512.249773][T11243] __se_compat_sys_sendfile+0x373/0x440 [ 512.255458][T11243] ? kmsan_get_metadata+0x116/0x180 [ 512.260809][T11243] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 512.267122][T11243] ? syscall_enter_from_user_mode_work+0x51/0x100 [ 512.273783][T11243] __ia32_compat_sys_sendfile+0x56/0x70 [ 512.279494][T11243] __do_fast_syscall_32+0x102/0x160 [ 512.284843][T11243] do_fast_syscall_32+0x6a/0xc0 [ 512.289836][T11243] do_SYSENTER_32+0x73/0x90 [ 512.294489][T11243] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 512.300915][T11243] RIP: 0023:0xf7fd6549 [ 512.305115][T11243] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 512.324843][T11243] RSP: 002b:00000000f55d00cc EFLAGS: 00000296 ORIG_RAX: 00000000000000bb [ 512.333409][T11243] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000003 [ 512.341484][T11243] RDX: 0000000000000000 RSI: 00000000fffffffe RDI: 0000000000000000 [ 512.349564][T11243] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 512.357649][T11243] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 512.365730][T11243] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 11:34:18 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x3d, 0x60, 0xb3, 0x0, 0x1fb9, 0x201, 0xc07e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x21, 0x8b, 0x48}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000c00)={0x2c, &(0x7f0000000d00)={0x0, 0x0, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0}) [ 512.465174][ T7] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 512.647042][ T7] usb 2-1: device descriptor read/8, error -61 11:34:18 executing program 2: r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000c00)={0x2c, &(0x7f0000000d00)={0x0, 0x0, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0}) 11:34:18 executing program 4: exit(0x10001) lsetxattr$trusted_overlay_nlink(&(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000240)={'L+'}, 0x16, 0x0) r0 = getpgid(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(r0, &(0x7f00000000c0)='net/igmp\x00') r2 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendmmsg$inet(r2, &(0x7f0000000080)=[{{&(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10, 0x0}}, {{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0xf, 0x0}}], 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000280)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r3, r1, 0x0, 0x20000000000000d8) setxattr$security_capability(&(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000040)=@v3, 0x18, 0x0) [ 512.924916][ T7] usb 2-1: device descriptor read/8, error -61 [ 513.051051][ T7] usb usb2-port1: unable to enumerate USB device 11:34:19 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) [ 513.266608][ T8501] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 513.398496][ T32] audit: type=1800 audit(1608118459.324:281): pid=11258 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16018 res=0 errno=0 [ 513.586646][ T8501] usb 4-1: device descriptor read/64, error 18 11:34:19 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x3d, 0x60, 0xb3, 0x0, 0x1fb9, 0x201, 0xc07e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x21, 0x8b, 0x48}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000c00)={0x2c, &(0x7f0000000d00)={0x0, 0x0, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0}) [ 514.003253][ T8501] usb 4-1: device descriptor read/64, error 18 [ 514.279976][ T8501] usb 4-1: new high-speed USB device number 17 using dummy_hcd 11:34:20 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x6) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) 11:34:20 executing program 4: exit(0x10001) lsetxattr$trusted_overlay_nlink(&(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000240)={'L+'}, 0x16, 0x0) r0 = getpgid(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(r0, &(0x7f00000000c0)='net/igmp\x00') r2 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendmmsg$inet(r2, &(0x7f0000000080)=[{{&(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10, 0x0}}, {{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0xf, 0x0}}], 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000280)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r3, r1, 0x0, 0x20000000000000d8) setxattr$security_capability(&(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000040)=@v3, 0x18, 0x0) [ 514.575035][ T8501] usb 4-1: device descriptor read/64, error 18 [ 514.673363][ T8490] usb 3-1: new high-speed USB device number 15 using dummy_hcd 11:34:20 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) [ 514.915452][ T32] kauditd_printk_skb: 2 callbacks suppressed [ 514.915517][ T32] audit: type=1800 audit(1608118460.844:284): pid=11274 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15979 res=0 errno=0 [ 514.945950][ T8490] usb 3-1: device descriptor read/64, error 18 [ 515.023404][ T8501] usb 4-1: device descriptor read/64, error 18 [ 515.136136][ T32] audit: type=1804 audit(1608118460.894:285): pid=11274 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/113/bus" dev="sda1" ino=15979 res=1 errno=0 [ 515.160901][ T32] audit: type=1800 audit(1608118460.894:286): pid=11274 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15979 res=0 errno=0 [ 515.163408][ T8501] usb usb4-port1: attempt power cycle [ 515.374175][ T8490] usb 3-1: device descriptor read/64, error 18 [ 515.576648][ T8850] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 515.644844][ T8490] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 515.723731][ T32] audit: type=1804 audit(1608118461.644:287): pid=11277 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/113/bus" dev="sda1" ino=15979 res=1 errno=0 [ 515.851711][ T32] audit: type=1804 audit(1608118461.694:288): pid=11279 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/113/bus" dev="sda1" ino=15979 res=1 errno=0 [ 515.876428][ T32] audit: type=1800 audit(1608118461.694:289): pid=11279 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15979 res=0 errno=0 [ 515.903115][ T8850] usb 2-1: device descriptor read/64, error 18 [ 515.936584][ T8490] usb 3-1: device descriptor read/64, error 18 11:34:21 executing program 4: ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x9) creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="003da8c6ffbc5f799b475e4924df930104000000000000dbb9e9c1095c94190557d1a15533713311f204e48539b29ae9463a15bd884e2ec83ae92c7019f95e993a3bfc80b327186fbbb23fd18c76f02d3bfd9163b6454a1d733a59e5e0b92e1d922121774bf379f9337c6cf95702adb03f82aac1c1"]) 11:34:21 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x7ffff000) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) [ 516.017167][ T8501] usb 4-1: new high-speed USB device number 18 using dummy_hcd 11:34:22 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x3d, 0x60, 0xb3, 0x8, 0x1fb9, 0x201, 0xc07e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x21, 0x8b, 0x48}}]}}]}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000c00)={0x2c, &(0x7f0000000d00)={0x0, 0x0, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0}) [ 516.196514][ T8501] usb 4-1: device descriptor read/8, error -71 [ 516.303485][ T8850] usb 2-1: device descriptor read/64, error 18 [ 516.334333][ T8490] usb 3-1: device descriptor read/64, error 18 [ 516.401320][T11289] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 516.431797][T11289] EXT4-fs (loop4): mounting with "discard" option, but the device does not support discard [ 516.442160][T11289] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 516.444197][ T8501] usb 4-1: device descriptor read/8, error -71 [ 516.451880][T11289] ext4 filesystem being mounted at /root/syzkaller-testdir635325933/syzkaller.y5hoTM/14/file0 supports timestamps until 2038 (0x7fffffff) [ 516.482392][ T8490] usb usb3-port1: attempt power cycle [ 516.532707][ T32] audit: type=1800 audit(1608118462.454:290): pid=11298 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16030 res=0 errno=0 [ 516.584161][ T8850] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 516.605799][ T32] audit: type=1804 audit(1608118462.534:291): pid=11298 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/114/bus" dev="sda1" ino=16030 res=1 errno=0 [ 516.631933][ T32] audit: type=1800 audit(1608118462.534:292): pid=11298 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16030 res=0 errno=0 [ 516.893173][ T8850] usb 2-1: device descriptor read/64, error 18 [ 516.960851][T11302] EXT4-fs (loop4): mounting with "discard" option, but the device does not support discard [ 516.971194][T11302] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 516.973450][ T8501] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 516.980543][T11302] ext4 filesystem being mounted at /root/syzkaller-testdir635325933/syzkaller.y5hoTM/14/file0 supports timestamps until 2038 (0x7fffffff) [ 517.095536][ T8501] usb 4-1: Using ep0 maxpacket: 8 [ 517.193416][ T8490] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 517.247593][ T8501] usb 4-1: New USB device found, idVendor=1fb9, idProduct=0201, bcdDevice=c0.7e [ 517.257068][ T8501] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.285197][ T8490] usb 3-1: Invalid ep0 maxpacket: 0 [ 517.294381][ T32] audit: type=1804 audit(1608118463.224:293): pid=11300 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/114/bus" dev="sda1" ino=16030 res=1 errno=0 [ 517.353095][ T8850] usb 2-1: device descriptor read/64, error 18 [ 517.377561][ T8501] usb 4-1: config 0 descriptor?? [ 517.429514][ T8501] cp210x 4-1:0.0: cp210x converter detected [ 517.434695][ T8490] usb 3-1: new high-speed USB device number 18 using dummy_hcd 11:34:23 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0xfffffffd) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) [ 517.476947][ T8850] usb usb2-port1: attempt power cycle 11:34:23 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x3d, 0x60, 0xb3, 0x0, 0x1fb9, 0x201, 0xc07e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x21, 0x8b, 0x48}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000c00)={0x2c, &(0x7f0000000d00)={0x0, 0x0, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0}) [ 517.593767][ T8490] usb 3-1: device descriptor read/8, error -71 11:34:23 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x9e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc088}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x3}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x16}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x8}]}}}]}, 0x50}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) socket$nl_audit(0x10, 0x3, 0x9) [ 517.647230][ T8501] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 517.657132][ T8501] cp210x 4-1:0.0: querying part number failed [ 517.731913][ T8501] cp210x ttyUSB0: failed get req 0x4 size 2 status: -71 [ 517.739576][ T8501] cp210x: probe of ttyUSB0 failed with error -71 [ 517.803747][ T8490] usb 3-1: device descriptor read/8, error -71 [ 517.838978][ T8501] usb 4-1: USB disconnect, device number 19 [ 517.847079][ T8501] cp210x 4-1:0.0: device disconnected [ 517.923543][ T8490] usb usb3-port1: unable to enumerate USB device [ 518.193423][ T8850] usb 2-1: new high-speed USB device number 16 using dummy_hcd 11:34:24 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x3d, 0x60, 0xb3, 0x8, 0x1fb9, 0x201, 0xc07e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x21, 0x8b, 0x48}}]}}]}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000c00)={0x2c, &(0x7f0000000d00)={0x0, 0x0, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0}) [ 518.703086][ T8490] usb 3-1: new high-speed USB device number 19 using dummy_hcd 11:34:24 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) [ 518.873451][ T8850] usb 2-1: device descriptor read/8, error -71 11:34:24 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) r2 = open(&(0x7f0000000280)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = dup3(r2, r2, 0x71ddbc2ece9068dc) ioctl$CHAR_RAW_RAGET(r3, 0x1263, &(0x7f00000005c0)) ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f0000000000)) lseek(r1, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r4 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r4, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) io_uring_enter(r0, 0x7804, 0x9fd6, 0x3, &(0x7f0000000040)={[0x3, 0xd37]}, 0x8) [ 518.973170][ T8490] usb 3-1: device descriptor read/64, error 18 11:34:25 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x9e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc088}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x3}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x16}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x8}]}}}]}, 0x50}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) socket$nl_audit(0x10, 0x3, 0x9) [ 519.095762][ T8850] usb 2-1: device descriptor read/8, error -71 [ 519.363993][ T8490] usb 3-1: device descriptor read/64, error 18 [ 519.373889][ T7] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 519.593278][ T8850] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 519.796230][ T8850] usb 2-1: device descriptor read/8, error -61 [ 519.833434][ T8490] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 519.854032][ T7] usb 4-1: Using ep0 maxpacket: 8 [ 519.978454][ T7] usb 4-1: New USB device found, idVendor=1fb9, idProduct=0201, bcdDevice=c0.7e [ 519.988037][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.063339][ T8850] usb 2-1: device descriptor read/8, error -61 [ 520.074092][ T7] usb 4-1: config 0 descriptor?? [ 520.110427][ T8490] usb 3-1: device descriptor read/64, error 18 [ 520.131638][ T7] cp210x 4-1:0.0: cp210x converter detected [ 520.178003][ T32] kauditd_printk_skb: 10 callbacks suppressed [ 520.178077][ T32] audit: type=1804 audit(1608118466.104:304): pid=11349 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/116/bus" dev="sda1" ino=16036 res=1 errno=0 [ 520.208383][ T32] audit: type=1804 audit(1608118466.114:305): pid=11353 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/116/bus" dev="sda1" ino=16036 res=1 errno=0 [ 520.234003][ T8850] usb usb2-port1: unable to enumerate USB device [ 520.334820][ T7] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 520.342721][ T7] cp210x 4-1:0.0: querying part number failed [ 520.407206][ T7] cp210x ttyUSB0: failed get req 0x4 size 2 status: -71 [ 520.415219][ T7] cp210x: probe of ttyUSB0 failed with error -71 [ 520.448469][ T32] audit: type=1804 audit(1608118466.174:306): pid=11349 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/116/bus" dev="sda1" ino=16036 res=1 errno=0 [ 520.507052][ T8490] usb 3-1: device descriptor read/64, error 18 [ 520.545556][ T7] usb 4-1: USB disconnect, device number 20 [ 520.553858][ T7] cp210x 4-1:0.0: device disconnected 11:34:26 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x9e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc088}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x3}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x16}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x8}]}}}]}, 0x50}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) socket$nl_audit(0x10, 0x3, 0x9) 11:34:26 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x4875fe, 0x104) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000b28000)=0x3e) fcntl$setsig(r3, 0xa, 0x12) poll(&(0x7f0000000180)=[{r4}], 0x1, 0xfffffffffffffff8) dup2(r3, r4) fcntl$setown(r4, 0x8, r2) tkill(r2, 0x14) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000000)) gettid() socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) fcntl$setown(0xffffffffffffffff, 0x8, r2) r5 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r5, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) [ 520.636961][ T8490] usb usb3-port1: attempt power cycle 11:34:27 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x3d, 0x60, 0xb3, 0x8, 0x1fb9, 0x201, 0xc07e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x21, 0x8b, 0x48}}]}}]}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000c00)={0x2c, &(0x7f0000000d00)={0x0, 0x0, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0}) [ 521.139328][ T32] audit: type=1804 audit(1608118467.044:307): pid=11373 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/117/bus" dev="sda1" ino=16039 res=1 errno=0 [ 521.164327][ T32] audit: type=1800 audit(1608118467.044:308): pid=11373 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16039 res=0 errno=0 [ 521.354260][ T8490] usb 3-1: new high-speed USB device number 21 using dummy_hcd 11:34:27 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x3d, 0x60, 0xb3, 0x0, 0x1fb9, 0x201, 0xc07e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x21, 0x8b, 0x48}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000c00)={0x2c, &(0x7f0000000d00)={0x0, 0x0, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0}) 11:34:27 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x9e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc088}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x3}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x16}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x8}]}}}]}, 0x50}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) socket$nl_audit(0x10, 0x3, 0x9) [ 521.636702][ T8490] usb 3-1: device descriptor read/8, error -71 [ 521.777809][ T32] audit: type=1804 audit(1608118467.704:309): pid=11375 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/117/bus" dev="sda1" ino=16039 res=1 errno=0 [ 521.848408][ T32] audit: type=1804 audit(1608118467.744:310): pid=11385 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/117/bus" dev="sda1" ino=16039 res=1 errno=0 [ 521.874478][ T32] audit: type=1800 audit(1608118467.754:311): pid=11385 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16039 res=0 errno=0 [ 521.896665][ T8490] usb 3-1: device descriptor read/8, error -71 [ 522.083264][ T8492] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 522.184283][ T7] Bluetooth: hci1: command 0x0406 tx timeout [ 522.323209][ T8492] usb 4-1: Using ep0 maxpacket: 8 [ 522.395050][ T8490] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 522.445327][ T8492] usb 4-1: New USB device found, idVendor=1fb9, idProduct=0201, bcdDevice=c0.7e [ 522.454756][ T8492] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.543073][ T8492] usb 4-1: config 0 descriptor?? [ 522.554673][ T8490] usb 3-1: Invalid ep0 maxpacket: 0 [ 522.578467][ T8490] usb usb3-port1: unable to enumerate USB device 11:34:28 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) [ 522.593896][ T8492] cp210x 4-1:0.0: cp210x converter detected [ 522.793799][ T8492] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 522.801537][ T8492] cp210x 4-1:0.0: querying part number failed [ 522.866903][ T8492] cp210x ttyUSB0: failed get req 0x4 size 2 status: -71 [ 522.874847][ T8492] cp210x: probe of ttyUSB0 failed with error -71 [ 522.947903][ T8492] usb 4-1: USB disconnect, device number 21 [ 522.955988][ T8492] cp210x 4-1:0.0: device disconnected 11:34:28 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x9e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc088}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x3}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x16}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x8}]}}}]}, 0x50}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) [ 523.616048][ T8490] usb 2-1: new high-speed USB device number 18 using dummy_hcd 11:34:29 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x3d, 0x60, 0xb3, 0x8, 0x1fb9, 0x201, 0xc07e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x21, 0x8b, 0x48}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) [ 523.894716][ T8490] usb 2-1: device descriptor read/64, error 18 11:34:29 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x9e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc088}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x3}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x16}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x8}]}}}]}, 0x50}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) 11:34:29 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = openat$cgroup_ro(r2, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x0, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r3, 0xc0046686, &(0x7f0000000040)={0x2, 0x63, "4a0341a006d6541c6671757f1737d8a756f32e6500194281c646a190f6cf3e23bf9d42fdd1c32d459b0e9fde7fb6a93b63fef0deb3ed04ff49d490d61a871317931f9c40661199877c7358614c8b883c85e1ebb3fd4a9dd26814b745c12320481264b4"}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) [ 524.303105][ T8490] usb 2-1: device descriptor read/64, error 18 [ 524.346665][ T32] audit: type=1800 audit(1608118470.274:312): pid=11427 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16045 res=0 errno=0 [ 524.366804][ T32] audit: type=1804 audit(1608118470.274:313): pid=11427 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/118/bus" dev="sda1" ino=16045 res=1 errno=0 [ 524.404522][ T8492] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 524.586103][ T8490] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 524.663345][ T8492] usb 4-1: Using ep0 maxpacket: 8 11:34:30 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x9e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc088}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x3}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x16}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x8}]}}}]}, 0x50}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) [ 524.783304][ T8492] usb 4-1: New USB device found, idVendor=1fb9, idProduct=0201, bcdDevice=c0.7e [ 524.792657][ T8492] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.854772][ T8492] usb 4-1: config 0 descriptor?? [ 524.874030][ T8490] usb 2-1: device descriptor read/64, error 18 [ 524.910797][ T8492] cp210x 4-1:0.0: cp210x converter detected [ 525.113378][ T8492] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 525.121168][ T8492] cp210x 4-1:0.0: querying part number failed [ 525.183335][ T32] kauditd_printk_skb: 2 callbacks suppressed [ 525.183410][ T32] audit: type=1804 audit(1608118471.104:316): pid=11433 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/118/bus" dev="sda1" ino=16045 res=1 errno=0 [ 525.213801][ T32] audit: type=1800 audit(1608118471.114:317): pid=11433 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16045 res=0 errno=0 [ 525.291574][ T8492] cp210x ttyUSB0: failed get req 0x4 size 2 status: -71 [ 525.299385][ T8492] cp210x: probe of ttyUSB0 failed with error -71 [ 525.323430][ T8490] usb 2-1: device descriptor read/64, error 18 11:34:31 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x3d, 0x60, 0xb3, 0x8, 0x1fb9, 0x201, 0xc07e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x21, 0x8b, 0x48}}]}}]}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000c00)={0x2c, &(0x7f0000000d00)={0x0, 0x0, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0}) [ 525.464307][ T8490] usb usb2-port1: attempt power cycle [ 525.496011][ T8492] usb 4-1: USB disconnect, device number 22 [ 525.504333][ T8492] cp210x 4-1:0.0: device disconnected 11:34:31 executing program 0: openat$vicodec1(0xffffff9c, &(0x7f0000000100)='/dev/video37\x00', 0x2, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$VIDIOC_S_PARM(r1, 0xc0cc5616, &(0x7f0000000280)={0x0, @raw_data="7cb9e006e4dcc9244ba93fd1190e4b53d0a51298294228145c24dc58da13dc3c69805f5adc4191b9eff14c98749090eb3084b4657817bbbc7f72162d0f1f96a524a84764042ad129a6eee23f648c113da2bf236148016f6dcb8d53d9686788ff22b50a4438e158777d0e68a677864b07ad04699c77a578c57a8f42b473d59c913a0e84986c43108345730f3574df9432825fc3baa688e5a57fe7f6336ba8594bb43ea9731884c662f74ae9d4b88108f3fc15ae7ab7f9450ed2008142289efe83a7a58237732a9d24"}) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r2, 0xc0905664, &(0x7f0000000000)={0x0, 0x0, [], @raw_data=[0x0, 0x1, 0x81, 0x6, 0x3, 0x7, 0x0, 0x802, 0xf4f, 0x9, 0x400, 0x3ff, 0x630, 0x1, 0xbb4b, 0x7, 0x400, 0xfffffff7, 0x1fd1, 0x2, 0x5, 0x2, 0x8, 0x609, 0xe3c, 0x0, 0xbd, 0x9, 0x2, 0x80000001, 0x2, 0x200]}) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) unlink(&(0x7f0000000140)='./bus\x00') [ 526.193534][ T8490] usb 2-1: new high-speed USB device number 20 using dummy_hcd 11:34:32 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x3d, 0x60, 0xb3, 0x8, 0x1fb9, 0x201, 0xc07e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x21, 0x8b, 0x48}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 11:34:32 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) [ 526.355277][ T8490] usb 2-1: device descriptor read/8, error -71 11:34:32 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x9e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc088}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x3}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x16}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x8}]}}}]}, 0x50}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) [ 526.571924][ T32] audit: type=1800 audit(1608118472.494:318): pid=11461 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15873 res=0 errno=0 [ 526.596684][ T8490] usb 2-1: device descriptor read/8, error -71 [ 526.603277][ T8492] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 526.711642][ T32] audit: type=1804 audit(1608118472.574:319): pid=11461 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/119/bus" dev="sda1" ino=15873 res=1 errno=0 [ 526.736146][ T32] audit: type=1800 audit(1608118472.574:320): pid=11461 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15873 res=0 errno=0 [ 526.843265][ T8492] usb 3-1: Using ep0 maxpacket: 8 [ 526.965994][ T8492] usb 3-1: New USB device found, idVendor=1fb9, idProduct=0201, bcdDevice=c0.7e [ 526.976963][ T8492] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.104499][ T8489] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 527.264281][ T8492] usb 3-1: config 0 descriptor?? [ 527.307477][ T8492] cp210x 3-1:0.0: cp210x converter detected [ 527.313860][ T8490] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 527.372570][ T32] audit: type=1804 audit(1608118473.294:321): pid=11463 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/119/bus" dev="sda1" ino=16052 res=1 errno=0 [ 527.398327][ T32] audit: type=1800 audit(1608118473.294:322): pid=11463 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16052 res=0 errno=0 [ 527.419451][ T8489] usb 4-1: Using ep0 maxpacket: 8 [ 527.504105][ T8490] usb 2-1: device descriptor read/8, error -61 [ 527.533603][ T8492] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 527.541779][ T8492] cp210x 3-1:0.0: querying part number failed [ 527.559198][ T8489] usb 4-1: New USB device found, idVendor=1fb9, idProduct=0201, bcdDevice=c0.7e [ 527.568584][ T8489] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.596195][ T8492] cp210x ttyUSB0: failed get req 0x4 size 2 status: -71 [ 527.603740][ T8492] cp210x: probe of ttyUSB0 failed with error -71 [ 527.637228][ T8489] usb 4-1: config 0 descriptor?? [ 527.657637][ T8492] usb 3-1: USB disconnect, device number 23 [ 527.665754][ T8492] cp210x 3-1:0.0: device disconnected [ 527.681549][ T8489] cp210x 4-1:0.0: cp210x converter detected 11:34:33 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x9e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc088}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x3}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x16}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x8}]}}}]}, 0x50}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) [ 527.774604][ T8490] usb 2-1: device descriptor read/8, error -61 11:34:33 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x9e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc088}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x3}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x16}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x8}]}}}]}, 0x50}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) 11:34:33 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) [ 527.895604][ T8489] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 527.899285][ T8490] usb usb2-port1: unable to enumerate USB device [ 527.903572][ T8489] cp210x 4-1:0.0: querying part number failed [ 528.320213][ T8489] cp210x ttyUSB0: failed get req 0x4 size 2 status: -71 [ 528.330209][ T8489] cp210x: probe of ttyUSB0 failed with error -71 [ 528.364161][ T8489] usb 4-1: USB disconnect, device number 23 [ 528.372195][ T8489] cp210x 4-1:0.0: device disconnected 11:34:34 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x3d, 0x60, 0xb3, 0x8, 0x1fb9, 0x201, 0xc07e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x21, 0x8b, 0x48}}]}}]}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000c00)={0x2c, &(0x7f0000000d00)={0x0, 0x0, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0}) [ 528.579732][ T32] audit: type=1800 audit(1608118474.504:323): pid=11505 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16047 res=0 errno=0 [ 528.669338][ T32] audit: type=1804 audit(1608118474.554:324): pid=11505 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/120/bus" dev="sda1" ino=16047 res=1 errno=0 [ 528.693822][ T32] audit: type=1800 audit(1608118474.554:325): pid=11505 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16047 res=0 errno=0 11:34:34 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x3d, 0x60, 0xb3, 0x8, 0x1fb9, 0x201, 0xc07e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x21, 0x8b, 0x48}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 11:34:35 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x9e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc088}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x3}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x16}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x8}]}}}]}, 0x50}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) [ 529.333365][ T8492] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 529.576901][ T8492] usb 3-1: Using ep0 maxpacket: 8 [ 529.589038][ T7] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 529.704250][ T8492] usb 3-1: New USB device found, idVendor=1fb9, idProduct=0201, bcdDevice=c0.7e [ 529.713655][ T8492] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.853555][ T7] usb 4-1: Using ep0 maxpacket: 8 11:34:35 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x80) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) [ 529.975249][ T7] usb 4-1: New USB device found, idVendor=1fb9, idProduct=0201, bcdDevice=c0.7e [ 529.984854][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.010186][ T8492] usb 3-1: config 0 descriptor?? [ 530.059302][ T8492] cp210x 3-1:0.0: cp210x converter detected 11:34:36 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201070090c5d108f30c75938be00000000109021b"], 0x0) [ 530.127296][ T7] usb 4-1: config 0 descriptor?? [ 530.180138][ T7] cp210x 4-1:0.0: cp210x converter detected [ 530.263430][ T8492] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 530.272097][ T8492] cp210x 3-1:0.0: querying part number failed 11:34:36 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x9e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc088}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x3}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x16}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x8}]}}}]}, 0x50}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) [ 530.383185][ T7] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 530.391087][ T7] cp210x 4-1:0.0: querying part number failed [ 530.477915][ T8492] cp210x ttyUSB0: failed get req 0x4 size 2 status: -71 [ 530.485398][ T8492] cp210x: probe of ttyUSB0 failed with error -71 [ 530.510657][ T7] cp210x ttyUSB1: failed get req 0x4 size 2 status: -71 [ 530.518371][ T7] cp210x: probe of ttyUSB1 failed with error -71 [ 530.578986][ T8492] usb 3-1: USB disconnect, device number 24 [ 530.624820][ T7] usb 4-1: USB disconnect, device number 24 [ 530.633277][ T8492] cp210x 3-1:0.0: device disconnected [ 530.680719][ T7] cp210x 4-1:0.0: device disconnected [ 530.840027][ T32] kauditd_printk_skb: 6 callbacks suppressed [ 530.840098][ T32] audit: type=1804 audit(1608118476.764:332): pid=11533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/121/bus" dev="sda1" ino=15779 res=1 errno=0 [ 530.983861][ T8501] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 531.004649][ T32] audit: type=1804 audit(1608118476.824:333): pid=11535 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/121/bus" dev="sda1" ino=15779 res=1 errno=0 11:34:37 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x3d, 0x60, 0xb3, 0x8, 0x1fb9, 0x201, 0xc07e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x21, 0x8b, 0x48}}]}}]}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000c00)={0x2c, &(0x7f0000000d00)={0x0, 0x0, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0}) [ 531.028998][ T32] audit: type=1800 audit(1608118476.824:334): pid=11535 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15779 res=0 errno=0 11:34:37 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={r0, 0x2, 0x0, 0x1, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x145050, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x8, 0x12400) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) 11:34:37 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x3d, 0x60, 0xb3, 0x8, 0x1fb9, 0x201, 0xc07e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x21, 0x8b, 0x48}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000c00)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 531.236166][ T8501] usb 2-1: Using ep0 maxpacket: 8 [ 531.357242][ T8501] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 531.367565][ T8501] usb 2-1: config 0 has no interfaces? [ 531.373457][ T8501] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=e0.8b [ 531.384208][ T8501] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.557753][ T8501] usb 2-1: config 0 descriptor?? [ 531.648466][ T32] audit: type=1800 audit(1608118477.574:335): pid=11573 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16016 res=0 errno=0 [ 531.730830][ T32] audit: type=1804 audit(1608118477.624:336): pid=11573 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/122/bus" dev="sda1" ino=16016 res=1 errno=0 [ 531.755199][ T32] audit: type=1800 audit(1608118477.624:337): pid=11573 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16016 res=0 errno=0 [ 531.811532][ T7] usb 2-1: USB disconnect, device number 22 [ 531.833238][ T8489] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 531.966170][ T8492] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 532.093990][ T8489] usb 3-1: Using ep0 maxpacket: 8 [ 532.214278][ T8492] usb 4-1: Using ep0 maxpacket: 8 [ 532.228249][ T8489] usb 3-1: New USB device found, idVendor=1fb9, idProduct=0201, bcdDevice=c0.7e [ 532.237506][ T8489] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.272125][ T8489] usb 3-1: config 0 descriptor?? [ 532.319823][ T8489] cp210x 3-1:0.0: cp210x converter detected [ 532.334193][ T8492] usb 4-1: New USB device found, idVendor=1fb9, idProduct=0201, bcdDevice=c0.7e [ 532.343581][ T8492] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.380495][ T8492] usb 4-1: config 0 descriptor?? [ 532.414214][ T32] audit: type=1804 audit(1608118478.334:338): pid=11576 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/122/bus" dev="sda1" ino=16016 res=1 errno=0 [ 532.466931][ T8492] cp210x 4-1:0.0: cp210x converter detected [ 532.524566][ T8489] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 532.532949][ T8489] cp210x 3-1:0.0: querying part number failed [ 532.551545][ T32] audit: type=1804 audit(1608118478.384:339): pid=11586 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/122/bus" dev="sda1" ino=16016 res=1 errno=0 [ 532.576008][ T32] audit: type=1800 audit(1608118478.384:340): pid=11586 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16016 res=0 errno=0 [ 532.586938][ T8489] cp210x ttyUSB0: failed get req 0x4 size 2 status: -71 [ 532.606238][ T8489] cp210x: probe of ttyUSB0 failed with error -71 [ 532.673199][ T8492] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 532.680833][ T8492] cp210x 4-1:0.0: querying part number failed [ 532.734928][ T8489] usb 3-1: USB disconnect, device number 25 [ 532.741205][ T8492] cp210x ttyUSB1: failed get req 0x4 size 2 status: -71 [ 532.743099][ T8489] cp210x 3-1:0.0: device disconnected [ 532.748530][ T8492] cp210x: probe of ttyUSB1 failed with error -71 [ 532.817666][ T8492] usb 4-1: USB disconnect, device number 25 [ 532.839882][ T8492] cp210x 4-1:0.0: device disconnected [ 533.469500][T11582] IPVS: ftp: loaded support on port[0] = 21 [ 534.015627][T11582] chnl_net:caif_netlink_parms(): no params data found [ 534.378709][T11582] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.386546][T11582] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.396666][T11582] device bridge_slave_0 entered promiscuous mode [ 534.443896][T11582] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.451296][T11582] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.461271][T11582] device bridge_slave_1 entered promiscuous mode [ 534.580724][T11582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 534.618706][T11582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 534.684293][T11582] team0: Port device team_slave_0 added [ 534.699191][T11582] team0: Port device team_slave_1 added [ 534.758732][T11582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 534.766051][T11582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 534.793016][T11582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 534.813152][T11582] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 534.820315][T11582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 534.847108][T11582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 535.058689][T11582] device hsr_slave_0 entered promiscuous mode [ 535.080339][T11582] device hsr_slave_1 entered promiscuous mode [ 535.092504][T11582] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 535.100576][T11582] Cannot create hsr debugfs directory [ 535.384578][ T8492] Bluetooth: hci5: command 0x0409 tx timeout [ 535.538009][T11582] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 535.559697][T11582] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 535.586940][T11582] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 535.615609][T11582] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 536.740529][T11582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 536.950048][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 536.959349][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 537.063206][T11582] 8021q: adding VLAN 0 to HW filter on device team0 [ 537.128502][ T9739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 537.138570][ T9739] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 537.148081][ T9739] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.155938][ T9739] bridge0: port 1(bridge_slave_0) entered forwarding state [ 537.330283][ T9739] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 537.339702][ T9739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 537.349865][ T9739] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 537.359602][ T9739] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.367009][ T9739] bridge0: port 2(bridge_slave_1) entered forwarding state [ 537.376443][ T9739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 537.387548][ T9739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 537.628392][T11582] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 537.639297][T11582] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 537.700286][ T8492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 537.712001][ T8492] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 537.722606][ T8492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 537.733270][ T8492] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 537.743699][ T8492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 537.753466][ T8492] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 537.763941][ T8492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 537.773955][ T8492] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 537.898940][T11582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 537.962422][ T8492] Bluetooth: hci5: command 0x041b tx timeout [ 537.970065][ T9739] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 537.980400][ T9739] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 537.990480][ T9739] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 537.998406][ T9739] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 539.143721][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 539.154436][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 539.423664][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 539.433758][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 539.499334][T11582] device veth0_vlan entered promiscuous mode [ 539.522488][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 539.532194][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 539.604099][T11582] device veth1_vlan entered promiscuous mode [ 539.861076][ T8489] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 539.871186][ T8489] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 539.881287][ T8489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 539.891461][ T8489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 539.930281][T11582] device veth0_macvtap entered promiscuous mode [ 539.959303][T11582] device veth1_macvtap entered promiscuous mode [ 540.027961][ T9739] Bluetooth: hci5: command 0x040f tx timeout [ 540.031104][T11582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 540.048466][T11582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.058490][T11582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 540.069078][T11582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.079242][T11582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 540.089968][T11582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.100063][T11582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 540.110677][T11582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.120689][T11582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 540.131265][T11582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.145749][T11582] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 540.153869][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 540.163771][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 540.173494][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 540.184064][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 540.338513][T11582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 540.349704][T11582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.359978][T11582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 540.370661][T11582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.380859][T11582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 540.393508][T11582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.404107][T11582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 540.414827][T11582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.425055][T11582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 540.435747][T11582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.450040][T11582] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 540.467376][ T8489] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 540.478071][ T8489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 540.525728][T11582] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.534689][T11582] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.543691][T11582] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.552527][T11582] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.980242][ T8335] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 540.988580][ T8335] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 541.006583][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 541.093552][ T9485] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 541.101602][ T9485] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 541.123638][ T8489] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 11:34:47 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x9e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc088}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x3}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x16}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x8}]}}}]}, 0x50}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) 11:34:47 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x9e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc088}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x3}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x16}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x8}]}}}]}, 0x50}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) 11:34:47 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201070090c5d108f30c75938be00000000109021b"], 0x0) 11:34:47 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x3d, 0x60, 0xb3, 0x8, 0x1fb9, 0x201, 0xc07e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x21, 0x8b, 0x48}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 11:34:47 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x3d, 0x60, 0xb3, 0x8, 0x1fb9, 0x201, 0xc07e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x21, 0x8b, 0x48}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000c00)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0}) 11:34:47 executing program 0: open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r1 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) r2 = dup3(r1, r0, 0x80000) ioctl$SIOCAX25DELFWD(r2, 0x89eb, &(0x7f0000000040)={@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) sendfile(r0, r1, 0x0, 0x8000fffffffe) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380)='nl80211\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)={0x38, r3, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7ffff}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x38}}, 0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="48020000", @ANYRES16=r3, @ANYBLOB="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"], 0x248}, 0x1, 0x0, 0x0, 0x4021}, 0x4004004) r6 = openat$proc_capi20ncci(0xffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r6, 0x40505412, &(0x7f0000000100)={0x0, 0x3, 0x6, 0x0, 0x3}) sendmsg$NL80211_CMD_SET_BSS(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x60, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x81, 0x28}}}}, [@NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x51}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0xc3}, @NL80211_ATTR_BSS_HT_OPMODE={0x6}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0xab}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x7f}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x7}, @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x38}]}, 0x60}, 0x1, 0x0, 0x0, 0x24004051}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) write$tcp_congestion(r1, &(0x7f0000000000)='vegas\x00', 0x6) [ 541.893696][ T32] audit: type=1800 audit(1608118487.814:341): pid=11866 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16066 res=0 errno=0 [ 541.913746][ T32] audit: type=1804 audit(1608118487.824:342): pid=11866 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/123/bus" dev="sda1" ino=16066 res=1 errno=0 [ 541.939691][ T32] audit: type=1800 audit(1608118487.824:343): pid=11866 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16066 res=0 errno=0 [ 541.960107][ T32] audit: type=1804 audit(1608118487.874:344): pid=11866 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/123/bus" dev="sda1" ino=16066 res=1 errno=0 [ 541.984371][ T32] audit: type=1800 audit(1608118487.874:345): pid=11866 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16066 res=0 errno=0 [ 542.104160][ T7] Bluetooth: hci5: command 0x0419 tx timeout [ 542.365377][ T8492] usb 3-1: new high-speed USB device number 26 using dummy_hcd 11:34:48 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0xd4) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f) ioctl$MON_IOCQ_URB_LEN(r2, 0x9201) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r3 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) r4 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendmmsg$inet(r4, &(0x7f0000000080)=[{{&(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10, 0x0}}, {{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'veth0_to_bridge\x00'}) sendfile(r1, r3, 0x0, 0x8000fffffffe) ioctl$TUNSETNOCSUM(r3, 0x400454c8, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x0) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) [ 542.463661][ T7] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 542.623261][ T8492] usb 3-1: Using ep0 maxpacket: 8 [ 542.746201][ T8492] usb 3-1: New USB device found, idVendor=1fb9, idProduct=0201, bcdDevice=c0.7e [ 542.755683][ T8492] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.773245][ T7] usb 4-1: Using ep0 maxpacket: 8 [ 542.794810][ T8850] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 542.811451][ T8489] Bluetooth: hci2: command 0x0406 tx timeout [ 542.906374][ T7] usb 4-1: New USB device found, idVendor=1fb9, idProduct=0201, bcdDevice=c0.7e [ 542.915800][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.950090][ T8492] usb 3-1: config 0 descriptor?? [ 543.000199][ T8492] cp210x 3-1:0.0: cp210x converter detected [ 543.013496][ T7] usb 4-1: config 0 descriptor?? [ 543.058754][ T7] cp210x 4-1:0.0: cp210x converter detected [ 543.264044][ T8492] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 543.271813][ T8492] cp210x 3-1:0.0: querying part number failed [ 543.279888][ T7] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 543.287796][ T7] cp210x 4-1:0.0: querying part number failed [ 543.431247][ T8492] cp210x ttyUSB0: failed get req 0x4 size 2 status: -71 [ 543.435765][ T8850] usb 2-1: Using ep0 maxpacket: 8 [ 543.439057][ T8492] cp210x: probe of ttyUSB0 failed with error -71 [ 543.468772][ T7] cp210x ttyUSB1: failed get req 0x4 size 2 status: -71 [ 543.477575][ T7] cp210x: probe of ttyUSB1 failed with error -71 [ 543.494729][ T32] audit: type=1800 audit(1608118489.424:346): pid=11897 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16080 res=0 errno=0 [ 543.534568][ T7] usb 4-1: USB disconnect, device number 26 [ 543.543043][ T7] cp210x 4-1:0.0: device disconnected [ 543.572686][ T8492] usb 3-1: USB disconnect, device number 26 [ 543.581090][ T8492] cp210x 3-1:0.0: device disconnected [ 543.594485][ T8850] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 543.604842][ T8850] usb 2-1: config 0 has no interfaces? [ 543.610481][ T8850] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=e0.8b [ 543.620390][ T8850] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.820378][ T8850] usb 2-1: config 0 descriptor?? 11:34:49 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x9e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc088}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x3}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x16}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x8}]}}}]}, 0x50}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) 11:34:49 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x9e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc088}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x3}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x16}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x8}]}}}]}, 0x50}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) [ 544.075674][ T8489] usb 2-1: USB disconnect, device number 23 11:34:50 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x3d, 0x60, 0xb3, 0x8, 0x1fb9, 0x201, 0xc07e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x21, 0x8b, 0x48}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000c00)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0}) 11:34:50 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x3d, 0x60, 0xb3, 0x8, 0x1fb9, 0x201, 0xc07e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x21, 0x8b, 0x48}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) [ 544.247409][ T32] audit: type=1804 audit(1608118490.174:347): pid=11902 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/124/bus" dev="sda1" ino=16080 res=1 errno=0 [ 544.273867][ T32] audit: type=1800 audit(1608118490.174:348): pid=11902 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16080 res=0 errno=0 [ 544.559510][ T32] audit: type=1804 audit(1608118490.374:349): pid=11902 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/124/bus" dev="sda1" ino=16080 res=1 errno=0 [ 544.585154][ T32] audit: type=1800 audit(1608118490.374:350): pid=11902 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16080 res=0 errno=0 11:34:50 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201070090c5d108f30c75938be00000000109021b"], 0x0) [ 545.114441][ T8492] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 545.224789][ T7] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 545.347533][ T9499] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.354237][ T8492] usb 4-1: Using ep0 maxpacket: 8 [ 545.474646][ T8492] usb 4-1: New USB device found, idVendor=1fb9, idProduct=0201, bcdDevice=c0.7e [ 545.484118][ T8492] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.494470][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 545.595042][ T8492] usb 4-1: config 0 descriptor?? 11:34:51 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1830be, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000180)=0x10001) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x40, r2, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, [], 0x14}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x22}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r3 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r3, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) [ 545.620385][ T7] usb 3-1: New USB device found, idVendor=1fb9, idProduct=0201, bcdDevice=c0.7e [ 545.629895][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.649415][ T8492] cp210x 4-1:0.0: cp210x converter detected [ 545.734763][ T7] usb 3-1: config 0 descriptor?? 11:34:51 executing program 5: r0 = socket(0x18, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0x18, 0x1}, 0xc) [ 545.776683][ T7] cp210x 3-1:0.0: cp210x converter detected [ 545.843532][ T9499] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 545.854007][ T8492] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 545.861700][ T8492] cp210x 4-1:0.0: querying part number failed 11:34:51 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x9e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc088}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x3}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x16}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x8}]}}}]}, 0x50}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) [ 545.919412][ T8492] cp210x ttyUSB0: failed get req 0x4 size 2 status: -71 [ 545.927603][ T8492] cp210x: probe of ttyUSB0 failed with error -71 [ 546.003172][ T7] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 546.010955][ T7] cp210x 3-1:0.0: querying part number failed [ 546.057118][ T8492] usb 4-1: USB disconnect, device number 27 [ 546.065300][ T8492] cp210x 4-1:0.0: device disconnected [ 546.087148][ T7] cp210x ttyUSB1: failed get req 0x4 size 2 status: -71 [ 546.094877][ T7] cp210x: probe of ttyUSB1 failed with error -71 [ 546.113524][ T9499] usb 2-1: Using ep0 maxpacket: 8 [ 546.233047][ T7] usb 3-1: USB disconnect, device number 27 [ 546.241141][ T7] cp210x 3-1:0.0: device disconnected [ 546.244598][ T9499] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 546.257240][ T9499] usb 2-1: config 0 has no interfaces? [ 546.263088][ T9499] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=e0.8b [ 546.272327][ T9499] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.599918][ T9499] usb 2-1: config 0 descriptor?? 11:34:52 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x3d, 0x60, 0xb3, 0x8, 0x1fb9, 0x201, 0xc07e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x21, 0x8b, 0x48}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000c00)={0x18, &(0x7f0000000d00), 0x0, 0x0, 0x0, 0x0}) 11:34:52 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$sock_timeval(r0, 0x1, 0x0, 0x0, 0x0) [ 546.908440][ T9499] usb 2-1: USB disconnect, device number 24 11:34:53 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x3d, 0x60, 0xb3, 0x8, 0x1fb9, 0x201, 0xc07e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x21, 0x8b, 0x48}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) [ 547.213595][ T32] kauditd_printk_skb: 2 callbacks suppressed [ 547.213680][ T32] audit: type=1804 audit(1608118493.134:353): pid=11978 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/125/bus" dev="sda1" ino=16093 res=1 errno=0 11:34:53 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x9e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc088}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x3}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x16}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x8}]}}}]}, 0x50}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) [ 547.420826][ T32] audit: type=1804 audit(1608118493.234:354): pid=11990 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/125/bus" dev="sda1" ino=16093 res=1 errno=0 [ 547.445172][ T32] audit: type=1800 audit(1608118493.244:355): pid=11978 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=16093 res=0 errno=0 [ 547.465880][ T32] audit: type=1804 audit(1608118493.264:356): pid=11978 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/125/bus" dev="sda1" ino=16093 res=1 errno=0 11:34:53 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) 11:34:53 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201070090c5d108f30c75938be00000000109021b00010000000009040000"], 0x0) 11:34:53 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) select(0x40, &(0x7f0000000200)={0x9}, 0x0, 0x0, &(0x7f0000000300)={0x0, r0/1000+60000}) [ 547.916187][ T7] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 548.112667][ T8492] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 548.363375][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 548.438103][ T32] audit: type=1800 audit(1608118494.364:357): pid=12013 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16108 res=0 errno=0 [ 548.494039][ T7] usb 3-1: New USB device found, idVendor=1fb9, idProduct=0201, bcdDevice=c0.7e [ 548.503696][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.514083][ T8492] usb 4-1: Using ep0 maxpacket: 8 [ 548.563282][ T9499] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 548.634031][ T8492] usb 4-1: New USB device found, idVendor=1fb9, idProduct=0201, bcdDevice=c0.7e [ 548.643516][ T8492] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.676600][ T32] audit: type=1804 audit(1608118494.434:358): pid=12014 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/126/bus" dev="sda1" ino=16108 res=1 errno=0 [ 548.703296][ T32] audit: type=1800 audit(1608118494.434:359): pid=12014 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16108 res=0 errno=0 [ 548.732286][ T7] usb 3-1: config 0 descriptor?? 11:34:54 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) select(0x40, &(0x7f0000000200)={0x9}, 0x0, 0x0, &(0x7f0000000300)={0x0, r0/1000+60000}) [ 548.795751][ T7] cp210x 3-1:0.0: cp210x converter detected [ 548.812238][ T8492] usb 4-1: config 0 descriptor?? [ 548.823306][ T9499] usb 2-1: Using ep0 maxpacket: 8 [ 548.897225][ T8492] cp210x 4-1:0.0: cp210x converter detected 11:34:54 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x9e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc088}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x3}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x16}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x8}]}}}]}, 0x50}}, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) [ 548.956435][ T9499] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 548.966967][ T9499] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=e0.8b [ 548.976269][ T9499] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.994199][ T7] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 549.002055][ T7] cp210x 3-1:0.0: querying part number failed [ 549.063638][ T8492] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: 0 [ 549.071248][ T8492] cp210x 4-1:0.0: querying part number failed [ 549.082252][ T7] cp210x ttyUSB0: failed get req 0x4 size 2 status: -71 [ 549.093637][ T7] cp210x: probe of ttyUSB0 failed with error -71 [ 549.139849][ T9499] usb 2-1: config 0 descriptor?? [ 549.171515][ T7] usb 3-1: USB disconnect, device number 28 [ 549.180107][ T7] cp210x 3-1:0.0: device disconnected [ 549.223822][ T32] audit: type=1804 audit(1608118495.154:360): pid=12013 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/126/bus" dev="sda1" ino=16108 res=1 errno=0 [ 549.247876][ T32] audit: type=1804 audit(1608118495.154:361): pid=12016 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/126/bus" dev="sda1" ino=16108 res=1 errno=0 [ 549.273597][ T32] audit: type=1800 audit(1608118495.154:362): pid=12016 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16108 res=0 errno=0 [ 549.314737][ T8492] cp210x ttyUSB1: failed get req 0x4 size 2 status: -71 [ 549.322020][ T8492] cp210x: probe of ttyUSB1 failed with error -71 [ 549.351301][ T8492] usb 4-1: USB disconnect, device number 28 [ 549.364451][ T8492] cp210x 4-1:0.0: device disconnected [ 549.422994][ T9499] ath6kl: Failed to submit usb control message: -71 [ 549.429749][ T9499] ath6kl: unable to send the bmi data to the device: -71 [ 549.437013][ T9499] ath6kl: Unable to send get target info: -71 [ 549.536126][ T9499] ath6kl: Failed to init ath6kl core: -71 [ 549.582404][ T9499] ath6kl_usb: probe of 2-1:0.0 failed with error -71 [ 549.683664][ T9499] usb 2-1: USB disconnect, device number 25 11:34:56 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x3d, 0x60, 0xb3, 0x8, 0x1fb9, 0x201, 0xc07e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x21, 0x8b, 0x48}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000c00)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0}) 11:34:56 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) select(0x40, &(0x7f0000000200)={0x9}, 0x0, 0x0, &(0x7f0000000300)={0x0, r0/1000+60000}) 11:34:56 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201070090c5d108f30c75938be00000000109021b"], 0x0) 11:34:56 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x3d, 0x60, 0xb3, 0x8, 0x1fb9, 0x201, 0xc07e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x21, 0x8b, 0x48}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000c00)={0x18, &(0x7f0000000d00), 0x0, 0x0, 0x0, 0x0}) 11:34:56 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x9e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc088}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x3}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x16}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x8}]}}}]}, 0x50}}, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) 11:34:56 executing program 0: openat$ipvs(0xffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) r3 = socket(0x40000000002, 0x80000, 0x609) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendmmsg$inet(r3, &(0x7f0000000080)=[{{&(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10, 0x0}}, {{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0xf, 0x0}}], 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x40}, &(0x7f0000000040)=0x8) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) [ 550.693364][ T9499] usb 3-1: new high-speed USB device number 29 using dummy_hcd 11:34:56 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x9e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc088}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x3}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x16}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x8}]}}}]}, 0x50}}, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) [ 550.804847][ T8850] usb 2-1: new high-speed USB device number 26 using dummy_hcd 11:34:56 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) select(0x40, &(0x7f0000000200)={0x9}, 0x0, 0x0, &(0x7f0000000300)={0x0, r0/1000+60000}) [ 550.866813][ T7] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 550.953395][ T9499] usb 3-1: Using ep0 maxpacket: 8 [ 551.054357][ T8850] usb 2-1: Using ep0 maxpacket: 8 [ 551.085304][ T9499] usb 3-1: New USB device found, idVendor=1fb9, idProduct=0201, bcdDevice=c0.7e [ 551.094618][ T9499] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.116898][ T7] usb 4-1: Using ep0 maxpacket: 8 [ 551.183303][ T9499] usb 3-1: config 0 descriptor?? [ 551.222541][ T8850] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 551.233207][ T8850] usb 2-1: config 0 has no interfaces? [ 551.234201][ T7] usb 4-1: New USB device found, idVendor=1fb9, idProduct=0201, bcdDevice=c0.7e [ 551.238926][ T8850] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=e0.8b [ 551.251157][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.260512][ T8850] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.275226][ T9499] cp210x 3-1:0.0: cp210x converter detected [ 551.452777][ T8850] usb 2-1: config 0 descriptor?? [ 551.462785][ T7] usb 4-1: config 0 descriptor?? [ 551.475926][ T9499] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 551.484077][ T9499] cp210x 3-1:0.0: querying part number failed [ 551.532582][ T9499] cp210x ttyUSB0: failed get req 0x4 size 2 status: -71 [ 551.536904][ T7] cp210x 4-1:0.0: cp210x converter detected [ 551.540411][ T9499] cp210x: probe of ttyUSB0 failed with error -71 11:34:57 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1a71fe, 0x90) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x1404, 0x8, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x890}, 0x4000800) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x0, 0x402182) ioctl$KVM_KVMCLOCK_CTRL(r3, 0xaead) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) [ 551.698961][ T8491] usb 2-1: USB disconnect, device number 26 [ 551.702411][ T9499] usb 3-1: USB disconnect, device number 29 [ 551.713249][ T9499] cp210x 3-1:0.0: device disconnected [ 551.723640][ T7] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: 0 [ 551.731450][ T7] cp210x 4-1:0.0: querying part number failed 11:34:57 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc088}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x3}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x16}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x8}]}}}]}, 0x50}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) 11:34:57 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x80004518, 0x0) [ 551.953482][ T7] cp210x ttyUSB0: failed get req 0x4 size 2 status: -71 [ 551.963945][ T7] cp210x: probe of ttyUSB0 failed with error -71 [ 552.021636][ T7] usb 4-1: USB disconnect, device number 29 [ 552.030079][ T7] cp210x 4-1:0.0: device disconnected [ 552.257329][ T32] kauditd_printk_skb: 6 callbacks suppressed [ 552.257404][ T32] audit: type=1800 audit(1608118498.184:369): pid=12109 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16131 res=0 errno=0 11:34:58 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x3d, 0x60, 0xb3, 0x8, 0x1fb9, 0x201, 0xc07e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x21, 0x8b, 0x48}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000c00)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 552.523525][ T32] audit: type=1804 audit(1608118498.234:370): pid=12111 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/128/bus" dev="sda1" ino=16131 res=1 errno=0 [ 552.548003][ T32] audit: type=1800 audit(1608118498.234:371): pid=12111 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16131 res=0 errno=0 11:34:58 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201070090c5d108f30c75938be00000000109021b"], 0x0) 11:34:58 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x3d, 0x60, 0xb3, 0x8, 0x1fb9, 0x201, 0xc07e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x21, 0x8b, 0x48}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000c00)={0x18, &(0x7f0000000d00), 0x0, 0x0, 0x0, 0x0}) 11:34:59 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=@allocspi={0xf8, 0x16, 0x1ff192b3577f8b73, 0x0, 0x0, {{{@in6=@local, @in=@loopback}, {@in6=@mcast1, 0x0, 0x33}, @in=@broadcast}, 0x0, 0xb9aa}}, 0xf8}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0xf1, 0x0) [ 553.163198][ T32] audit: type=1804 audit(1608118498.934:372): pid=12116 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/128/bus" dev="sda1" ino=16131 res=1 errno=0 [ 553.189168][ T32] audit: type=1804 audit(1608118499.014:373): pid=12109 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/128/bus" dev="sda1" ino=16131 res=1 errno=0 [ 553.213656][ T32] audit: type=1800 audit(1608118499.024:374): pid=12109 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16131 res=0 errno=0 11:34:59 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) r3 = openat$proc_capi20ncci(0xffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380)='nl80211\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)={0x3d8, r4, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x3a7, 0x33, @probe_response={@with_ht={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x6fac}, @device_b, @device_a, @initial, {0x8, 0x81}}, @ver_80211n={0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}}, 0x8, @random=0x1f, 0x800, @val={0x0, 0x2, @random="bd7c"}, @val={0x1, 0x7, [{0x7b}, {0x16}, {0x36, 0x1}, {0x6, 0x1}, {0x1b, 0x1}, {0x36, 0x1}, {0x16}]}, @val={0x3, 0x1, 0x84}, @val={0x4, 0x6, {0xf8, 0x4, 0x7ff, 0x5}}, @val={0x6, 0x2, 0x7}, @val={0x2d, 0x1a, {0x80, 0x1, 0x6, 0x0, {0x5, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x400, 0x9, 0x9}}, @void, @val={0x71, 0x7, {0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x20, 0x60}}, [{0xdd, 0xa7, "dac4619a933095a0397abf3ef578d5b74335581562abb238053d36bdb5d757514ead4c796fcea6fbaf37b1ad6095e9aa81698fd8505e0443837d33f6420ccc50daf2e0e9fdaefba57d416871baff204dddcc9316f4d86d5102528ff03d00d2dd470cfa0f5f5893034cf154d5ddf3c45aca433dbfdde2b4dd8bbd0dc95fc0c7e0d6d8c29c304012de9956949283bbc4d8a82bc4f90ad22a5455a12111cf86260e0a209fe919476d"}, {0xdd, 0x22, "38d65991fb91c7563294792231c3c4716dd9db8c86fbffd12eb0b1a9fbdd9688ce25"}, {0xdd, 0x95, "bc610450e1ed72fcffbb1e2443425bea183f7d501bca7e2ec7bbf40d8279f06c7a1cabd767d7d37c6e04253579f1caed85009e2778ac50ff2e56aa123abadf2610265a951872f6a3430b3ff2720024c01eca499ab98f22dcd3ec747d1dec457919b8cd3ddb21c3cb8a9c59fd391a3721bcecdf76501835d7327b5592d861ad88f75e8c04d065fd212ce29afbe3f1db631c6f643d51"}, {0xdd, 0xe0, "b641af312dcff91afac6161a79d99f1b2f9ab66439d549ce2e179be033901113432ad44ad3d633af4d432bf05f2dd96c6e3cee0ba3d1f450e6f5342c82f4bf9c2824873304ea386aeb586898e74bddf0dafdc114038ec959fa1d1fff89d16ebe42f94bc0d6d591b3c585e2090db60f4c6a635403962dfbaab4656dfa8407b656f4c34e3879d3a32ce6bb8bb2e65b062aa5d1249e728cda0ba06291ebee65b07339bde2f6cda200585b058dece638ca0f52da9c45625b46cca892475786fd3c35722676d69e614ef9ed787d8f32f03a8be7ba91a18a384ce4517fd3471c0b3ad3"}, {0xdd, 0x29, "3e1333bd9b935b39991b1e5a9aefd54aa086d6993c63bbc0269701fb9e5ba7a1d9f05cc693a752c77a"}, {0xdd, 0xc7, "a198f3786de605264a69a8129089477f9aca664b63c4cebef45097a7733191945596c15ecb8cdfa3848a402414ee0d297feab0a460c6a3f2422eb2894a215b61109f7bb4777105bc15b1f75377f740dee03dcc5296f2f75323233d5adfdd6b864b49ff07141f969c71899e487f3a4ec9ede6c1f8e78652f2d453e02a670457310aac96e55f0800f9b137075b74cc2dc986e7d409fbf803876bd2f694266511967438ab2bbcd15928fb582c333e9d8f33a7a5daa8c108a3ea032dace32944f9fa3bf1904bba19f9"}]}}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x3d8}}, 0x40) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380)='nl80211\x00') r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)={0x38, r7, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r9}, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7ffff}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x38}}, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r7, 0x10, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c400000", @ANYRES16=r4, @ANYBLOB="040109000000fddbdf25620000000600b400e8030000"], 0x1c}}, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) 11:34:59 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc088}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x3}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x16}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x8}]}}}]}, 0x50}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) 11:34:59 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x40084503, 0x0) [ 553.703479][ T8491] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 553.733749][ T8850] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 553.813772][ T32] audit: type=1800 audit(1608118499.734:375): pid=12134 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16125 res=0 errno=0 [ 553.895403][ T32] audit: type=1804 audit(1608118499.784:376): pid=12134 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/129/bus" dev="sda1" ino=16125 res=1 errno=0 [ 553.921905][ T32] audit: type=1800 audit(1608118499.784:377): pid=12134 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16125 res=0 errno=0 [ 553.944375][ T8491] usb 3-1: Using ep0 maxpacket: 8 [ 554.013683][ T8850] usb 2-1: Using ep0 maxpacket: 8 [ 554.158622][ T8492] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 554.179376][ T8850] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 554.190383][ T8850] usb 2-1: config 0 has no interfaces? [ 554.196402][ T8850] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=e0.8b [ 554.206215][ T8850] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.224232][ T8491] usb 3-1: New USB device found, idVendor=1fb9, idProduct=0201, bcdDevice=c0.7e [ 554.234289][ T8491] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.258692][ T8491] usb 3-1: config 0 descriptor?? [ 554.331792][ T8850] usb 2-1: config 0 descriptor?? [ 554.382705][ T8491] cp210x 3-1:0.0: cp210x converter detected [ 554.403144][ T8492] usb 4-1: Using ep0 maxpacket: 8 [ 554.523570][ T8491] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 554.532013][ T8491] cp210x 3-1:0.0: querying part number failed [ 554.540720][ T8492] usb 4-1: New USB device found, idVendor=1fb9, idProduct=0201, bcdDevice=c0.7e [ 554.550755][ T8492] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.573675][ T32] audit: type=1804 audit(1608118500.494:378): pid=12136 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/129/bus" dev="sda1" ino=16125 res=1 errno=0 [ 554.597179][ T8491] cp210x ttyUSB0: failed get req 0x4 size 2 status: -71 [ 554.607296][ T8491] cp210x: probe of ttyUSB0 failed with error -71 [ 554.654180][ T8850] usb 2-1: USB disconnect, device number 27 [ 554.679145][ T8492] usb 4-1: config 0 descriptor?? 11:35:00 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc088}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x3}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x16}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x8}]}}}]}, 0x50}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) [ 554.734617][ T8492] cp210x 4-1:0.0: cp210x converter detected [ 554.814651][ T8491] usb 3-1: USB disconnect, device number 30 [ 554.826704][ T8491] cp210x 3-1:0.0: device disconnected 11:35:00 executing program 5: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x200000, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000040)='./file0\x00') [ 554.943658][ T8492] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: 0 [ 554.952245][ T8492] cp210x 4-1:0.0: querying part number failed 11:35:01 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) open(&(0x7f0000000080)='./bus/file0\x00', 0x20001, 0x182) r1 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x1f3) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) [ 555.153614][ T8492] cp210x ttyUSB0: failed get req 0x4 size 2 status: -71 [ 555.161973][ T8492] cp210x: probe of ttyUSB0 failed with error -71 [ 555.221450][ T8492] usb 4-1: USB disconnect, device number 30 11:35:01 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x3d, 0x60, 0xb3, 0x8, 0x1fb9, 0x201, 0xc07e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x21, 0x8b, 0x48}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000c00)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 555.279651][ T8492] cp210x 4-1:0.0: device disconnected 11:35:01 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201070090c5d108f30c75938be00000000109021b"], 0x0) 11:35:02 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc088}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x3}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x16}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x8}]}}}]}, 0x50}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) 11:35:02 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(r1, 0x8, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) 11:35:02 executing program 5: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000000006c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0102000000000000000000000000040004800900020002000000000000000900010073797a30000000000800034000000001"], 0x1}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000300) syz_open_procfs(0x0, 0x0) 11:35:02 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002000)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006780)={0x2020, 0x0, 0x0}, 0x1c53) write$FUSE_INIT(r0, &(0x7f0000004340)={0x50, 0x0, r1}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000000000)="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", 0x2000, &(0x7f00000020c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000066c0)={0x90, 0x0, 0x0, {0x9, 0x0, 0x0, 0x9, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000}}}, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x53260000, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x3) [ 556.333564][ T7] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 556.443177][ T8850] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 556.593197][ T7] usb 2-1: Using ep0 maxpacket: 8 [ 556.713186][ T8850] usb 3-1: Using ep0 maxpacket: 8 [ 556.714160][ T7] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 556.730833][ T7] usb 2-1: config 0 has no interfaces? [ 556.737261][ T7] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=e0.8b [ 556.747735][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.843575][ T8850] usb 3-1: New USB device found, idVendor=1fb9, idProduct=0201, bcdDevice=c0.7e [ 556.854382][ T8850] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.014010][ T8850] usb 3-1: config 0 descriptor?? 11:35:03 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc088}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x3}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x16}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x8}]}}}]}, 0x50}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) [ 557.071059][ T8850] cp210x 3-1:0.0: cp210x converter detected [ 557.109014][ T7] usb 2-1: config 0 descriptor?? 11:35:03 executing program 3: waitid(0x2, 0x0, 0x0, 0x8, 0x0) [ 557.288570][ T8850] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 557.299669][ T8850] cp210x 3-1:0.0: querying part number failed [ 557.327744][ T32] kauditd_printk_skb: 10 callbacks suppressed [ 557.327837][ T32] audit: type=1804 audit(1608118503.254:389): pid=12208 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/131/bus" dev="sda1" ino=16146 res=1 errno=0 [ 557.372461][ T7] usb 2-1: USB disconnect, device number 28 [ 557.449297][ T8850] cp210x ttyUSB0: failed get req 0x4 size 2 status: -71 [ 557.458524][ T8850] cp210x: probe of ttyUSB0 failed with error -71 11:35:03 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x1, 0xa, 0x101}, 0x14}}, 0x0) [ 557.557469][ T32] audit: type=1800 audit(1608118503.324:390): pid=12199 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16146 res=0 errno=0 [ 557.611006][ T8850] usb 3-1: USB disconnect, device number 31 [ 557.622185][ T8850] cp210x 3-1:0.0: device disconnected 11:35:03 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x0, 0x9}, 0x8) 11:35:04 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x3d, 0x60, 0xb3, 0x8, 0x1fb9, 0x201, 0xc07e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x21, 0x8b, 0x48}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000c00)={0x18, &(0x7f0000000d00), 0x0, 0x0, 0x0, 0x0}) 11:35:04 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201070090c5d108f30c75938be00000000109021b0001000000"], 0x0) [ 558.255362][ T32] audit: type=1800 audit(1608118504.174:391): pid=12241 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16141 res=0 errno=0 11:35:04 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x131142, 0x0) r3 = open(&(0x7f0000000040)='./bus\x00', 0xea82, 0x0) copy_file_range(r2, 0x0, r3, 0x0, 0x9, 0x0) 11:35:04 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open$cgroup(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 558.526272][ T32] audit: type=1804 audit(1608118504.234:392): pid=12242 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/132/bus" dev="sda1" ino=16141 res=1 errno=0 [ 558.563101][ T32] audit: type=1800 audit(1608118504.234:393): pid=12242 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16141 res=0 errno=0 11:35:04 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc088}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x3}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x16}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x8}]}}}]}, 0x50}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) [ 559.097504][ T32] audit: type=1800 audit(1608118504.834:394): pid=12248 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=16142 res=0 errno=0 [ 559.123451][ T32] audit: type=1800 audit(1608118504.874:395): pid=12252 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=16142 res=0 errno=0 [ 559.149016][ T32] audit: type=1804 audit(1608118504.934:396): pid=12242 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/132/bus" dev="sda1" ino=16141 res=1 errno=0 [ 559.175303][ T32] audit: type=1804 audit(1608118504.944:397): pid=12243 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/132/bus" dev="sda1" ino=16141 res=1 errno=0 [ 559.206038][ T32] audit: type=1800 audit(1608118504.944:398): pid=12243 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16141 res=0 errno=0 [ 559.239687][ T8850] usb 2-1: new high-speed USB device number 29 using dummy_hcd 11:35:05 executing program 3: perf_event_open$cgroup(&(0x7f00000005c0)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 559.308477][ T7] usb 3-1: new high-speed USB device number 32 using dummy_hcd 11:35:05 executing program 5: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$set_timeout(0xf, r0, 0x0) 11:35:05 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, &(0x7f0000000000)) ioctl$HIDIOCGPHYS(0xffffffffffffffff, 0x80404812, &(0x7f0000000040)) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) sendfile(r1, r2, 0x0, 0xfffffffa) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000100)={0x29, 0x4, 0x0, {0x1, 0x3b3, 0x1, 0x0, [0x0]}}, 0x29) 11:35:05 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc088}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x3}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x16}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x8}]}}}]}, 0x50}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) [ 559.494158][ T8850] usb 2-1: Using ep0 maxpacket: 8 [ 559.553544][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 559.623403][ T8850] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 559.635768][ T8850] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 559.649534][ T8850] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=e0.8b [ 559.661583][ T8850] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.674134][ T7] usb 3-1: New USB device found, idVendor=1fb9, idProduct=0201, bcdDevice=c0.7e [ 559.689992][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.802745][ T7] usb 3-1: config 0 descriptor?? [ 559.853627][ T7] cp210x 3-1:0.0: cp210x converter detected 11:35:05 executing program 3: add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='i', 0x1, 0xfffffffffffffffc) [ 559.924316][ T8850] usb 2-1: config 0 descriptor?? [ 560.054646][ T7] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: 0 [ 560.062359][ T7] cp210x 3-1:0.0: querying part number failed [ 560.171229][ T8850] usb 2-1: USB disconnect, device number 29 [ 560.283421][ T7] cp210x ttyUSB0: failed get req 0x4 size 2 status: -71 [ 560.291030][ T7] cp210x: probe of ttyUSB0 failed with error -71 [ 560.386716][ T7] usb 3-1: USB disconnect, device number 32 [ 560.395046][ T7] cp210x 3-1:0.0: device disconnected 11:35:06 executing program 5: request_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0xfffffffffffffffb) 11:35:06 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc088}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x3}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x16}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x8}]}}}]}, 0x50}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) 11:35:06 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x3d, 0x60, 0xb3, 0x8, 0x1fb9, 0x201, 0xc07e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x21, 0x8b, 0x48}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000c00)={0x18, &(0x7f0000000d00), 0x0, 0x0, 0x0, 0x0}) 11:35:06 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201070090c5d108f30c75938be00000000109021b0001000000"], 0x0) 11:35:06 executing program 3: perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf6e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 11:35:07 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) getresuid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000140)) setresuid(0x0, 0xee00, r3) getresuid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000140)) setresuid(0x0, 0xee00, r4) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./bus\x00', 0x8001, 0x7, &(0x7f00000005c0)=[{&(0x7f0000000740)="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", 0x1000, 0x20000}, {&(0x7f0000000100)="d3b6de81dd298ea3409e193b74eeddd6291272b4f896ac615e73c46c79d85dde2d8dba54471cc751834bcc9e6a3221fb106af12bd8b6c58c8d68390089c5c23281679346dcdaaa75c4846a969c80752f03df6e27ade374df07d62d78ea07355b9947983e84c754da5c747a84f09facdcbe411fa8082145c522add0533d9a075d05d0ca5f654a6774216100d3d8db990f7edccf6e33468ccf9c0e518eebd4d10a4aeb2358c2cdb1287215cea9caa077161c739b88201c3567107bdb2b69669545763526aec283dc21132124a7", 0xcc}, {&(0x7f0000000280)="b65f928b5be5acdf8eb77d840f1e37a7bfb2d9c1b912cb7aed135d0a19d206dfbe393cc4f0dd7dba5ba37e36aa9302e5b6ddd5518341acbcfad5153eca6f97e6942ec5c987107d2ad57b3349852eca79dc6917a9ab7ccd3941a6a21dbd8be9816ca3ab55d17daad37392777aa01714aa3563a0bbc7c30fae97c90cb425bad9cd7408dc86d18277c7a567734b5d889f2f245dcef7b7d79e12d74be65642d8b97ebc2b9d6f5e2598d29f8043aadd6f575de1c94c638fdc1bfbc75f39f5e93a766e961ce1f67c855a715a22001345d39b03903525846d3bec4a3c3b250335967150f6165d1da50c20ea186db422", 0xec, 0x7fff}, {&(0x7f0000001740)="2433c6c89ece34dd66a4a5f19e1df0f9d5e8cac06ce5d959de6d9ecda812bc86488b073158229b4083995fb0d68321970923923aa50f098d981621980a5c3d81ee726f9681cda7618c0ba9327559e3b5115d7f3151fed51e6d0b3fde7253415c09ef6470fe95ad76c82938dfc655e902b2fa1d11e5e5ad88627232adfd3a06f2544e869263dfdb3b0294efbbf9dc20911c048b599d87d988dc985bab9e967fc66f9bb33c94444a7470fa5427ba092f562b9b0b8bafa8c483cf920ec5d9f2eef3a9f1373dd2a13fba47618235978ed8f1f7151b858c226b7751cdbc4a70c757ba00f0f00edb9730172442c2b173a9048b446864344371819c7d2fb0d4bd6b37791987a4dbb81a91e1949e5e036100256739f4870462a62b39ae30040b3c0592115bd6bca29c05f55836aedbd21434e159949a1af2052a2de52ba6f2217d87ab94acd7cd5ddb1c262601349e42b53fc34dfdca9ed9fc17131d97b2ba6cb5517af6d73604d9f6a44acd505ac19e71feaf2709e97e1cee83a5ccad70e8ebb8880ffccd2de8306eeffe7f8f41306ce9c12ae36f0ea92910998a6f3de84bcd914b5f623ed9ff606fdc524920c22c8970671d90439a702e6fddca783fe9d7bd3f64b5ab2364ddb12ecd66506d51feb1712ec46c9d7d65c9b44d4256cef196e6d653559c01a6ace592404726511e42c427f698d931c896578226f5b9b65466207f6b61db29563faf1b99b45a56fbecdb712dc95d12ec27241e62f70039f180274fc58f028235bbe63d588f65af1dc620ed3281176bcc31dea3af4bc8f3393e11f798a21c45dfd656180860c3577c9d087f9a2cb8b496f03b12fe70a5dcfc7459a2facbe880c3923da731f479c23da3588aa64b50dfa1f771bed0fe293bef286ab12d84f7b3101ad73e89c428650d20be6eda1f181f5f688d3f777d9796b0da3bc827431956dfa52bf7b7fb167ae61ac026740071bfbd0a515f45fbc0545fa19fdcb2c32780a70a6fc31c5392a278c89e13286667a64175c296db55c8c29ffefbec772018ba230fc8a9908845ebbead8fc2f6e472a18cff4a6d6bc923bfacc9e05aa6bd0874e5042a9ccc9b65b40b7b202aaec18d7735e2ee58df1c84ed64c1c5ce6020734e4929fac65d1c3e61bc2717b628b787189eba4709a9d0e0336b6736e844ec82075cdb0c76d3c66f0bb6eab1bbfb24e685aa131ac79aa5ddf307505b73b614463f5971a955a3df04443affd559c86105dd08c8f4e3d36aa3a9c648df5e1cb7a6269c449377b32834d716c13d9f93871992cd0320016b6ff0cf582e9d461a6eccf0ecbd43aa669e7ecb34f38f7a8c7440e3f5b9a2420bd592c83553d012a06bd8a8c49701f5a9124b1a16fe129e8cdacd10fec3f8f368e801028a638126232433958f71e4b1955be40af30be8bd175b9027644d206233ffc52d378b3eda2258234ba1ec6e27bfb4e9e6eb353a48783700a2e51373076645da4e8bc9ba85df5ae5f254e610bbbe308ad5ec1632f492ccbef0b413de4708b4eb30f7a2fd6b0bc5b82dc5834c8850d021ff762f8f2d801e1e4a9eb35d336c8d7dc371d6691c1cd74e3dc4592fb37cf4fcd8dfe3c2883d132632667d900b4ca318f6c5624f9be9cae43a98ee064d733919c06fe73611e0342373587be743c27c1c6e1527b8d542b0cdf868231b29612fc76c6c60ad3873d22363e127cf421a0c7a7a3f8d95894674f504753260d3378497cf6c8edd765df04a799f3656d1f4d24d3a4281af4023838edd2bd60282b7914e0e2249d25b463b4493fd1cb15c2e2cf195e42ed40f0030b270cc8f45d85d4a7aac48f7b1b3db9318e156f24bb322800949888b11ed0b9fb7a8ad55d6905bf9e753172adde3eb46012668167dec1187f329d4e803aa15ab87e1007dbc6fcf4ea0a9dd8764f4507e66442d10f1b851748fcdc9578a35eb8892034ec85029ced141893f920018dea94e831fb3b10fd001e1619aa4b223a9b162705c6044ee288b05d41edd18785271e383f5e0f7af1e536d8528a6cf7bfe633c7f4e65f1ba0a3187d358c7e2b4fa2935770c82ebb6ce3e22cfbdc7d3644cba117cd58a7c72211f51b57a15e75deb4c51fdcd6a15343dda2e5e184cecf92d0317e6be33ad0afa28a964fc7f2142c83c155ce04bd76ef1a760a63dc090ecca122c315141c717faacf8268873a961844114a7296fd250adf012afff1809521eb33cdd7857e8f4c66e9a20479a299ec8d9b0b66ca6483f785dfb72b6995000081fdc90984cc71248f691e735bda51a06a6d3eb2f20dff06e957bd7341c62864d73ca08309c37b06d3b5b7b02049f036cec2b7817c2d0b66fa920cd53fa17df73c39ba26a306f703f5ad7ce78cd9844f067a217833aa84ca313bbfd771c48243d0a9fa9074169487f3f53e3b5b7d44f991dadda33ab985d4788f5f9a9c2e4ff8b4866fad13c3668aacb1701b27f50117872ec78f96696c9163a151618c9b0d028d087eaecd3b7886d579b9e454f5dcd2d51767061a5776f861797bf8cb55563f396357e80fc74399db814cd07eaf803beed760e592083e123742737b41efdefd57a4689d98a4209d544c07f3edc8e6742692ddc14ce29dcc714a9dda1f7da4c2156b6db8c6f2800d0c76c1ebb88f4963c4db3d9ad49a9f63f398c75150acda64bb8169f7b74f83d3ae941c3cee6d03d1a655420fb7c505a307684e30614f2aba22494d8cded522baf56fc37f730dd032675ea04b8e71c80f73384abb67b77aef07749a29440a9779b43bc9984db1098a2a44fccb9f8fabbbd0f0d1c3b40edbfd82c20fca283d5672f8911348caadbc2a9d9cc86ad834b07698c2db1a664a3fac2dae249d93d54be541c0f33f3304202410c547ccbe483d6dcdaddc34515ca5c3069d0c5d5536081a10eeaef866f6a508c280d42016cb24378c087d195da4e45bdd0694c99d593a500742aa14d9b7ce93c277813f3efbe80e404a2d9cb2bd5bc6b5a4feb10c1d823057178a55dc23aa28937b2972664dd1aa8316ea9df4c74bea9697e041a7461a3a3386015e9be6b51e85f603f0e4dc5a62d4d9941dcd838eff15743cd78e37116c8cb96cb7d30b2ba8453da017e162dca89abc8b3d14731e6230306825080fa6476891aba695b957e54c36279c37330180d161bf1b6e6625d0c6dad7f68f1a967f6198a0f21db435aab03a437be723a44115056642fa48a4e86457c36b61cf38a61405aa57e3fa9936164f26683818af8d10f19864f3c557f0de0b55bbe352d021530be927b1a646379de4304706db1a70a970894b26b6ff598f323df7e38d45d0e90c23a51e6ebc6b8aa4863b22f9ea9df168b426bfd6ba4bac31265e6ab782cd77fa2e82829f8030de2cab19187315f3b9c31055bb2262d38bfb633949b9e7ad2bcff7594d84f33ac2078d7259e568518ca701433e7ae41cc2ee83aca51569bebeeccd71d6a407b581f33579ba1c0382b72a838c3587cd4113b2e6770a717fe92f5ca843cc5de6d34d6dcb3ccf9773a9e02ff2fc43602e0376a63deedbcb06b014edaead786247cc3618da8fcb94cd9dd7afc90241386e67e40db7225109eea9a0d884e950da7b1c37049351dd39debbde6ec1020f6ed990aab0686a62df9263b8ea99e6160d4f8245cad6e53b8f0eb11224dfad268d93d909adae68745d5e0311ccc943e8d2e19cf6579d062c93f3eea3b41689ff4e0aea19bf322a107edf3c6ee4a7e73ad00adb10e3fde4a6a815507b443e8fdf285296cdea79f04f109d36d258cb874c502b3564601b89f47de163a5a8e9550e31d0d03156c11adb84356fa426cbdafafd0ea694542dc2988d13b9f8dc79802f327abd5a80b431974c5c6aaa41705fbfdfb060cc4d355cc4dc1bf30009faad1b18488d6b2dbf7282d9d1a72fe18e8ee3088ea4097aa722bb362deb89b90b6c3107616d3072e058c6dcf14a574467ac0d6ce0b3959425a8853db279563c15996c6f3cab4c9f39ab618371474d7a1566cb675425d6d24cafad745063d57805f85c4bee165d1dc1660fc1fe6049c326ed516c3854035d29958c289e6308881fb38c9dcb45e4b9b2fed5654a17f45e0c0a848884212940177a42bffbf02df759abac82c0d8e6669fe13786c9785c647bf026256ff07b0e2170db599136a75b93f23e4ba9ba6792680f073a4eda6fc94df7b3caad5b84c781e414c62236c8584d7bb1b548aad7baa2988a2b5a9bb4276f0c1fbf7358d9f599ccb4bd30063dba973b8212a34c5c2f767f16ac8947c2f76338220e430a84f8a00957eb3b6e5e3134bd09d71541928d174c3824e4dcc8572ad21038bce35075fcaa74ca6fb874ead0ad33dabdf4768c1b301a0516e1d60e8fd1e743427a1917dbf942d52d6177307658c6f97acacc04b1286aa434755174158e6a9408242f379d8cfacd6fd61002c56815bfc41c61ca7f8a9f6ac24f4b8d61608df7aa025a881b9028a4112876c5601b796e292ee191aa8a49d523b4eac7dd7fa8fc1516a3bd5bcb604637eb9d2c01a28dc9fe79ae2966a5ce296ca2f3709f7cd51fd8a001f4a884a2fb28f29e86534d35cea4b70ab6e19252e3f2811b604f784bbc90598ed5af59309f7bd5dff2a73e247246413343f5d8dd41e4025f0931e38bbd4817bc67a96aed08102ee0ac4c616a02ee846146038b8d9d5adf851a0c2fba088da995c05fbfd94bdeedb941d75a149ae6176404a783e6c13509f9e54a807ce43b7a31abe8d00c360826fbd0ab9aea3fd0ada7c88a6ec3147c5d52f5cf6951459d743563277c6e889fce2e5ce04685cbf148971f805459fc17c72a87bed2d5067359b0977304b851e4288b5116cddfcaa2f6a184337d13a9eb5ea28c2c2b72cd83f0012e31580e9a48f92ce0b029bb9712622465135b9d6eb671aec419630eb61e01c6c7bef2ce6c8c752b03241c1a9065bd69c4f37de9fd031d40aa90d7d5b9efce07223134525ee42078751bfc0b1c9576c02eb6e6d00a07d83a5be2cd639472c14f64b4c1326e789b6de2fb702f3577bfaa1476a0a53bd28ff83ea4002c076e634be33a1841bfc41337d285bde4f2b355644858d9db23e78305284df71987e3b01cfdd16c3116d772c49120dca3203087a9a81aff7c857ddb1e5f18cda93d4a559657d1e24a0e72da8e87a2c930769730015cbf5f9143656815493f007f42bf51ce83ca052eb9a48ca1fb24e2ad82fae9e5cbc79d09df33ca270b330e111244bc0e8d7d7642310b528f28e4e324ed984004c2569c0c331f9a6d326f2acdc3bb4199c1e21e290d34d684743c3f22c2c28fdc36524e5d80abc8029c73b213b4a2b04575552c220b1589d2a0b61a35fee8c15fa1ac7b097603cee855e4b4f8102339341bfa273d07f5a4f44bfe6087620e10eab60a82faaf117c0c0d6fc08ff7d589b442a919abce2e61064b7be9ced0ce792a3d858d0c3430ef83875ac17a755c423b1391996956f9c775ac5672696fc9170402d6aeae2529267c0674ac89fb37ecff431307f79cb46e776ac082d097b1ababa9d36f7f94ee07e48aa76cd1be103cf0510c88ab60312ea9fca3539b655a13567607a0c663c3ae71ec7ba1d6d90d2c85ce9bc3c312062f9ad2a61d4de1cffc8488ec408ace8e5e585e824638b261ddb32c3eb5249bf13de75d88f4e6cf1c42512a264c0a30c46f5e33470135962c83175f4b1a9041b92729295a437cc6ab444478e268c61d59c805fedc38e7b9fef9ff8109bb15426f20af988f904c0a82579e57778785e389a4791daefd16a573d4e899a8d8ef87144c8f30297a60e5b53f4ea7c", 0x1000, 0x2}, {&(0x7f0000000380)="71351a3be9ed59b5b61d7ebe064b9549f7355ee0ffc1c60f1fa7193712f34136879ca06dc21188bc8d4091d26b097196776a3d1f1aae20165f3b843da1cac9d2b6afc9a3efb0d9ed5c2151f43b815da7a489c5f85138485592ae7bc82f33646f7e3bceb8f25671127d248c7add6983f92b92ec20760a6d4a0ce185930ed148ea3a04f4a88376644567b365f0d990ce60b17b2bccff2632a628bc00899f40687266e08379610dac61b2f5505aecd665a8315e4942070024edeec5", 0xba, 0x5}, {&(0x7f0000000440)="77b65c172b9d1c1ef24a9d17fe8e0fae1f1267009f3cc562d05ee24ecdc631ec35d63f74c2c298065a094caba0e18a54cc1cfe935401b3ae806699b4f16d902f24d3f03a60aa493c3e29e2c28be1fc1b159408c7fee8747d67b5defaf4d0f39546b66014920386b1927799926237011d9012c14ed1bde964bceb83e92cc948927f69bb77b5f34ba8f9f86724b12f8190539cd68a8254b1462ce5940234b9d254bc311bbd74e9816e2943eb64a68e2ad6a4d2cb4a62969e7d6706df0c4429eb44f431a0", 0xc3, 0x7}, {&(0x7f0000000540)="51d9f548f4f3670e70c33d30017b5eacb3d157d979d67e970dd0cf2b436fb273039b8ae032a79f96d91b97740ddcbf5b8d94d3f52d624fccd915d05d0eaa2af66fff3a6a2d879755d25be0732be1279e3283fc83763311ab3884", 0x5a, 0x1f}], 0x3000000, &(0x7f0000000640)={[{@unhide='unhide'}, {@nojoliet='nojoliet'}, {@nocompress='nocompress'}, {@map_off='map=off'}, {@map_off='map=off'}, {@sbsector={'sbsector', 0x3d, 0x401}}, {@dmode={'dmode'}}, {@norock='norock'}, {@uid={'uid', 0x3d, r3}}, {@unhide='unhide'}], [{@fowner_gt={'fowner>', r4}}]}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) 11:35:07 executing program 5: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0xf000) 11:35:07 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc088}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x3}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x16}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x8}]}}}]}, 0x50}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) 11:35:07 executing program 3: perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 561.673966][ T9488] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 561.723668][ T8492] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 561.923502][ T9488] usb 2-1: Using ep0 maxpacket: 8 [ 561.964379][ T8492] usb 3-1: Using ep0 maxpacket: 8 [ 562.044591][ T9488] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 562.055132][ T9488] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 562.064472][ T9488] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=e0.8b [ 562.073771][ T9488] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 11:35:08 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc088}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x3}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x16}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x8}]}}}]}, 0x50}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) [ 562.124195][ T8492] usb 3-1: New USB device found, idVendor=1fb9, idProduct=0201, bcdDevice=c0.7e [ 562.133637][ T8492] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 11:35:08 executing program 5: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0xf000) [ 562.261266][ T8492] usb 3-1: config 0 descriptor?? [ 562.312227][ T8492] cp210x 3-1:0.0: cp210x converter detected [ 562.373138][ T9488] usb 2-1: config 0 descriptor?? 11:35:08 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r1, 0xc038943b, &(0x7f0000000040)={0x6, 0x28, [], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0]}) 11:35:08 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r2) ioctl$KDFONTOP_GET(r0, 0x5423, &(0x7f0000000400)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 562.513504][ T8492] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: 0 [ 562.521049][ T8492] cp210x 3-1:0.0: querying part number failed [ 562.617655][ T9488] usb 2-1: USB disconnect, device number 30 [ 562.723602][ T8492] cp210x ttyUSB0: failed get req 0x4 size 2 status: -71 [ 562.730990][ T8492] cp210x: probe of ttyUSB0 failed with error -71 [ 562.797134][ T8492] usb 3-1: USB disconnect, device number 33 [ 562.805784][ T8492] cp210x 3-1:0.0: device disconnected 11:35:08 executing program 5: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0xf000) [ 563.112736][ T32] kauditd_printk_skb: 10 callbacks suppressed [ 563.112809][ T32] audit: type=1800 audit(1608118509.034:409): pid=12350 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15874 res=0 errno=0 [ 563.142207][ T32] audit: type=1804 audit(1608118509.074:410): pid=12350 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/135/bus" dev="sda1" ino=15874 res=1 errno=0 11:35:09 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x3d, 0x60, 0xb3, 0x8, 0x1fb9, 0x201, 0xc07e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x21, 0x8b, 0x48}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000c00)={0x18, &(0x7f0000000d00), 0x0, 0x0, 0x0, 0x0}) 11:35:09 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc088}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x3}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x16}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x8}]}}}]}, 0x50}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) 11:35:09 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201070090c5d108f30c75938be00000000109021b0001000000"], 0x0) [ 563.142525][ T32] audit: type=1800 audit(1608118509.074:411): pid=12350 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15874 res=0 errno=0 [ 563.920998][ T32] audit: type=1804 audit(1608118509.844:412): pid=12355 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/135/bus" dev="sda1" ino=15874 res=1 errno=0 11:35:09 executing program 5: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0xf000) [ 564.128123][ T32] audit: type=1804 audit(1608118509.884:413): pid=12356 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/135/bus" dev="sda1" ino=15874 res=1 errno=0 [ 564.154432][ T32] audit: type=1800 audit(1608118509.884:414): pid=12356 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15874 res=0 errno=0 11:35:10 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc088}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x3}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x16}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x8}]}}}]}, 0x50}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) 11:35:10 executing program 3: add_key$user(&(0x7f0000000180)='user\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)="8e", 0x1, 0xfffffffffffffffb) 11:35:10 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r1, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) [ 564.345589][ T8491] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 564.453386][ T8489] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 564.593190][ T8491] usb 2-1: Using ep0 maxpacket: 8 [ 564.703262][ T8489] usb 3-1: Using ep0 maxpacket: 8 [ 564.721815][ T8491] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 564.732400][ T8491] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 564.741792][ T8491] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=e0.8b [ 564.747903][ T32] audit: type=1800 audit(1608118510.674:415): pid=12384 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16161 res=0 errno=0 [ 564.751949][ T8491] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.864283][ T8489] usb 3-1: New USB device found, idVendor=1fb9, idProduct=0201, bcdDevice=c0.7e [ 564.873693][ T8489] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.949371][ T32] audit: type=1804 audit(1608118510.734:416): pid=12385 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/136/bus" dev="sda1" ino=16161 res=1 errno=0 [ 564.975723][ T32] audit: type=1800 audit(1608118510.734:417): pid=12385 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16161 res=0 errno=0 [ 564.996043][ T32] audit: type=1804 audit(1608118510.774:418): pid=12384 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/136/bus" dev="sda1" ino=16161 res=1 errno=0 [ 565.070411][ T8489] usb 3-1: config 0 descriptor?? 11:35:11 executing program 5: add_key$fscrypt_v1(&(0x7f0000000400)='logon\x00', &(0x7f0000000440)={'fscrypt:', @desc3='e8dab99234bb312e'}, &(0x7f0000000480)={0x0, "4a84851b475feb463ceb77f30aef21935a6ca265a9e284d90386c3cadb04daf31b80500b7a0539985de0cc58c661381038fee5096a6170f6593d9feb86e93014"}, 0x48, 0xffffffffffffffff) [ 565.124131][ T8491] usb 2-1: config 0 descriptor?? [ 565.161570][ T8489] cp210x 3-1:0.0: cp210x converter detected 11:35:11 executing program 3: perf_event_open$cgroup(&(0x7f00000005c0)={0x0, 0x20000630, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:35:11 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc088}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x3}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x16}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x8}]}}}]}, 0x50}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) [ 565.343457][ T8489] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: 0 [ 565.351100][ T8489] cp210x 3-1:0.0: querying part number failed [ 565.375188][ T7] usb 2-1: USB disconnect, device number 31 11:35:11 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = openat$vim2m(0xffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0xdf224000) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) [ 565.563439][ T8489] cp210x ttyUSB0: failed get req 0x4 size 2 status: -71 [ 565.570727][ T8489] cp210x: probe of ttyUSB0 failed with error -71 [ 565.689418][ T8489] usb 3-1: USB disconnect, device number 34 [ 565.739083][ T8489] cp210x 3-1:0.0: device disconnected 11:35:11 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/schedstat\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) read$FUSE(r2, &(0x7f00000001c0)={0x2020}, 0x2020) 11:35:12 executing program 3: openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x200000, 0x0) select(0x40, &(0x7f0000000200)={0x9}, 0x0, 0x0, 0x0) 11:35:12 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201070090c5d108f30c75938be00000000109021b0001000000000904"], 0x0) 11:35:12 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc088}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x3}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x16}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x8}]}}}]}, 0x50}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) 11:35:12 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0x100000300) 11:35:12 executing program 0: statx(0xffffffffffffffff, &(0x7f0000000180)='./bus\x00', 0x2000, 0x800, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_mount_image$tmpfs(&(0x7f0000000040)='tmpfs\x00', &(0x7f0000000080)='./bus\x00', 0x0, 0x7, &(0x7f0000000580)=[{&(0x7f0000000740)="83f83a6525bfba6142e86d0303ae1b37afff8a24ed41655d300fc48715c73cd629e57266944f0c745c0934f77e7f474005c9fb78a30ba2a631d9f448d569b0d5c4084a830dc69b7d1bd4a3361579cbd2d2737261d87f0a3742458100358c4d18dc781c00bf59afb154c8689b45217359fd936a3cc600de62135129a445be4d6606f114945b5467c5e1e1f52e3b98d4499577a1e48ba0c24722a4f54560cf99a8d662b238e689bb48f80011bdf33a8218a7ac57eb8436a760574e2c1fa2d75c6fc89d03", 0xc3, 0x9}, {&(0x7f0000000600)="d34baf74e9b80e8240969c0cf2821de1a70e24b3f8ed50080a6f0948a76588a0df30315c143b8f497fc99e8e61a92ecfe9033f1529461fc53766e4f6993d7233e69eee69fda4323f88d9582d47c32782738406896a6083bfbb88a0ec5b0897ea857e94eba56933f2fa26d0fafdb1b537da31d604fe27f667bd6422035e3d218bd950bbb5eca4b633d7af66a65f0b", 0x8e, 0x6}, {&(0x7f0000000280)="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", 0xfd, 0xacaa7f5}, {&(0x7f0000000380)="ea1b837aeb7ef95663825afa55ac4d413ce7fa9a02f8f14ed10513daf88dc2324d302df6d0c9bb5fb28f3c0f4c9a9a5b36aa808b1b1e024766d7d1da2fae8b1c5d6c68b7015796bac243808db0493ed8d69abda52200c6d704dfc9309d8dc5531faccb61be145fdae3acbe2adb333faee19cc727c5be9582d94056dac3c940a082aabb3ae06c30969d3cba9414c9e69ef2c2e4c0cc9de06845e6d0b487af50678338ec03fb7f09d808c093f591a08cf9fc6e97c51859f2f1b652", 0xba, 0x4b}, {&(0x7f0000000440)="630beffd8afd3b9e27ba47c9e7a16f693d9ef7bf7caae415766d379b5dfdb0313cd419140f76c0edbe77c628fefb514cdf3bcbb2c9428fda7146586c066970b80681c6adfae57317fd7c313e276f31dec9f00c59bcad8e92d6fc85dffaabc0ec2bd1e9acc032e412f9d9ae877c23ef6c92bc2158d9133031fbc68d108c5e662aeda78dad2fe83a616bb19c8f908e5454f6edd3edb1318800000000", 0x9b, 0x7}, {&(0x7f0000000200), 0x0, 0x80}, {&(0x7f0000000500)="1027ea02c6f06d97b41650064324e9fd81e65f5206775dbdad84d6809248befea6ff95bbb492dc9f0efc1a9464f7a6fa1412f27c5be91519c435fa0b86", 0x3d, 0x5}], 0x1004006, &(0x7f0000000f40)={[{@huge_never='huge=never'}, {@uid={'uid', 0x3d, r0}}, {@nr_blocks={'nr_blocks', 0x3d, [0x30, 0x38, 0x34, 0x74, 0x74, 0x70, 0x36, 0x30]}}, {@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@huge_within_size='huge=within_size'}, {@mode={'mode', 0x3d, 0xa9b7}}, {@nr_blocks={'nr_blocks', 0x3d, [0x78, 0x38, 0x34, 0x6, 0x78, 0x31, 0x0]}}, {@mode={'mode', 0x3d, 0x7}}], [{@seclabel='seclabel'}, {@permit_directio='permit_directio'}]}) ioctl$FIBMAP(r1, 0x1, &(0x7f00000006c0)) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) sendmmsg$sock(r2, &(0x7f0000000d00)=[{{&(0x7f0000000100)=@pppoe={0x18, 0x0, {0x3, @empty, 'team_slave_1\x00'}}, 0x80, &(0x7f0000000180), 0x0, &(0x7f0000000840)=[@timestamping={{0x10, 0x1, 0x25, 0x4}}, @txtime={{0x14, 0x1, 0x3d, 0x5}}, @timestamping={{0x10, 0x1, 0x25, 0x7fff}}, @timestamping={{0x10, 0x1, 0x25, 0x80000000}}, @mark={{0x10, 0x1, 0x24, 0x3}}, @txtime={{0x14, 0x1, 0x3d, 0x2}}, @txtime={{0x14, 0x1, 0x3d, 0xb7e2}}, @mark={{0x10, 0x1, 0x24, 0x6}}, @timestamping={{0x10, 0x1, 0x25, 0x4b4}}, @mark={{0x10, 0x1, 0x24, 0x2}}], 0xac}}, {{0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000900)=[@mark={{0x10, 0x1, 0x24, 0x8}}], 0x10}}, {{&(0x7f0000000940)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e22, 0x3, @mcast2, 0x80000000}}, 0x80, &(0x7f0000000c80)=[{&(0x7f00000009c0)="45f8a12ac2e2a346e9a744f1aae76db9892adf12f36bfaa3f12f78715ef541db835e1724bb2a02930d740d1d3d34ec0940e4869f8c37cc14ed049f5c705dc9dab434abc08eb2afd2e849ab686b6f44222841ba4fb9ef18a41704f5c4565c6bf2d3aff43b36867c84d024199df05d91e233a1551cf3f26bc2c2d2956eb226b5b0d343727dc55d86acee509bc4d2047cd1f056c6908f84a76d96f0c1ff5f051b17efa84d0cde951c8625bbb388fe6728c0ef7f1f44a06c3c87c04dada109d744fc58b6cca0fa8e010a3e691fa190675e471320fc9c3c1573d75765846d032e37a2d3e749a8ef58e77d9ac2dcf2554d30961fb3add4a7b15cbd53e227", 0xfb}, {&(0x7f0000000ac0)="81d70bfb12f2e5995b1f1ee0875d81f890dd5f3c9f9b3fd5d420a2d3bc5eb6dfe1793f05c7f839c4b8acac5699952fc983e07c88d0ef5ea2f2d1ff0327f632d8f1c9bec72fca663288873424458190a1bc", 0x51}, {&(0x7f0000000b40)="12cd9738bbeed1f424de4f75a7077d0248234edcd76f15c9cff57492", 0x1c}, {&(0x7f0000000b80)="89d358266fa1ffdc9bd04d548d", 0xd}, {&(0x7f0000000bc0)="31922adc19e1e564e3a4cb7c451102bb2468e68ea04a9cf385fd8e5f1017461e087458ab836a6f8e42320ef490ec0c9464b6d58c12196064f7fa47d851bf59d0b4060b46f275089b6852d87146938af2a43d01b6759d88b5f6e26770d3c5dd111ed08797eac038c76c18c957360be616313f61a18512107501686908e50cb4efd6448cb1c847bcc2673ecf218b48ccf20f6710659c83ce51ed833d8a403ee9", 0x9f}], 0x5, &(0x7f0000000cc0)=[@timestamping={{0x10, 0x1, 0x25, 0x7fffffff}}], 0x10}}], 0x3, 0x800) openat$vicodec1(0xffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0) ftruncate(r3, 0x1000) lseek(r3, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r4 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r3, r4, 0x0, 0x8000fffffffe) sendfile(r2, r2, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) [ 566.990371][ T8850] usb 2-1: new high-speed USB device number 32 using dummy_hcd 11:35:13 executing program 3: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x8f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f000000aff8)='./file0\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) [ 567.243691][ T8850] usb 2-1: Using ep0 maxpacket: 8 11:35:13 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc088}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x3}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x16}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x8}]}}}]}, 0x50}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) [ 567.373594][ T8850] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 567.384049][ T8850] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=e0.8b [ 567.393398][ T8850] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 11:35:13 executing program 5: openat$cgroup(0xffffffffffffffff, &(0x7f0000002640)='syz0\x00', 0x200002, 0x0) 11:35:13 executing program 2: syz_emit_ethernet(0xe81, &(0x7f0000000640)={@empty, @random="d5687ab4e0a9", @void, {@ipx={0x8137, {0xffff, 0xe73, 0x0, 0x0, {@random, @random="b8e9cc7e834d"}, {@current, @current}, "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"}}}}, 0x0) [ 567.609371][T12439] tmpfs: Bad value for 'nr_blocks' [ 567.614357][ T8850] usb 2-1: config 0 descriptor?? 11:35:13 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8000451a, 0x0) [ 567.844645][T12437] tmpfs: Bad value for 'nr_blocks' [ 567.878943][ T8850] ath6kl: Failed to submit usb control message: -71 [ 567.886231][ T8850] ath6kl: unable to send the bmi data to the device: -71 [ 567.893834][ T8850] ath6kl: Unable to send get target info: -71 11:35:13 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc088}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x3}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x16}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x8}]}}}]}, 0x50}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) [ 568.101626][ T8850] ath6kl: Failed to init ath6kl core: -71 [ 568.157839][ T8850] ath6kl_usb: probe of 2-1:0.0 failed with error -71 11:35:14 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000580)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(anubis)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="cb56b61a88aa6860dccc46f3b1f84265", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$sock(r3, &(0x7f0000002980)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002a00)=[{&(0x7f0000000740)="dd3ee93fdc0ef95548370dae3c29f213e3ff062e1fea709f05b739367026c89d7aa871587c71bbbcbb1c1ed742b30fefd556dbf30affefc88bb7ae4a85ac43e0790e284b86056b838d6c4a5243d98814346810777d56315e6b2aa4335f0b0c646c63b6ff0f44f01838dfcceb48a9a47837e27db0acdf64001db4e87463b82af873e50720fa0f3df921943d7c516e22ba381ac8628f9ccfb334532d28f0ddc48c6887f2b510cc908754c40bb8effeb89c7e54cdf428dceafb992199e654b466bb034af17aa5c5ef0371ad325418bc02d1536f3bb4073036961ce0f93b76b59bd1fd06", 0xe2}, {&(0x7f0000000840)="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", 0x2e8}], 0x2, &(0x7f0000002940)=[@timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14}}], 0x30}}], 0x2, 0x0) [ 568.252994][ T8850] usb 2-1: USB disconnect, device number 32 11:35:14 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r0, r2, 0x0, 0xffeffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) 11:35:14 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201070090c5d108f30c75938be00000000109021b000100000000"], 0x0) 11:35:14 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000040)={0x7, 0x8}, 0xc) kexec_load(0x0, 0x1, &(0x7f0000000240)=[{0x0, 0x0, 0x1e6d77000, 0x1000000}], 0x0) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x40014) ioctl$CHAR_RAW_ROTATIONAL(0xffffffffffffffff, 0x127e, 0x0) 11:35:14 executing program 2: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) [ 569.040166][ T32] kauditd_printk_skb: 8 callbacks suppressed [ 569.040230][ T32] audit: type=1800 audit(1608118514.964:427): pid=12475 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16129 res=0 errno=0 [ 569.109721][ T32] audit: type=1804 audit(1608118515.034:428): pid=12477 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/139/bus" dev="sda1" ino=16129 res=1 errno=0 [ 569.134104][ T32] audit: type=1800 audit(1608118515.034:429): pid=12477 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16129 res=0 errno=0 [ 569.284758][ T32] audit: type=1804 audit(1608118515.114:430): pid=12477 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/139/bus" dev="sda1" ino=16129 res=1 errno=0 [ 569.309374][ T32] audit: type=1800 audit(1608118515.114:431): pid=12477 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16129 res=0 errno=0 11:35:15 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc088}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x3}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x16}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x8}]}}}]}, 0x50}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) 11:35:15 executing program 0: r0 = open(&(0x7f0000000040)='./bus\x00', 0x30da03, 0x2) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000000)={@local, @dev}, &(0x7f0000000080)=0xc) r3 = open(&(0x7f0000000280)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r4 = dup3(r3, r3, 0x71ddbc2ece9068dc) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000340)={&(0x7f00000000c0)="19d9ffe76bc69971dacdcef4d9e715ac0bc2c7d7d3c5d0a7c9832ea29b6b12458f7f92a31cc24d5c496984990207dd0371192d8fc907d558516a4e7953727f506d9dd95a787201970dbf02fb9311cf2315ec1db34f480f526428c86daaac2ec488fa00315fbfc4e88908026a7ac51c47edcc99f62461504c5b0d384696f409548a717caa54e887d3291fe3b7aef9c15a0dd843fb0cd5dc0c560c8bf08ae8d1cb8672643088955fb5f81e64ef5fac7d5d3d644e290f9cd1f7", &(0x7f0000000180)=""/177, &(0x7f0000000280)="801e5a95259a69d66218702de4ee15dcbfb3ff3fdcbff7c3bb9c17d5771e0af8226aa0e401c18b7a3a6b003294d2c8faa3f0c4b215cbea83849c803318138ca6d01d476047a385a2bedf67c320a3f7c7c9ad73ce45ec8b21fa71203ad90e4c31109e1783913a25ce5434e4e77aecafd3373ad0f550c34918f55d782d6272e90b114d0cbac193176a8a9508b209b52015a9f0df8042c2e2cb7c48ce18d8b249d204c793b6b5fc6ec5d130e080b123", &(0x7f0000000740)="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", 0x28e3, r3, 0x4}, 0x38) sendfile(r1, r2, 0x0, 0x8000fffffffe) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) pidfd_getfd(r4, r5, 0x0) sendfile(r0, r0, 0x0, 0x8080fffffffe) socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) [ 569.743761][ T3695] usb 2-1: new high-speed USB device number 33 using dummy_hcd 11:35:15 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000007600)={0x0, 0x0, &(0x7f0000007540)=[{&(0x7f0000006440)={0x18, 0x3b, 0x805, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x18}], 0x1}, 0x0) 11:35:15 executing program 3: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000002140)='/dev/urandom\x00') r0 = openat$urandom(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000003840)=ANY=[@ANYBLOB="06000000001000007530970323661c74f16d74597a91114499aa7e96eba2c101de0a838e85ce5d2b101b21400a16fabde15b6f0a7338a00933338fa437e8cf88959e5040a90dc264a50c351b05ddb1bcce26a462c366ee61b6ccc54d3c4eb48cdfd61abf300766355c07448c43bc9351012f9f8743fe2fc3d1781834cb40710509c03232586c78063fdf263473b7264debd1fd73209af2ddd5f67eca312e4d95051787bf57bdb2d3f8a3ce19a1b6ae6ba8c7eb792ff099efb13e62e3fa73bf3badd664f0ce4c7c137ef88cc8362368e118bb424a5cd269dd61cc572c025ac7335592f53ef0eb87b625efcf602ba8efc2126a60393fc0067576965fc9162ae6b8ba6b33caddcfffc8288741fb99e23fd2bc2f48fe7736b9aaff0e403eb3b24b5fd3c3b8fa560c26834a4c04616d548b827dff27085c10d36ca023e91c72cf44e42bd3adde132421cb73bd199841d4573c82b75439e8fe72593de47d55a20faf141bd1493a721b78001c50087bb0d26d4c5fdfc28ef345e302573b149e15a089307b7c241c015a220dbfb669b61741fc2a91c0eb81b0deb5d6460499affee66b81a0275e810cdad0d017bc5ac6af122f6d0e73e9eef1ba9e503be05e2a0ea5fe129dd162fcd02761f62f7b5b89b9b0bc69dc564b7cc25e30396ca1bb671927f81b63be64fad56981ce1f63805da89f09c43f5ef08cf73056c51cd17cfe7c839047984ba7396956b17d8d954525dbaf00271ae6ffcafd7aab2871708320061f4211943b9ac171caf6ca4f939776b262beae2011d6535347e56adfa7ecefcd11ac20b3fa0994c5dc4e828175e043f26ebb3b481acb076c8e7bfdea1201fcc683f35793af59ec25b1bee5e30a1790ceda4a5832fb467ad2763ede1d904276ef0a4dfe5ea3796c0c8931f31d787c1fb4105e6b8beb869755a16356414e5ba09fe6c992c8e201948f72435ae27b209e8db0a339a8458922e7fa3b879cdd0a9715639e0e4428321af657f0fa57806da1e7a2f600413c59a6fb00eb336f47b027c92bb5c52a0f88a4e93a646f1892d62e1e4074e3ed61318494c74657c59d2db18bf6350edbc71d484aa9044e68eaeb1eb52aef380e83c4d629024562bbf0783f989aebadfd7fd7cd17798e2921fd38b9436f015bccd786f694daa85897a6bf9ad179961440164fc63fdafe0b59ae081897bdd4bf8a14334954cb52c518e13ff76dd82676a67ce5a8d76b57a4842c0d9bdf0555b087dcadd122de5bbef42448cb421a391d1ceaf59d86f9fa892b21f2b0cb7a8ccafd85acd57de0f5d1170695eeeef9f4893f39c99abc766cd6135be79c75f7224c491d1be99302cb803f60d1c2ad3cc4be0bf180fc3d60fb58d8a558ba6982b0feee06b72660d95a47366b1e834270d2727c66585a001d0dabe9d9fec768c6564785159138839e10ab73b142d4148ac2150b4be23e5e65975d141f64ddc4ba634382c5b50e02e8fa3f2fc715fac3b33d8c09707f95fe8bf975dd167932ef5504c70348fb992b47b3fbcbdc6552e13b8a641930d15c6015a9c8bb17046739da3ed57231a347f695a01bddd6ad849c28056c0b324d9d9f0548e05a5e061aa76d00415ca546e2238294c914074c14ba2116eaeb219d1e9c19a9aa518c9bfa2e01c85a2ff23e49e56c63d9301710c0c2789b40c5071971b2cc627747f849885ca9343ca40a403629377357e81557ae1f684fb5fba20a409b52e7af8b57f0a09cf894f6b9526c52737c3e18e91a1c47c4b7810fa26873c4b091cd77c0b28bd393a1db5e5d03fdadfb63744ffa447a9ead32581f2987aa20abc6f9f327934fcf84b8c46a5a956dca399aec343b1eb7794063c9a76cb4e0ab66f3e251bf9c68fc9cbab37fc962167b96e9be69bd8e3d435ea51a2fd78cede4d490b6cb8ea20b8393551f77c64bb56523a66d6e66e8c98f5e6ee91a9d9079edf1fae30906c9f462af8b6113f0cf08779fe56803d0d39d9fb5921afec033735d5cb2acb5c74cc18f83bb7de3c1721832f94471405110266d74c41509707fb97d23e478bc88382fa87d96372654f9506e3d05917b5886efb761821fdbb88ab318a181dbf783f6b037b37418d691a9732d1ff710dcd4d32232bad615b1e1aff0f34c6d05693adbcae7c251817f944e3ef0a4a663e57e56a079cc872a1a97279eba23683a88aae1e1ef95d07ea23d44713d2377473853f956fd0c4876d05cdb92aa2a34f2c4d993d920fcf161b8ae23db4185c13a19bddd1fab6d6f2c30e522bd1698a395a842bc55a609b4eda04568c57082e53c2a7dd076200e556a2bc2a98913cbbb04818ecbc58e4ac2b26be0529e7cd5eb3a13d01bc3b715ec176b8470650602995a461a4a068df4ba5a1e47bbcd9ea410ad78922c9ea2cb0d20971492ce7847a30d2d5755785f48b29a883a13c6af12c4ff559235bdcbd182034258a296ef7486e5ecd95fa1972461c37c81ff6dd79b354bf0ffd00b6a58ca5f04f82fc80f47c8a261686fce5033823045a31ff8d55faf4736814b9b8d5f5d914686aec0f0bd061daadec7defd2301c4cf25d75dc8f297c0239d028f0057e4867a4447850c900a26d28f4399f3f5a03e3022c82e0527694ddcdff5da9ed87e00032021e88bd35238fbcb48b0b34c48cd8a33e2cfb97a0df38fedbc5a03d862d41628ef8970367cd864becca0fad8d2c0c4c03074c2aeb8f03fa0454406f1146a1e20c1fe056fb83dfaaf39186072c96be0ce9bebfbf0c00218d4578d64320fe931aa34a0a12f5bdb3b1a9db032f7eb85e7e2c9f8f21fb512741621e5d7ce31cc3718b400b8aaf6cd061e87976d563296f312601936d5dc8ab6bf76ff56293f6084aff45cca8947eb123cc1608f26d6ae20771061c254b908f3728edc4215498ca0c45c9d1cbad76ccf6eb0f319239783e640d71cfdf64f817630ce7f3f8042dd7d5ad8f0fe4ace8e44194d39437570bb1723b874a403a0e7fba6b17653c90b521fdf13bb7a722cd387b7aadd9cf059fd95525e118c313637b7516cc27d3a776364b1d29df322b4959d71ceabf0d45704115b992dace77eb42c5d14caac434fa21c9f52db9ef7a07dcad2796640f853cc1842fc0283c7aad1fad8cfe485d09ef951038bb2849f856945d42afe97191fb02e9a6fa423876b86580b91bebe87621648906cddc3ae2336a13fdbaf3099809dac8ab731d6a3e4099e22e23ead5a6e9e1b6478671cd03022a401c503f410835da7407c9301da36c07d3edb632b9d466dc2b34589a96562e66049ebee24f5afd1c7b48b0cafe0b92dff052c7cc59c27d9db89d6c79183db3b5bd6d265a4a143bf5e"]) [ 570.022980][ T3695] usb 2-1: Using ep0 maxpacket: 8 [ 570.046021][ T32] audit: type=1804 audit(1608118515.974:432): pid=12499 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/140/bus" dev="sda1" ino=16129 res=1 errno=0 [ 570.070761][ T32] audit: type=1800 audit(1608118515.974:433): pid=12499 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16129 res=0 errno=0 [ 570.154411][ T3695] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 570.164964][ T3695] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 570.174210][ T3695] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=e0.8b [ 570.183540][ T3695] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.341705][ T32] audit: type=1804 audit(1608118516.044:434): pid=12499 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/140/bus" dev="sda1" ino=16129 res=1 errno=0 [ 570.442099][ T3695] usb 2-1: config 0 descriptor?? 11:35:16 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc088}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x3}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x16}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x8}]}}}]}, 0x50}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) 11:35:16 executing program 2: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002000)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006780)={0x2020, 0x0, 0x0}, 0x1c53) write$FUSE_INIT(r0, &(0x7f0000004340)={0x50, 0x0, r1}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000000000)="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", 0x2000, &(0x7f00000020c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000066c0)={0x90, 0x0, 0x0, {0x9, 0x0, 0x0, 0x9, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0xffffff12}}}, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x3) 11:35:16 executing program 5: getgroups(0x7, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0]) setregid(0xffffffffffffffff, r0) [ 570.715827][ T3695] usb 2-1: USB disconnect, device number 33 [ 570.828962][ T32] audit: type=1804 audit(1608118516.754:435): pid=12503 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/140/bus" dev="sda1" ino=16129 res=1 errno=0 [ 570.950234][ T32] audit: type=1804 audit(1608118516.814:436): pid=12517 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/140/bus" dev="sda1" ino=16129 res=1 errno=0 11:35:17 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mmap(&(0x7f0000008000/0x4000)=nil, 0x4000, 0x1000006, 0x400002172, 0xffffffffffffffff, 0x0) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000200)=0x2000000000000074, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000100)=0x6, 0x4) sendto$inet(r0, &(0x7f00000012c0)="11268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9281a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x4) 11:35:17 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x0) lseek(r1, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) write$P9_RLOPEN(r2, &(0x7f0000000000)={0x18, 0xd, 0x1, {{0x0, 0x1, 0x7}}}, 0x18) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) 11:35:17 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201070090c5d108f30c75938be00000000109021b000100000000"], 0x0) 11:35:17 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') getdents64(r0, 0x0, 0x0) 11:35:17 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc088}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x3}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x16}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x8}]}}}]}, 0x50}}, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) 11:35:17 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/schedstat\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x3e80}, 0x0) 11:35:18 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x11f0fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) r2 = openat$qat_adf_ctl(0xffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x795080, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r2, 0x40089413, &(0x7f0000000040)=0x1ff) lseek(r1, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r3 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r3, 0x0, 0x8000fffffffe) r4 = openat$vcsu(0xffffff9c, &(0x7f0000000080)='/dev/vcsu\x00', 0x80202, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380)='nl80211\x00') r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000104070002000000080003e0", @ANYRES32=r7, @ANYBLOB="0c009900000000000000000008009f00ffff0700080026006c090000"], 0x38}}, 0x0) sendmsg$NL80211_CMD_SET_KEY(r4, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r5, 0x712, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x2000c001}, 0x4008040) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) 11:35:18 executing program 3: openat$hwrng(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/hwrng\x00', 0x82801, 0x0) [ 572.323338][ T8850] usb 2-1: new high-speed USB device number 34 using dummy_hcd 11:35:18 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') getdents64(r0, 0x0, 0x0) 11:35:18 executing program 2: setrlimit(0x0, &(0x7f0000000000)={0x4, 0x7fff}) [ 572.579436][ T8850] usb 2-1: Using ep0 maxpacket: 8 11:35:18 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc088}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x3}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x16}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x8}]}}}]}, 0x50}}, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) [ 572.709933][ T8850] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 572.720290][ T8850] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 572.729672][ T8850] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=e0.8b [ 572.739020][ T8850] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.040485][ T8850] usb 2-1: config 0 descriptor?? 11:35:19 executing program 3: perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 573.294561][ T8850] usb 2-1: USB disconnect, device number 34 11:35:19 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') getdents64(r0, 0x0, 0x0) 11:35:19 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/schedstat\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) 11:35:19 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201070090c5d108f30c75938be00000000109021b000100000000"], 0x0) 11:35:19 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc088}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x3}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x16}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x8}]}}}]}, 0x50}}, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) 11:35:19 executing program 0: open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r1 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00'}, &(0x7f0000000140)=0x50) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) sendfile(r0, r1, 0x0, 0x8000fffffffe) r2 = openat$vcs(0xffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x8002, 0x0) r3 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendmmsg$inet(r3, &(0x7f0000000080)=[{{&(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10, 0x0}}, {{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0xf, 0x0}}], 0x2, 0x0) openat$mixer(0xffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x400, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendfile(r2, r3, 0x0, 0x800) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) 11:35:19 executing program 2: perf_event_open$cgroup(&(0x7f00000005c0)={0x8, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:35:19 executing program 3: rt_sigsuspend(&(0x7f0000000000)={[0x1]}, 0x8) 11:35:20 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') getdents64(r0, 0x0, 0x0) [ 574.253419][ T32] kauditd_printk_skb: 11 callbacks suppressed [ 574.253491][ T32] audit: type=1800 audit(1608118520.104:448): pid=12589 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16129 res=0 errno=0 [ 574.279508][ T32] audit: type=1804 audit(1608118520.124:449): pid=12589 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/143/bus" dev="sda1" ino=16129 res=1 errno=0 [ 574.305165][ T32] audit: type=1800 audit(1608118520.124:450): pid=12589 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16129 res=0 errno=0 11:35:20 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) 11:35:20 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000000006c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0102000000000000000000000000040004800900020002000000000000000900010073797a3000000000080003"], 0x1}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) [ 574.893745][ T7] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 574.972381][ T32] audit: type=1804 audit(1608118520.894:451): pid=12591 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/143/bus" dev="sda1" ino=16129 res=1 errno=0 [ 574.996362][ T32] audit: type=1804 audit(1608118520.914:452): pid=12592 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/143/bus" dev="sda1" ino=16129 res=1 errno=0 [ 575.022563][ T32] audit: type=1800 audit(1608118520.914:453): pid=12592 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16129 res=0 errno=0 [ 575.193973][ T7] usb 2-1: Using ep0 maxpacket: 8 11:35:21 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x40284504, &(0x7f0000003000)={'batadv_slave_0\x00'}) [ 575.433271][ T7] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 575.443860][ T7] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 575.453268][ T7] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=e0.8b [ 575.463690][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 11:35:21 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000000)='./bus\x00', 0x4050, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) [ 575.669163][ T7] usb 2-1: config 0 descriptor?? [ 575.675583][ T32] audit: type=1804 audit(1608118521.304:454): pid=12608 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir990269727/syzkaller.klLZbF/57/cgroup.controllers" dev="sda1" ino=16205 res=1 errno=0 [ 575.701251][ T32] audit: type=1804 audit(1608118521.414:455): pid=12610 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir990269727/syzkaller.klLZbF/57/cgroup.controllers" dev="sda1" ino=16205 res=1 errno=0 11:35:21 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) 11:35:21 executing program 3: r0 = socket$netlink(0x10, 0x3, 0xf) sendmsg$netlink(r0, &(0x7f0000007600)={&(0x7f0000000040)=@kern={0x10, 0x0, 0x0, 0x7206e1d5263b4d94}, 0xc, &(0x7f0000007540)=[{&(0x7f0000002ac0)={0xa8, 0x38, 0x1, 0x0, 0x0, "", [@generic="e94b1bd2c269522c014cfad2cde49093a1d61b674ddbe5415a9c3babdf7dcb5ec53f534c5331927857f23d395577c2d5ba090e292b9cabf6db12a554687cf9f0fb59b08d35d04016be5141a5b69233786a59b496dd336df5bd76e90cea128f18475937f2e415c1359c6ea38acf8d1bf38d21ee239d261d4e52", @typed={0x19, 0x0, 0x0, 0x0, @binary="74a7b6b80637b0f04a6f6091ff0916e249ef44013e"}]}, 0xa8}, {&(0x7f0000002b80)={0xd8, 0x0, 0x0, 0x0, 0x0, "", [@generic="8acccd35fbacf48a7a4397daaa838be24cad8ca4968edf8f6218d072347c2e601701b7fe77beb22249fc36d60c3a6086fcf98507675636a073ca5c8c193e60d36128b440993739b0cffba9351f712c1d5fb15799eed45ff18e36afa36d6a2a45b443c411572d7fe58fc862312e617fe0bca7cd57c365bbf6c873df555a958d3962255637312f24466d89cda563f8ad52af1873a3139858a48a71a9f2795acd6d012f420391a836e3f048b90193d9746285c53dda26aee387623f5aacffe4904f5019531a48"]}, 0xd8}, {&(0x7f0000004d80)={0x33c, 0x0, 0x0, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x16d, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@multicast1}, @generic="b11f5f39c103071a15fa22ab2c20211df9e3aa58182cbdba748e079ed9108bb897f8dc85c1ec96ab0aacc0e9387491613c269230b68e43f8cd9a0a74c8cadc1c4b7d23f1411d87c32e4f815f510a88b1d96ae82de252bc8e694b8237ea23115733615561071d4405eb7126fd57988207", @generic="026c87322dbd48065620a82576f25062f5565db4d590f46d9954a1eeb3e43ed972f3d2d01f4e1d86", @typed={0x4}, @typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="f3d8b4a2b08e2f2563cd31d6f67b3aa3a975d6abf7908e9cb881c9cca8f06fa91576570501fea9de04e81c361572c136d8ca5bebd9fa79da45bb5b84d85ba586f2c47173ad502f2f479b830f3e84c073612f2fcecbd4c1340880a73f4de3f06714bc6133cdf82b53ef92c5e733b7ecd8939875c58dfa9f49391b6b97fc4f6b24bd190978509c7e8d9cbed0c6cb5ddd24f7ec0aa50ba2132852df66e4c8b69e9917195b81473f19f8fe9f14dccdc63100ba3c4131e9"]}, @generic="9920d7b65eb9801df81605410e29db8b753be223e8d4591763a932e5ae43a2808b9576108d356e097262e1b49a2e41f6cc8af22891e01cbc49489d86a4358f093cbed8fa4345f5fc96ea9d07a6d3684b25810c44125f7558e3a724425a32639fb3282644e6ddd6261787c5fba5fc2d252670c939457d0487cba33270315f0e620d45daff379b504edb839ab17c4e45aea0d5cc62801ab7ffd3fc39ed079bb34fa36bc3656ff4b3751370854653d4a7057056bea4f1a2257f8660160339a28520713af570044a9524c6bba351543066baa87c8b45da12ed22a8b4ab4b57335fce6a37edafaf8403829063ffbefd", @nested={0xc1, 0x0, 0x0, 0x1, [@generic="3bf66caee7418efbddd787bf54dbf9b0a1b2fb601f50ea2b60683824684ada69c2cf78755ec2605ef37a1c36ae796bc776eb9ab4c87de22ef917091d960bdee914e15776484ced32179e83317eb1a0a6515c3529fca29160c6ae2884cf6f89bc6d27f5f1ef0ff29ccea19337ecb8818e3cf93bc5d6067a42faf2c22845d73dbe9f7a27670bb2cbc34f90495301f5726dca13cec60d273863c194d3c2dc16a33d6994d03886f757", @generic="22ca462ef85f071fde922f894714393b1beb4404af29"]}]}, 0x33c}, {&(0x7f00000050c0)={0x2c, 0x0, 0x0, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0x9, 0x0, 0x0, 0x0, @str='ext3\x00'}]}, 0x2c}, {&(0x7f0000005100)={0x30c, 0x0, 0x0, 0x0, 0x0, "", [@generic="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"]}, 0x30c}], 0x5}, 0x0) [ 575.931826][ T8850] usb 2-1: USB disconnect, device number 35 [ 576.114515][ T32] audit: type=1800 audit(1608118522.034:456): pid=12622 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16206 res=0 errno=0 [ 576.220341][ T32] audit: type=1804 audit(1608118522.094:457): pid=12622 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/144/bus" dev="sda1" ino=16206 res=1 errno=0 11:35:22 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201070090c5d108f30c75938be00000000109021b00010000000009"], 0x0) 11:35:22 executing program 2: perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf6e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 11:35:22 executing program 5: request_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='\x00', 0xfffffffffffffff8) 11:35:22 executing program 3: openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x200000, 0x0) select(0x40, &(0x7f0000000200)={0x9}, &(0x7f0000000240), &(0x7f0000000280)={0x2}, &(0x7f0000000300)) 11:35:22 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) 11:35:23 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r2, 0x0, 0xfffffffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) 11:35:23 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x80004519, 0x0) 11:35:23 executing program 2: io_setup(0x5, &(0x7f0000000040)=0x0) io_cancel(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 11:35:23 executing program 3: perf_event_open$cgroup(&(0x7f00000005c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x402}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:35:23 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) [ 577.433224][ T8491] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 577.673380][ T8491] usb 2-1: Using ep0 maxpacket: 8 [ 577.794201][ T8491] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 577.804669][ T8491] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 577.814155][ T8491] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=e0.8b [ 577.823471][ T8491] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 11:35:23 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/schedstat\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x400000, 0x3e80}, 0x0) [ 578.140851][ T8491] usb 2-1: config 0 descriptor?? 11:35:24 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) [ 578.392602][ T7] usb 2-1: USB disconnect, device number 36 [ 578.503070][ T8489] Bluetooth: hci3: command 0x0406 tx timeout 11:35:25 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201070090c5d108f30c75938be00000000109021b00010000000009"], 0x0) 11:35:25 executing program 2: r0 = perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) dup2(r4, r0) 11:35:25 executing program 3: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x8f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) open(&(0x7f0000000080)='./file0\x00', 0x78140, 0x0) 11:35:25 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x301250, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000000)=0x1) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x4, 0x20000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000300)='SMC_PNETID\x00') sendmsg$SMC_PNETID_ADD(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000da0000000000000200000009000100a3"], 0x20}}, 0x0) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r5, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040c10}, 0x40) r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xd53, 0x30000) sendmsg$SMC_PNETID_DEL(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x74, r5, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'lo\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0xc96831baf1ade82b}, 0x20004000) socketpair(0x29, 0x6, 0x8, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) bind$l2tp(r7, &(0x7f00000004c0)={0x2, 0x0, @multicast2, 0x2}, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) 11:35:25 executing program 5: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000000006c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0102000000000000000000000000040004800900020002000000000000000900010073797a300000000008000340000000011400000011001b"], 0x1}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) io_submit(0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x100000300) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f0000281000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, 0x0, 0x14) 11:35:25 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) [ 579.317699][ T32] kauditd_printk_skb: 10 callbacks suppressed [ 579.317773][ T32] audit: type=1800 audit(1608118525.244:468): pid=12677 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16224 res=0 errno=0 [ 579.566272][ T32] audit: type=1804 audit(1608118525.494:469): pid=12687 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir282438823/syzkaller.PgYfm9/36/cgroup.controllers" dev="sda1" ino=16229 res=1 errno=0 [ 579.584343][T12681] mmap: syz-executor.5 (12681) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. 11:35:25 executing program 3: sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x7558e2fcf713760d) 11:35:25 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) clock_gettime(0x0, &(0x7f0000003080)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000003000)=[{{&(0x7f0000000000)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000080)=""/2, 0x2}, {&(0x7f0000000100)=""/3, 0x3}, {&(0x7f0000000140)=""/3, 0x3}, {&(0x7f0000000180)=""/147, 0x93}, {&(0x7f0000000280)=""/10, 0xa}, {&(0x7f00000002c0)=""/253, 0xfd}, {&(0x7f00000003c0)=""/22, 0x16}], 0x7, &(0x7f0000000440)=""/71, 0x47}, 0x80000000}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000004c0)=""/90, 0x5a}, {&(0x7f0000000540)=""/60, 0x3c}, {&(0x7f0000000580)=""/220, 0xdc}, {&(0x7f0000000680)=""/8, 0x8}], 0x4, &(0x7f0000000740)=""/238, 0xee}, 0x7}, {{&(0x7f0000000840)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f0000002c80)=[{&(0x7f00000008c0)=""/123, 0x7b}, {&(0x7f0000000940)=""/33, 0x21}, {&(0x7f0000000980)=""/17, 0x11}, {&(0x7f00000009c0)=""/77, 0x4d}, {&(0x7f0000000a40)=""/231, 0xe7}, {&(0x7f0000000b40)=""/56, 0x38}, {&(0x7f0000000b80)=""/108, 0x6c}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/78, 0x4e}], 0xa}, 0xffffffff}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000002d00)=""/80, 0x50}, {&(0x7f0000002d80)=""/9, 0x9}, {&(0x7f0000002dc0)=""/38, 0x26}, {&(0x7f0000002e00)=""/194, 0xc2}], 0x4, &(0x7f0000002f40)=""/152, 0x98}, 0x6}], 0x4, 0x0, &(0x7f00000030c0)={r2, r3+60000000}) lseek(r1, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r4 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r4, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) 11:35:25 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) 11:35:25 executing program 2: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000380)='./bus\x00') r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17ffffe, 0x12, r1, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0) 11:35:26 executing program 5: perf_event_open$cgroup(&(0x7f00000005c0)={0x2, 0x70, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 580.103767][ T8489] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 580.289181][ T32] audit: type=1800 audit(1608118526.214:470): pid=12697 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16238 res=0 errno=0 11:35:26 executing program 3: r0 = socket(0x10, 0x80002, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000000000000005006d20002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) recvfrom$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$peekuser(0x3, 0x0, 0x0) [ 580.363237][ T8489] usb 2-1: Using ep0 maxpacket: 8 [ 580.419328][ T32] audit: type=1804 audit(1608118526.244:471): pid=12697 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/147/bus" dev="sda1" ino=16238 res=1 errno=0 [ 580.445452][ T32] audit: type=1800 audit(1608118526.244:472): pid=12697 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16238 res=0 errno=0 [ 580.507643][ T8489] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 580.518046][ T8489] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 580.529529][ T8489] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=e0.8b [ 580.540464][ T8489] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.748066][ T8489] usb 2-1: config 0 descriptor?? [ 581.008242][ T8489] usb 2-1: USB disconnect, device number 37 [ 581.073741][ T32] audit: type=1804 audit(1608118526.994:473): pid=12700 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/147/bus" dev="sda1" ino=16238 res=1 errno=0 [ 581.097510][ T32] audit: type=1804 audit(1608118527.004:474): pid=12703 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/147/bus" dev="sda1" ino=16238 res=1 errno=0 [ 581.121764][ T32] audit: type=1800 audit(1608118527.004:475): pid=12703 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16238 res=0 errno=0 11:35:27 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201070090c5d108f30c75938be00000000109021b00010000000009"], 0x0) 11:35:27 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) 11:35:27 executing program 5: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) clone(0x20085100, 0x0, 0x0, 0x0, 0x0) 11:35:27 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) socket$caif_seqpacket(0x25, 0x5, 0x5) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r2, 0xc004ae02, &(0x7f0000000080)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) 11:35:27 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000d00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$FIONCLEX(r0, 0x5450) [ 581.997309][ T32] audit: type=1800 audit(1608118527.924:476): pid=12723 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16238 res=0 errno=0 [ 582.150617][ T32] audit: type=1804 audit(1608118527.964:477): pid=12723 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/148/bus" dev="sda1" ino=16238 res=1 errno=0 11:35:28 executing program 3: r0 = socket(0x10, 0x80002, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000000000000005006d20002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) recvfrom$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$peekuser(0x3, 0x0, 0x0) 11:35:28 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) 11:35:28 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000001580)={0x2020}, 0x2020) [ 582.653311][ T8491] usb 2-1: new high-speed USB device number 38 using dummy_hcd 11:35:28 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f0000002400)=[{&(0x7f00000010c0)="ea654709c6aaa0f2ff660d6951ffb42dd1c190aa8fb97a02d3250ae40325dc959b4a1dcd5927f118905ebcbd06ee8f1a2c8c419a0e1d727e43d6472a7c468b4b42ee35b1876a95ac0d5166eb30ff5039839dd5846043260ae0a64132a926510a43935d716b", 0x65}, {&(0x7f0000001140)="7bf56b2baf19e06509756f49a1f328e03f3bf548b9b4301226d47e7a27e076073c896c4ba48ea54c11a2be6a4e8221df66d3ea1a60b500574b60439d297b01999bdec379e6ded0bf05e01ca3743f5dbcd2c93bcad82e2007b3b9c3c65f413cce829ddd6eadfe32aa917d822bf3c790ca22af876f2b6b74d68aa515c0cb5cdbd73f53813bcde3f136483dc240ada60529dc5e532c31c4102fe251d4cefe5234eb88a44af483a0afb4cc30", 0xaa}, {&(0x7f0000001200)="b3922f62683bef027ac615d54d2ee27f940e217a069c9091ee0c66e079614d834af194c3427732f01eba0845590031942ead7557b35af38573bc4eb7e86ff22850cbdc1d51018108775fe5c494", 0x4d}, {&(0x7f0000001280)="b42e2984ffa8ceafdba53f89eff89c4c7a07d0fed7a179f18364661758fffe67a347cae4749394aa1b3757bc85d5cc2aa8edaf8e5d71d85e900c2f5c922c07dd8c8b6d5c06dd440710fdae45265950808b767cc6f5e4ee61c1f18f2fd29390eaafe5b77cf46a5a1f329af6cb066b82c174b9326acf80fd0020d86c3ee44b5d6192d39db954159cd25602a3648b78e7e0ab0a3e441bcf549f9e92077c4b443bc78320ea46ac6bdf2ec5b4f71fedde7c2f6260f7ef4725075c908d7bc5f563bd873dc7e285d30465bcb6aea712b044a258d035763ae09071152c7bbf6093119a1ddc6200ee", 0xe4}, {&(0x7f0000001380)="48c4c19ecb099dc3c8d2990315e76c81ec85d9a7b3fef1359cc942ca422aba5381bda430a6543ed36a5fb6014f8ee4acf48b704189a7bc52c33d92982eba94a767819e91f359f20e1cd9228aa12b9f10db35677a45f2375d37bf55fb00f548a1d7aeca90cc32", 0x66}, {&(0x7f0000001400)="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", 0xd5a}], 0x6) [ 582.893140][ T8491] usb 2-1: Using ep0 maxpacket: 8 [ 583.044777][ T8491] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 583.055295][ T8491] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 583.064694][ T8491] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=e0.8b [ 583.075758][ T8491] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 11:35:29 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) ftruncate(r3, 0x8200) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f) ioctl$USBDEVFS_DISCSIGNAL(r3, 0x8008550e, &(0x7f0000000080)={0x10000, &(0x7f0000000040)="1c7507f580bb99d0b788ab904efe2f5b46cfff43a14506ff"}) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000), 0x4) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r2, 0xf502, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) write$binfmt_elf64(r1, &(0x7f0000000740)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x3, 0x0, 0x48, 0x1, 0x3, 0x3, 0x400, 0x101, 0x40, 0x367, 0x40, 0x7, 0x38, 0x2, 0x3f, 0x81, 0x8}, [{0x7, 0x9, 0x8, 0x8001, 0x8, 0xfffffffffffffff7, 0x8f, 0x80000000}, {0x0, 0x20, 0xfff, 0x2, 0x6272, 0x8, 0xb7880000000, 0xfffffffffffff9e0}], "d1393b51f41fe071f3bbf9722c1b20450ca17453506f476127d31a1d7fbca3de3fd291b5de9dd6d69700abce498b6a", [[], [], [], []]}, 0x4df) [ 583.262000][ T8491] usb 2-1: config 0 descriptor?? 11:35:29 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc088}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x3}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x16}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x8}]}}}]}, 0x50}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) 11:35:29 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x40004580, 0x0) [ 583.510705][ T8491] usb 2-1: USB disconnect, device number 38 11:35:30 executing program 2: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000180)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f00000001c0)=0x4) 11:35:30 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc088}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x3}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x16}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x8}]}}}]}, 0x50}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) 11:35:30 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000140)=""/58, 0x3a) 11:35:30 executing program 1: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000180)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f00000001c0)) 11:35:30 executing program 2: rt_sigpending(&(0x7f0000000100), 0x8) 11:35:31 executing program 3: r0 = socket(0x10, 0x80002, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000000000000005006d20002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) recvfrom$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$peekuser(0x3, 0x0, 0x0) 11:35:31 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc088}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x3}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x16}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x8}]}}}]}, 0x50}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) 11:35:31 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x5452, &(0x7f00000015c0)={@private1, @private1, @loopback}) 11:35:31 executing program 0: r0 = open(&(0x7f0000000140)='./bus\x00', 0x1971fd, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) r3 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendmmsg$inet(r3, &(0x7f0000000080)=[{{&(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10, 0x0}}, {{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0xf, 0x0}}], 0x2, 0x0) r4 = syz_open_dev$evdev(&(0x7f000000e7c0)='/dev/input/event#\x00', 0x1, 0x2000) r5 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendmmsg$inet(r5, &(0x7f0000000080)=[{{&(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10, 0x0}}, {{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0xf, 0x0}}], 0x2, 0x0) sendmmsg$unix(r1, &(0x7f000000eb40)=[{&(0x7f0000000180)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f00000017c0)=[{&(0x7f00000000c0)="fa0067e328f0ce14473d44b540633654d17f42c3a7954619e74a72ef4946fea8a1509cba9ebfb507df5ef7ddd40ea7", 0x2f}, {&(0x7f0000000280)="38146644e9e32443dd4bc9ba239db13a0a750018daf9b7581059b4403617fb8ee7b547fbd82ac5c00341a79f29cd0f57e17307c71ada6e65e383bbb5d044d0f63c257446243c45aff90cdc05c8a3f4088372fe99ae89eee031c43977877238ba509f8e7095c9f22862975c2f81371e872b3a5ef7743a73de85b7dd80fb0d03e809554c2bf1017cc57588e10c8b66e0f00762a403cb034fe8082cf6abf94fa26484be68b0e6e2945e728cc69e379bd81718258122337cf6af360b7aa27914b88f504774d5a785bc227cd17e4949731db67ebaef0f6fb756c32e1410ee1cf89c76d40319fb", 0xe4}, {&(0x7f0000000380)="786ddfe404de79f278acd3076c4cdc786b5c1daa21495ff68309097a53eeb882ec0b01be9bbf4b077f8f60fe7b1403a30febbcf44147c13ecf0695fcc0d3156894e72e046e7abcbc6e364a93f958019a7d90599f7a87aa691294c972e9af0ed7b63fc0d29304c0bf706c2d9ba1c4f8e824090c08d2eb2fce191662a5ea42247fdace5b84e8f4dbfa6b8748b8ab6e64ce5c770db9ce419fb2ef890d488cb42d8aa3b0bef22e751aed75dcc44fbf580d22c1d216fd345cfbad4217db7cc28388a72e28dbbeac8a972579fb846a37fa724c4a7158f0eb1093f23e824b038c996d391abbeecc6ffa2c8726578c0663628c7dd8d513599b6fa7", 0xf7}, {&(0x7f0000000480)="2fcd176ad548ffd53d1e3b1c67da14140d05d021c09b40fe35494279a302e5fbb6ea0e5a0692c84c2fdf352e48613fc783693010ce930e6555404d21c11c8ff4f17db30009e082057f475d7041c2a5b32f86cad41b52ac4a27923bc24b3cfe32dedfd913404c0d6dd99f9d2329fb06cd338828f08e6cce9414cf79fce1a4f885d2728584e93bc56fd3c62b6f9c6ad88e177a80e4fa7c8f34829cbbfff069e221cf4391d53425d29e1eace29c50f6936290d5626623926e", 0xb7}, {&(0x7f0000000540)="c27345112a9a500b73fb9dbc1cceae1bc6d8500331b415742b4b7268d8f26253461fc351761889f5ff00ed9bafe1ce8772222e1a1d78e14277c60d4cbfd2986fc87cfe15917ca3b7f865df52f360b720e4015097164f5b32981ababd512ccce9188abfcb5fd37cbeecb3b51f0dccc4d481dd52ba", 0x74}, {&(0x7f00000005c0)="d91d8b50b6c8d3c6d25849e7d7b1873b5911b5ccf10fe0e39e89c13f789b4ae301ec6b57cc0e96156e64550db896a9cc2abf04cc93c08b2e2c71b5b4c4e9d13a4b2cb58baba92a17fae9fd19ac050f488777e0737a78d052af8fc504603358844e878928f9268264140eedae6c716e8ad74e954c8e64be39f11778bb5e", 0x7d}, {&(0x7f0000000640)="c99b9270b1b52b3d99348d06638b5dd57984713dd9d22ff9ff788332b67d5736f1d06ce4c2c628d78007f5a66a1a935a00b74fca4c3633774a47211a2fd9bed1346364cf4912bd9a9cc911d51ea32bc16df7a451b1fd7dc4c7e4e36a74f255cb630f0587a124095dec7ddfaf92aef1cc1eb620c2e8e62dea7874afb038c6e43eb4b85e00ff9165bcb0e414d0903c660e09728bc46b71b6a036cd85d10e2f3d8e9fbb9d32a4c723397f0d30cf2c2fca18fa6cc2b4", 0xb4}, {&(0x7f0000000740)="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", 0x1000}, {&(0x7f0000001740)="ef20f2b9cbaa5e4ec2d6ed9d0810805b31fdbf2804f71d91b4a509098ce32c8d53bc526e7e54b350b522bcc70780f18b2ee63d744fd81ee0fe41a90bb46d4fe197a36472eeb95cabedc23b387a4edcc51ef364a6b98c99f61d957c6d1ce4e7b3f89a653ff79e31", 0x67}], 0x9, &(0x7f0000005980)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r1]}}, @cred={{0x18, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x18, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee01}}}], 0x70, 0x4008084}, {&(0x7f0000005a00)=@file={0x1, './bus\x00'}, 0x6e, &(0x7f0000005b80)=[{&(0x7f0000005a80)="76adcd5d712d06ec1e3a5edb4bab457c08831efc2711d94e23e517875191cd656f63681142029e22cb0cb8199a921fd04930f0643bbb5db727d5dee19e9cabac14b32e4468f34617648f22a3499dc1d601bb1f2f871ba2108888d3faec1f1191be333e420fed176200a922d4cf6f33890a7c8c5e654bf905b35d644a687a2e4cbdf087bbec091d4411b1130c90b6879bce56ab84f45ed17ae7c6006078ea1e7ac32aa341cf60658167fb174686a6dd5e620ac5011821905300ab05649b4c9116bf963d6f810b704563dd0eab672d678bf4aeffb59d973785ac31a5260b450f705943802f8d6ed692737b4f9af80e81", 0xef}], 0x1, &(0x7f0000006000)=[@cred={{0x18, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x1c, 0x1, 0x1, [r1, r1, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x18, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0xb8}, {&(0x7f00000060c0)=@file={0x1, './bus\x00'}, 0x6e, &(0x7f0000006480)=[{&(0x7f0000006140)="9f7935957ec0643dbffc59eafd29b800b69ba845a820a9346172f6759cbbb7c3d82f77ee12e4020c759e56f83ddcc5e32b36c132714dbf32abb3263df7645eb1424d73597f523bb93ed82667f3e36218b40066aa76cfa8ba6d56b240aeac3971534db7a3da737d68baddb61a894e782f8721e94959d127c4861ca86562407a7205c2", 0x82}, {&(0x7f0000006200)="1f176097659e78879c2448e9deff06a40b783ce2546215d39f50f89d9c002d4f845863821577681b6cc4ae360d75fa839777af9c325803a96ed8a9239a480b5dcb79a72e47b087bf0d30dc9b0cd9fa490574f421f60298e3236599a9674e32be", 0x60}, {&(0x7f0000006280)="29d31a05cc84604cf1a43f1844f71b9544f2d8f3b97c12a5a014a233b382e1a8ff48973b09c4489ad094398b470d3381ad055f8b987771a56d318502c0d93a6bc72b52e4b6750758e39c317a66ad5dea99af2787978d8bcb0cd3cfc6d90995b9800d43654810cebf361774e02421a74b058de3967ea7e79c1bcfa7000ab90f78bcd7053a87b062a3a4cfb0bedd4b8026ce231e6887e16f4d6d546719a421b2bea3e3", 0xa2}, {&(0x7f0000006340)}, {&(0x7f0000006380)="0c129235f34cf43071a6d90d7faca88ce58e75a8c64298abefc64c72bde11bd7e08b33e2ba2c3eed899765f551b8256f009c45a9f82ed61b778967108e6aea238aeb5c50429b0c8936a219ce742894d55840c044a875dc57111eda10f3e662ffd60aedcbfd0da15678ac46cee116d7d478341f576b45a529b407982672bbf5950a406e6b9a17cc978fa4f10e955fbcf91c7a9561d396bd3b605a8b06ed17166dcdfb81f76432e311edb9011e84db65943ce2ea7322db7b7e32806e04a2b918380f2afa1b67d5480a8f339625d03493", 0xcf}], 0x5, &(0x7f00000066c0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r1, r1, r1, r2, r0]}}, @cred={{0x18}}, @rights={{0x20, 0x1, 0x1, [r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [r2, r0, 0xffffffffffffffff]}}], 0x78, 0x20040000}, {&(0x7f0000006740)=@abs={0x0, 0x0, 0x3f}, 0x6e, &(0x7f0000006900)=[{&(0x7f00000067c0)="fef29728b0c07cdfdc60add414800bb29b4e43826b48775bb800e47206118a9e3fcd3f5744bb7749c4a3b41871e5626a26278565ee62188109b53e4edcc23c29a09df4da335ca474463eac286700bf6729697617bc8481931745947799cd903b82b6d2b612d8ec230c2dfc0745e0b1a95969bb8fed57dd65cbad8cbfe3df0ebdf31e346f5b19aa8939782a373a1d88470ec9407231af30cafef53c5fd1491239f095ee1d3e1fa8508862eac823545fae205ab83c26cd197a8a7f099044550d3e332d286bed8b6de84b1cb2b139f3b733f8669ea1175d08557972a45f", 0xdc}, {&(0x7f00000068c0)}], 0x2, &(0x7f0000006a00)=[@rights={{0x2c, 0x1, 0x1, [r2, r1, r1, r0, r1, r0, r0, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @cred={{0x18, 0x1, 0x2, {0x0, 0xee00, 0xffffffffffffffff}}}, @cred={{0x18, 0x1, 0x2, {0x0, 0xee00, 0xee00}}}], 0x7c}, {&(0x7f0000006a80)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000007c80)=[{&(0x7f0000006b00)="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", 0x1000}, {&(0x7f0000007b00)="06048c2f4882b51051e645d370c65677f57965a3b1ad0447c58dc47943bdf1b7b50f13a461357dd80449b8299f9f11f760b3ea487940dea37b0f3e7c9cc8a19403ba87e8eb726b27f1b6bc61ad1388e1845b14e48c7b3aadda16ee4563c7adcc", 0x60}, {&(0x7f0000007b80)="f8c3ac231892355aece365102b92ff589d1b382ad8dc4fab758bab0c6b578d32fe2d2ad22a4ee8e4ee60e9c8726fdff86c212b9e49fedc6a9275902a55a6c316e691a01a73cf8eab3242fa13eefe2aacab0e91c252e51e52612339ec68062f5ef1685e4602c798163921179f39f08a2fdf7e36da6ee9e5a103dbd04cb11bf59f2b4e6dd75c47e0da40dd32c60e7062ba3f64a98e2aefe28d135703fe903028375f9dda73672f938d746176e982d07037011524adf2cde919c8f15a5956d73279484a2fc09f10", 0xc6}], 0x3, 0x0, 0x0, 0x8040}, {&(0x7f0000007cc0)=@file={0x1, './bus\x00'}, 0x6e, &(0x7f0000007f00)=[{&(0x7f0000007d40)="0f54f558a7dfe6009e299ddaf88dc008c96b260e3b9e5c9c908ee3498316927b8f0d09201a0303d3a3802da3c7d7c0cc2a720fc8769072b2479ff905adce32f530e2cc8c3dec", 0x46}, {&(0x7f0000007dc0)="9b191ea6c702c05a5c01b4b31f93281ee0ca987c9903b07b11d90a066b8fa620ce7fc5320652a3fd5a70740ed358eab9c374f64155fd34342cd59e15834e58172d1f64815cf56c452b460f5b940ac433e57bae980d056ce1c6e590394e52c43b8ed5a748fe76c37163d6949898c077ea308d062c3d4a0c4672e6382259ebd263281998c6d75c11c0d6a0b885dc07673b8a5b22fb8787cb23b69ccd9e594a1283376bd1a60d8c611bbe4867b094153ad27c13fc65b242b8afe3c3cc943f948fa71471bdd19c68c535d848ecce3e3357bb3bd1e8665993c494f8b3a9c44bf042e163fea9", 0xe3}, {&(0x7f0000007ec0)="0be032beb72562c891981d", 0xb}], 0x3, 0x0, 0x0, 0x4000}, {&(0x7f0000007f40)=@file={0x1, '.\x00'}, 0x6e, &(0x7f0000008000)=[{&(0x7f0000007fc0)="6ae06720b26037e1bf3acabd47", 0xd}], 0x1, &(0x7f000000e800)=[@rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [r1, r0, r0, 0xffffffffffffffff, 0xffffffffffffffff, r2]}}, @rights={{0x28, 0x1, 0x1, [r0, r1, 0xffffffffffffffff, r2, r2, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18, 0x1, 0x2, {0xffffffffffffffff, 0xee01}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, r0]}}, @rights={{0x24, 0x1, 0x1, [r0, 0xffffffffffffffff, r2, r3, r0, r2]}}, @rights={{0xc}}, @rights={{0x18, 0x1, 0x1, [r4, 0xffffffffffffffff, r5]}}], 0xe0, 0x4000}, {&(0x7f000000e900)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f000000eb00)=[{&(0x7f000000e980)="6e50194b3eacd86a46aac206f45f4639236ce36cafe6c19d18fb941a186dff7ec2fdff618f504f34cd1613eb1fbabe49f50ac60a0c638b7a29bc780c02ca67d85b377cc69a4059d970c415905ec545acd5c970f55c155caaaee0766870c6756af0005e023fae7ace698ed78ac0ebaa2bf0ecfd0c6de3e58e304559e4266efbdfc3cfc592cd61c49119e04195ca093bf061871def1c44a668a7790c95fdab40b681499241bc5bfabed134dcdd713ca5ec7f6d876b3854d4c64ac329092419024804da10e5c9ce4f9d0c442e1206252b1bb232c3f7b0f940817f28fccc7ac246e385525c", 0xe3}, {&(0x7f000000ea80)="05750117b8c010d36cf5a9b03b62293521079dde7285469c17ca289b04b8cfee190e65832fed91760d5da3bb05669b1ad3cca9f80c7ebcd6088708302abbdbcdf3fe6b5748cc668a60c87c1345cab7a4f1f31a9124dbc4ec1a1330779b2aeb8375bebfd4380a", 0x66}], 0x2, 0x0, 0x0, 0x8000000}], 0x8, 0x40) r6 = open_tree(r1, &(0x7f0000000000)='./bus\x00', 0x49000) ioctl$KVM_PPC_GET_SMMU_INFO(r6, 0x8250aea6, &(0x7f0000000040)=""/91) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, &(0x7f0000000100)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) 11:35:31 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0x5411, 0x0) 11:35:31 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x2}, 0x1c) listen(r1, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) r2 = accept4$inet6(r1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(r2, 0x6, 0x0, 0x0, 0x0) [ 585.776123][ T32] kauditd_printk_skb: 11 callbacks suppressed [ 585.776189][ T32] audit: type=1804 audit(1608118531.704:489): pid=12783 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/150/bus" dev="sda1" ino=16253 res=1 errno=0 [ 585.806725][ T32] audit: type=1800 audit(1608118531.704:490): pid=12783 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16253 res=0 errno=0 [ 586.186726][ T32] audit: type=1804 audit(1608118531.834:491): pid=12783 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/150/bus" dev="sda1" ino=16253 res=1 errno=0 [ 586.211340][ T32] audit: type=1800 audit(1608118531.834:492): pid=12783 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16253 res=0 errno=0 11:35:32 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f0000002400)=[{&(0x7f00000010c0)="ea654709c6aaa0f2ff660d6951ffb42dd1c190aa8fb97a02d3250ae40325dc959b4a1dcd5927f118905ebcbd06ee8f1a2c8c419a0e1d727e43d6472a7c468b4b42ee35b1876a95ac0d5166eb30ff5039839dd5846043260ae0a64132a926510a43935d716b", 0x65}, {&(0x7f0000001140)="7bf56b2baf19e06509756f49a1f328e03f3bf548b9b4301226d47e7a27e076073c896c4ba48ea54c11a2be6a4e8221df66d3ea1a60b500574b60439d297b01999bdec379e6ded0bf05e01ca3743f5dbcd2c93bcad82e2007b3b9c3c65f413cce829ddd6eadfe32aa917d822bf3c790ca22af876f2b6b74d68aa515c0cb5cdbd73f53813bcde3f136483dc240ada60529dc5e532c31c4102fe251d4cefe5234eb88a44af483a0afb4cc30", 0xaa}, {&(0x7f0000001200)="b3922f62683bef027ac615d54d2ee27f940e217a069c9091ee0c66e079614d834af194c3427732f01eba0845590031942ead7557b35af38573bc4eb7e86ff22850cbdc1d51018108775fe5c494", 0x4d}, {&(0x7f0000001280)="b42e2984ffa8ceafdba53f89eff89c4c7a07d0fed7a179f18364661758fffe67a347cae4749394aa1b3757bc85d5cc2aa8edaf8e5d71d85e900c2f5c922c07dd8c8b6d5c06dd440710fdae45265950808b767cc6f5e4ee61c1f18f2fd29390eaafe5b77cf46a5a1f329af6cb066b82c174b9326acf80fd0020d86c3ee44b5d6192d39db954159cd25602a3648b78e7e0ab0a3e441bcf549f9e92077c4b443bc78320ea46ac6bdf2ec5b4f71fedde7c2f6260f7ef4725075c908d7bc5f563bd873dc7e285d30465bcb6aea712b044a258d035763ae09071152c7bbf6093119a1ddc6200ee", 0xe4}, {&(0x7f0000001380)="48c4c19ecb099dc3c8d2990315e76c81ec85d9a7b3fef1359cc942ca422aba5381bda430a6543ed36a5fb6014f8ee4acf48b704189a7bc52c33d92982eba94a767819e91f359f20e1cd9228aa12b9f10db35677a45f2375d37bf55fb00f548a1d7aeca90cc32", 0x66}, {&(0x7f0000001400)="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", 0xd5b}], 0x6) [ 586.303937][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. 11:35:32 executing program 5: getitimer(0x1, &(0x7f0000000280)) [ 586.378623][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. 11:35:32 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x3}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x16}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x8}]}}}]}, 0x50}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) 11:35:32 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, 0x0) 11:35:32 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f512, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mmap(&(0x7f0000008000/0x4000)=nil, 0x4000, 0x1000006, 0x400002172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) futex(0x0, 0x85, 0x0, 0x0, &(0x7f0000000000), 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000200), 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000100)=0x6, 0x4) sendto$inet(r0, &(0x7f00000012c0)="11268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9281a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) read$char_raw(0xffffffffffffffff, &(0x7f0000001400)={""/24289}, 0x6000) 11:35:32 executing program 1: pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$FUSE_INTERRUPT(r0, &(0x7f0000000000)={0x10}, 0xffffffac) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000080)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xee01}}}}, 0xa0) [ 586.927683][ T32] audit: type=1800 audit(1608118532.854:493): pid=12805 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16252 res=0 errno=0 [ 587.071734][ T32] audit: type=1804 audit(1608118532.894:494): pid=12805 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/151/bus" dev="sda1" ino=16252 res=1 errno=0 [ 587.098000][ T32] audit: type=1800 audit(1608118532.894:495): pid=12805 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16252 res=0 errno=0 11:35:33 executing program 3: r0 = socket(0x10, 0x80002, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000000000000005006d20002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) recvfrom$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$peekuser(0x3, 0x0, 0x0) 11:35:33 executing program 5: pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$FUSE_DIRENTPLUS(r0, 0x0, 0x0) 11:35:33 executing program 2: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$FUSE_INTERRUPT(r0, &(0x7f0000000000)={0x10}, 0xffffffac) write$cgroup_netprio_ifpriomap(r0, 0x0, 0xd) 11:35:33 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x3}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x16}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x8}]}}}]}, 0x50}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) [ 587.723496][ T32] audit: type=1804 audit(1608118533.644:496): pid=12806 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/151/bus" dev="sda1" ino=16252 res=1 errno=0 [ 587.892156][ T32] audit: type=1804 audit(1608118533.704:497): pid=12809 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/151/bus" dev="sda1" ino=16252 res=1 errno=0 [ 587.918414][ T32] audit: type=1800 audit(1608118533.714:498): pid=12809 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16252 res=0 errno=0 11:35:33 executing program 1: pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f0000000000)={0x10}, 0xffffffac) pipe2(&(0x7f0000000280), 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f0000000180)) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000080)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x6, 0x50, 0x4, 0x0, {0x3, 0x0, 0x0, 0x7ff, 0xfffffffffffffffa, 0x0, 0xbe, 0x0, 0x6, 0x0, 0x0, 0xee01, 0xffffffffffffffff}}}}, 0xa0) read$FUSE(r0, &(0x7f00000002c0)={0x2020}, 0x2020) 11:35:34 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x2, 0x200) r4 = socket$nl_audit(0x10, 0x3, 0x9) r5 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendmmsg$inet(r5, &(0x7f0000000080)=[{{&(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10, 0x0}}, {{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0xf, 0x0}}], 0x2, 0x0) r6 = syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000080)='./bus\x00', 0x7, 0x4, &(0x7f0000000280)=[{&(0x7f0000000100)="99df73bf7d63be4a0e1c699b93a4f8a9ec2c347e6e97007a3c1940ee005b67675f3f01991e43025b1044daaa9069b603a4a285fa687f414da399d69f578a1833a7021fd76f9224bf76ecacb216f1202ea065a2dc7d32d287383075f308b736aa0b8361ea602094e188174c48730428473ef583a6ed485e3e84aa4f0c197fc6dbd6ade51c279fc36b28c329f08a0fff1f620ff26c5c4ec12e3229679b", 0x9c, 0x101}, {&(0x7f0000000740)="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", 0x1000, 0x72}, {&(0x7f0000001740)="482c22a9a144b36b9fd63e4829509f28d8c0ec9515ffb36dd38370649abd020686b6e0d48fe5d394e8bbfc1c6148d8511eb8e033767b60da552c8b6e6538117214c9885883c3901c8242f4ae897fe9cef75631bc4da3bb2ba04575da7bacc659469741dc583ddfb2fffbe2c1f6eda7eb2b40b0d8073b00403d2bf98c42d045de823bb0ba0917d560f311d01b8d9fc43ace697817a4cccc48c8facef0733fd462f79ff86a6399ec11428a096e3d0f0445301195d794d90fa85524f1ee723b2fb7a86deeaf5e989217aa1a9e2e7b08ccc8a9ef54f80a1d2dc181c152e4943906510f59cbfea393a4ee77ade34f29c269ff7e9a26cf045ac207d02074217cd7cca14bcf0a6e6b9a623a4e208abdac4a2cc21b36d5a874937af2a3a5556110346044272e73bd88bb0bc34537e8aa8dd8e9ffaacaff01e6bd90aebc855df96b8014120cde518d0fd2e7017f1fb251fef6c7023a045b6dc6afe81c4e55edcabcac0347378250986634606cc9315834a8398e95f22280022500af9c7bb7ab3818dfafa24d33dde5d148ffc97c95144c14b3cea174938490ac56b4b13b66129554c72a57c5fea72b911902bed8571a74b62ae19e1b13a2b7265e3d321ef1b104db2a2ed4a01c7b773a53b0b139303cdff6193bc1488c78bcf53cdf975db3bb0572a227f8155f911ccc3f05af380e3503810351a719b9e5d969f2562b364af772f87c2de25db5e19950896532efe5ab77bbacbc0c726aacc4124177499de5ce372a9695bc18b6bf5f00ff32e56dde00a4c21d0456ee495789df6069ab82172f8ee771c59c3676b85708372ae58455ee83c96f04b3ead4f8d1c0b8d72a6a6ca5d4295ed40f2e5cadfdb17a1b87f38c9d171b5cd4dc082318669719a233f03995f2f1aa40144bd2f710e7f994985877d30d81f031ce5a2e665361322255f607047a852626e26afceb07533c7237f330149b153e9622aef6baf5ce4c44a3034d3195207d8327365ceffbf506103c2e01b3a7f18215591451f583b33a94eedd33bd7fb03cf8befcf84681d4cb9dd2a82ece48a537ddf5618d7636e99887cda906ffa8425665494612244872560498b53fb93482fcc15df3f28c75736031bb57e1d41eb2ea636579611a0a5da55822633b144a40f65e3eab6cafc97d2ec1b3a6c0c295dec86e14afb947fb1c844ee15865675851507043365c45bdb1cb3ffa06f9766a5b96114f83f542646b22f3254af42a511f5521ef46040521902c6dbe2d48eead4c7ca0fc0a7ce1a021a3dde86ad8e422cadba9eadf4ad3ddcd78a7501db5713f8e95033dacacbc75264833a175a85903704d2860e7c669b1b73c59c18ce1fad1471885cda5ff8f20292eb90ed45c82daceaf12754ab75e15fba4a38bf4d93acb87a125638df137c6cbb3031083f180d1327edd6c518189f3d8887cd938bac32310d08ea2f409b9084fec576024c37ab6d224f4815ce9ca4aa7b089228a6744945fb0d1627a6f6ac6c924116beb94c0ca37edabacf2f11d0f473c3cb5d51e4186ec67ee749d3d897b0982def9c2dbc34398307088cd9493b1ee72af852b50d85fd57f33cef818f6954717fe2fe0b270311718a284b930b955a5e26b900a192b54e8b41139a606640621c311da9d2eedb0cb50d28e456105c1008b4f5f009967cb938f78e06198a2dc14f85d2ca50b383baf9249ed11a47d7c2efd739d0e1a7c8261445c57bd94c31b2cd2c34d4d2af9152d1cf58ef1bd65273acc61a9486a4f74840fc45d4841c8460e903cfb03c7e7bbbcb86f8092f34599f9ee08f918876c05f7596147693d89dd2f4bbf70094d56d861a6f33d98aefe8854948f5bae56599b33564b2bdd4ce4bf50b8ecb7243e0f3617750ae5b36ff21e005d12ef9ea813710630aca8a53973f1dae50fe5e3a467e7bdca5d500114737214914f8800c2840599fe7ab79bf2dd0607f20b65c5e4845a5c96dc27c1858e6af579d25510b4d0231c7a7d1ce5d33b16fbfd05cfcc1e636c4b47f2bda655cfe135e376b89a5fc3cb793a6481488d5d21454f6ca8c467f2b81c04d3af3da65554a754f264251c7693d2c0e1cde35408e99f2123bd92396c9bd88233a25bc3b654479991f1963bd74592ce18ff0ad25e87ca18b4cc822c8d1a502efaa3a81b1f95beb6e15ab074077550bff51c2d4e696be22d8f7da2718adc5320b9480ed3ef4019890c4c51041f9ef1e773983c27cf28b60da263b83030284a46cc96e33c61e063f343e0915f0a96d83dd897d6ea36bed2046e96e11e7a46efe49cfd292e2c4b7a56be48a0a6c777b74c6c515abb1cc25e6bf1744b7a7857298e7fd7a0663c85b6901596cc0979e40a2ef857962c4b578e07e4bee9d17f0811c727700d03e3825337b2dbee0da550d33abb90fa2fd1d96313dd39945da35cfce9c23216dc3e4b94f4d498f89dc7c73850d2ccc7333c9d6ba583d216964e8eab75459bfd9caaadcc0bb22ed7bd8d5450eabcd9a9bfcad81759732e1f84eca395645d5e6110935e131a77b465e9f821aac80e5b3b4af8348e1ce28766e9b0b60799ad07c0abcb976955cb9e981ff4ec20af7777ddd1ee1b13ddd759764b194cbae6756456a24e0af518b7ebce07a5b5370ea314d8ab837070a0ee47a8781ac64e47bd6b8b1c832facdafd861d4d24729f512c053ab20b5c963ac6c796f67f291eaa89040059437057eec79fcba416acad75ba5d2384258c3da34739d4db3f90591413acc6894a4bb5a0f78267fd428638bd70cca980f5bd68621d967f56f5631a318bbda46da2e56ab39bddfb18633d5a76a05e24f4e2463da059997d7df7235e14779351559d32163efb9387e7b96a0929912a6f38b3a5abd1db7f4d3b2ad89b42a7632f78a1ffbb8e110e8ee34f65ddfae6a6ebbe32d9ae80c23c1c57a215257d774b02919e9f88808008a4dd7c8277e966905cc8946bb98d135dd704bbcd6f5452d33b942636b4a4ce6d954e90ac1bd3e58037b4291923a9e439175b21f5e331b24c30f741412652fb9fbcb0ee6a864463ebb9f487655c3c57a0f8a8297793599a3ad829f325e5a38718cbb59470109142c62cd082fa7efa527fcffccc60f2790c9d9a856489808184d899df7217cd32abea97fd481c502436d8a1e243326ad4ba9afbd6cc701426abbd3d47cdacb08683e578c03001515b28e758746f8dcbda4d40c4617998d6523626a2f6610151576c0ebf9dad2b3afafce46507efca32309a9f2d52bb06dd5dacc98cf28bfe1356d2a2930052051298c7a56c313f4b4ea02dfc822a09c6cd8218bad9e31fda65f84a3e7f3e2e0a450b53979ff26b28f7bc85632d077661766cbbea1b65580bb72c2dfb92056c3e8f28d2eef181f1261078314790cb133d339a5e4a22107ccbbdf28ced96282bcf5e09d961886c66f504334c2496848cf1ba27dbf0bfec954a270ad0770cc7450602bdfcfd63e5024f5785f699687bdb771235e5208675b2046f968de4491df5d52a6fc82c51b3a5c05f8b9d36061a2df4f74eab5425c654e28497daf54c073263aadbee41b4bc70eb573a8b833fbb3188ef19faf48c6e201c02863770c5e9edb73b1e8c0b02e286ba16650333970ae963cc317d64e2a78d2788a2fd4320230f2369fbf42c1f8256a62f9e14771035e6bcb9ad76c2bdcf6e9ac2effe52f164704766271b9537d1077eefdd8c9c941c714448409fdb7e585c745289e7f49ce0ac213351eb0925453ef44e5f8f5c74340428cda03660d141e6cf21f61e1c05c2a4c1bdf5d77ba2c526a249343d8e7e35c8b350df127e3f05efdedf6ac4a8ed2bef457fce84b2f47aba049e7add0c0c33fdf9abd02b924cf4911d223d052e4d9294fe21f76efd7ba86b953521e2bddb8a5f1b27250e84dd3f1d2c05c376572b8e8089314feea3fd4f3de73b1ed1b21f402c180632f3b9f6492d817d9a00b754c1b5af824198caf158cf13960e24d1f629736e38c0f725ea74fa54edc24f9a30df27398703091e4625daf8fc433cf81aec93244914b83173ed2e062db2848c3741363718e194ce362d5c3a740f30c2b36afd47999d4ebe8b99d358d55beb4c394148ab3e452504e26d238fa4ec28144757e78a7fdf1b78fcb143514b2002225dc73917c19446a292118d356f4ef3a0470f887243d5b0b15ec19f8b9a9473bdcdad400dbfa476b170aa2de79a64cef1b0648d66b23ab8a0184d857130cc76701179718c217dbf1d133d1ba295538495f961cfc8998042910df8742887c20f79e60759bd25018796f14335226051e70ddbb7803bb10c3fad90929965f20c96de7a64462ed5032f579ff8988407743368332f38c8e567611f40a35d3ea924f36defebfe9ddd00ed48d890355ae08af956b55dd41e8733572ee49b075e90d73889004c503eff37556dede4d98541b936c34869c9255112d6203c574a5fc0ac80f5aca122396526a850a11254e9bed98e835722a415dcbca907ac7095ab31a2304838567a5085730c3bfa525873ef5f9812574383f2c43757047200ab4f256da0e405b757ef9a5f6be882653f8f69263007d93ef1884e5f7ff40acd1e807081596ad15c85c0b89d44dee55641d3d1bf29eaa516a13f2d58de915ffa0c3c99b4708a589d228cbe70fbe457339abe5dc5518eafaebaaa9c377fc69ce021158d24fad539cbfdff0936bf33284a9637dfd018a211775ef1ff00957b4c3116bbc10ca280fac72e5ac05465ddc8ab3993608ce1cff84e0726c3eb85ca88f6bc3a1e57e124e536e7066d75d7557e2283437c618a58ca2c645670f3f14cb61b65571f41708a84fd184c67e9ddc7790b6ae06ee57e761f200f5af95c4b92c49c6741ac0e73be637e5c2c18e5daf02d876992ee6e9a4a34cb7bc3653ea580282859862673ebcf548e7b9bd459058e31cf3b205f5530534f02fef08ce81df68155be15ea55736a4822e930ce736462622d5cc36c9896a0c2b8e705a0d315409029a78cf4d3e286b1de2d62d373fb71a2ec307c8a8c54b79ae10f66626e2259a6f6bf3452d0821f3befbb7a4e12e8ef70cac7bc7a5b15aa39c632b03ac2d6d780aebcc70455412a1b8204806fbe1ea9b967d3ac0e46a29be2ca90c7da02e572d53cd4c1566f06c8d6520b2c274a82760dbe181c8c0664bddc65719813ad2368e71788754f133f04bd105b3a599f4b90454ea06ccb53aaa4babdc6fdb3c8091d6bd74a140462526d621ebded5be6a52423f9f647cca564291c389de3607014bf8b34e5f96927f89b96840a7afbbbab936401ae9a3f5c3733381db4ccaeaa7a42e67b2ffccddf4bddf4713b64173538bf09d53f7cee78d8ca8ded37c6ec787b10d2f7d98e659de0cef73c096c79ac0e0f92e99c97eb8ce639c935d0f29a2b786d714e3c56e92a715a6ff1d0a9c5cd57a4bfe586295b83d85c5d2c7809d9cd07f2bd8f4a373dd3c6e607bf87ea4d7ea0bb2ec1818d872d40e640bdc132d84e507da4c6a36c607fd0fb3904574e38d6e73da66ffb3187a7fdb57691fca864a7101f562fd3a54087db9e89da657bced3e04bb37e4f674667b6517c1c025b3bef1b97c15b0962796dd4a56be818875218a5d1c8a46aaba0e6314bbc6a4480d8e0b02e1bdf34149eaeca4a5f033e0b5937c592e10f78625bf480c2c8fbdb7a6dec0861aeca59cedcb0e7bb3151691bb58b72f44e515c9ee14b566bfd04cc34c162c8fd5b7017eb8a62373c48e91a50abc768a8983c8ac8fc00e7159a72006faa1e2c3738ec6fc30bd65c3ac844d1a44ba0baa93dad6f9bac1a7ec05c6de25d92e3c4d8fa7dfb707eceee20", 0x1000, 0x6b4c8f30}, {&(0x7f00000001c0)="b7cfd474889fefc427be62be31e5d54e766169b3f2c46d2095a6d4bff36ad5422ef8b5376bdc486ab9bd5a308d3465a34d020ac739a5320b4abb4c9781e91eeb4d0155321465bb8b9f3da4ab61f96f4553bd", 0x52, 0x7ff}], 0x1480000, &(0x7f00000002c0)={[{@dots='dots'}, {@nodots='nodots'}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x3}}, {@dots='dots'}, {@dots='dots'}, {@dots='dots'}, {@dots='dots'}], [{@audit='audit'}, {@seclabel='seclabel'}, {@euid_gt={'euid>', 0xee01}}]}) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000340)=[r4, r2, r5, r6], 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000000380)={0x0, 0xb0, "4e3724218654a279f84f1de4bfa8ddcb9965600034b9b889bbf1271b6687ebf751b8e390ef8b5374e6cd7ac0c086f4dd7d35f4eff59b7e9aa4edfb2a56b19139e786ae20420a95587d107f4ec6e2a0256ca93c7bf7f8723298d1f992caa2cdae39fae9e956997b0eb70d49bff84e0261f9a7b854b0a36cc5a95b3ed4cd72511a826d390347a37d289560bac11e423142a62b2c586a0fa65cacf2308614ffef73ba8effd1db6625651d3ce518c23f5411"}, &(0x7f0000000440)=0xb8) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x71ddbc2ece9068dc) io_submit(0x0, 0x8, &(0x7f0000003100)=[&(0x7f0000000580)={0x0, 0x0, 0x0, 0xe, 0x8, r5, &(0x7f0000000480)="323e5cdc3aeb1f321ae9fe986dcb2be4ee5a8a3b95ac2ba0cdf4fcdbd2303b3ed865e581232eb8248e9afd145d81d7e94492e486cde698a5301e9eac9f3fd4b9ed5a3eaef7cbe2ba95be02f8903fcc102c3233df2c7bf5bbba2d0edf4bab0210f1431bc03f8f327ce0a4a86b834015f43f668f3e6206f2d65347658122cf9d4f59a635a6c9bd8cec7d287e3d8d2f93830761d07954d5887c4769007a271f1106c807026f1b6f1d9693c846eb50333e3af11fd4cf03186bc06131de5c8a7f244b4da41fff64822099472de190f1d97cc106253c90b256d01cb931b0d647229b96ed1c905ad45f61a61d047e400770", 0xee, 0x6, 0x0, 0x1, r3}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x3, 0x4, 0xffffffffffffffff, &(0x7f00000005c0)="ce5e47f7f43114a2fc3f70e7c9ec52219a98fcc5f0177ad41c3bf4f6d5d1166b208779da88f2ed7fe8752c7bc014e27c5c3f28ec8e0ca8572b704e009452000ed3a86ec73874bc5183a58d76f921b3b460a28070556ba0795e064d07fa74fb21ec3027ae7f7418c1593fe25b18880bfc19ff6fce94cb37833af766a87cfa7d572740f27f45f52770a0c2fe5e3c46bf9b9362a51fd1d353989766665dd9bd22ab56e4853b00d6518fa8321b0b8fdbaf18481577530908735aaccf8c89243a3ac8e9b946", 0xc3, 0x9, 0x0, 0x1}, &(0x7f0000002840)={0x0, 0x0, 0x0, 0x0, 0x3d, r5, &(0x7f0000002740)="cdf226051d79d3e064b867f332f1758a6702628ee7d3df728c4376b3252c9e906f710dbb9a50bb52c59f981e9491f8a34cc2b8f42adc532804e465d23705cffe6cea10f97fc0f1dd98abacecd6c686e3592d26790cee4bfdf8a4923f80d203e8ef7af473059063daf4e7de821cf88c25a50b135208ba8a7c13d8fcc90ebcef6432df9a2131cdcdc75c3e70519e500d232061d793522f15670ee0b4ea3ad835ef03a5edd8f969b9a66ed01411197106917d85cc9c152049fa973b2c296cac7a47c14e453bca093971331949ce78efe073d46af990d4846d2c16b2565073be3f7944ae3a92750c01787702", 0xea, 0xf6, 0x0, 0x3, r0}, &(0x7f0000002cc0)={0x0, 0x0, 0x0, 0x3, 0x5, 0xffffffffffffffff, &(0x7f0000002c40)="5ff18885410c9b30c391b41b0aaf3543cc55b5388dd47ae7405d4bad7045c595051e7f1eb03cd7e958148707b19e4c5481e14c78a359950b7f04a707ae4bc02e72da759eba4db490", 0x48, 0x3, 0x0, 0x0, r1}, &(0x7f0000002d80)={0x0, 0x0, 0x0, 0x1, 0x5, r0, &(0x7f0000002d00)="3699317e6c87a1b0dd63dba52e5af3cb212ac8cde6f29fbf1198e963f8aa379af3275943d47430098bc9ceaab4068b0466a0db812bee7e7d04312615f69be05a1b3de636b882efea8a5d6083e96d6be2ccad668cf105095c25823955552d097ad1b410059dd69875b2c337c3793f3ba92a90fe6ba508", 0x76, 0x81}, &(0x7f0000002ec0)={0x0, 0x0, 0x0, 0x8, 0x40, r1, &(0x7f0000002dc0)="a92f5b9fb6a0904d7645943de8c6ea6eafd63e09614a906114eb95304bcf864d72a1caacaf0024ef6dadf1731ac85080357a7364d7741d681392e20442b0952fde3fb39f5e82d352d152381a4bed43436f3b9bc6c70ad947ceb9c2fa3004dc3ba525d6699a467a3da7fb2648cb55408fd0772bba78226d35adf2ece6c9f68666c530453ff781d24386e1c68feedd1bf4fc9ec1262e1d27c9178b7ce5e247b0a7358ad3fe47b9f0f5df62c2ef38be3522976bb519d2b7cdf7a72a95854692ecc7bb839a43aa0aaa7bc3290f772216e91a539efcd00bd0d4856d126bedd839223cecf198", 0xe3, 0x8, 0x0, 0x1, r0}, &(0x7f0000003000)={0x0, 0x0, 0x0, 0x3, 0x3, 0xffffffffffffffff, &(0x7f0000002f40)="9f7bab2fb2f845f8b149cedb664c929d7f1e6bd1183e39f82a452037bb2af91406893d0692da7912be3909c73eba4f0044bc7c5a9c172411dde159c0935bbe4e94c5a0a8868bc5eec6d483a1", 0x4c, 0x5, 0x0, 0x1}, &(0x7f00000030c0)={0x0, 0x0, 0x0, 0x3, 0x3f, r1, &(0x7f0000003040)="c438c1e8a368fac3794345aff0795ffa641a26decfbb526ace5aa1d2423e671d92b10043c2348300c4568c084014f87df0ca87bae2ddde171e3ab3078cf7ba2c28a2ed81f3797efbf94e51899f3980e4731a7c5729d8cf4f291c26c5ba05235551602a78a6daa90058cd", 0x6a, 0x10001, 0x0, 0x2}]) 11:35:34 executing program 5: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$FUSE_INTERRUPT(r0, &(0x7f0000000000)={0x10}, 0xffffffac) write$FUSE_INIT(r0, &(0x7f00000000c0)={0x50}, 0x50) 11:35:34 executing program 2: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_netprio_ifpriomap(r0, 0x0, 0xfffffffffffffdb2) 11:35:34 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) sendto(r0, 0x0, 0x0, 0x4a0d4, 0x0, 0x34) 11:35:35 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) sendto(r0, 0x0, 0x0, 0x40081, 0x0, 0xffffffffffffff75) 11:35:35 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) sendto(r0, &(0x7f0000000000)="e6", 0x1, 0x0, 0x0, 0x0) 11:35:35 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x3}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x16}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x8}]}}}]}, 0x50}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) 11:35:35 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) sendto(r0, 0x0, 0x0, 0x5, 0x0, 0x0) 11:35:35 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) sendto(r0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x64) 11:35:35 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) pidfd_getfd(r0, r0, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) r2 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendmmsg$inet(r2, &(0x7f0000000080)=[{{&(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10, 0x0}}, {{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0xf, 0x0}}], 0x2, 0x0) setxattr$incfs_size(&(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='user.incfs.size\x00', &(0x7f0000000140)=0x3c7, 0x8, 0x3) sendfile(r1, r2, 0x0, 0x5d) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x71ddbc2ece9068dc) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f0000000280)={0x7, 0x1ff, 0x5, 0x7fff, 0xc, "1ab5c8c158e5bbf0b5ad4369221afe3da7ff29"}) sendfile(r0, r0, 0x0, 0xfffffffa) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r3 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendmmsg$inet(r3, &(0x7f0000000080)=[{{&(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10, 0x0}}, {{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0xf, 0x0}}], 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f00000001c0)={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x24}}, {0x6}, 0x2, {0x2, 0x4e22, @empty}, 'wg0\x00'}) 11:35:36 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = fcntl$dupfd(r0, 0x0, r0) write$FUSE_DIRENTPLUS(r1, 0x0, 0xa8) 11:35:36 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendto(r1, &(0x7f0000000100)='&', 0x1, 0x0, 0x0, 0x0) recvfrom(r0, &(0x7f0000000200)=""/78, 0x4e, 0x60, 0x0, 0x0) 11:35:36 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = fcntl$dupfd(r0, 0x0, r0) write$FUSE_OPEN(r1, 0x0, 0x0) 11:35:36 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$FUSE_WRITE(r1, 0x0, 0x0) [ 590.797226][ T32] kauditd_printk_skb: 9 callbacks suppressed [ 590.797299][ T32] audit: type=1804 audit(1608118536.724:508): pid=12876 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/153/bus" dev="sda1" ino=15842 res=1 errno=0 11:35:36 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc088}}, 0x20}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) [ 590.828820][ T32] audit: type=1800 audit(1608118536.724:509): pid=12876 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15842 res=0 errno=0 11:35:37 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendto(r0, &(0x7f00000001c0)="fd", 0x1, 0x404e080, 0x0, 0x0) 11:35:37 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x29, 0x3, 0x3, 0xfffffffc, 0x54, @local, @private1={0xfc, 0x1, [], 0x1}, 0x8000, 0x8000, 0x5, 0x1f}}) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, r3, 0x1, {0x0, 0x0, 0x1}, 0xff}, 0x18) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) 11:35:37 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendto(r1, &(0x7f0000000100)='&', 0x1, 0x0, 0x0, 0x0) recvfrom(r0, 0x0, 0x0, 0x60, 0x0, 0x0) 11:35:37 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$cgroup_devices(r1, &(0x7f0000000000)=ANY=[], 0xa) 11:35:37 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000067c0)='/dev/full\x00', 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = fcntl$dupfd(r1, 0x0, r0) write$FUSE_POLL(r2, 0x0, 0x0) [ 591.607224][ T32] audit: type=1800 audit(1608118537.534:510): pid=12893 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16033 res=0 errno=0 11:35:37 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc088}}, 0x20}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) [ 591.739366][ T32] audit: type=1804 audit(1608118537.604:511): pid=12893 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/154/bus" dev="sda1" ino=16033 res=1 errno=0 [ 591.763910][ T32] audit: type=1800 audit(1608118537.604:512): pid=12893 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16033 res=0 errno=0 11:35:38 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendto(r0, &(0x7f00000001c0)="fd", 0x1, 0x46080, 0x0, 0xffffffffffffffaf) 11:35:38 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = fcntl$dupfd(r1, 0x0, r0) write$cgroup_devices(r2, 0x0, 0x0) 11:35:38 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) sendto$packet(r1, &(0x7f0000000100), 0x0, 0x4000000, 0x0, 0x0) [ 592.359421][ T32] audit: type=1804 audit(1608118538.284:513): pid=12894 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/154/bus" dev="sda1" ino=16033 res=1 errno=0 [ 592.519826][ T32] audit: type=1804 audit(1608118538.324:514): pid=12898 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/154/bus" dev="sda1" ino=16033 res=1 errno=0 [ 592.544547][ T32] audit: type=1800 audit(1608118538.324:515): pid=12898 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16033 res=0 errno=0 11:35:38 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0xfffffffd) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) 11:35:38 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) sendto(r0, 0x0, 0x0, 0x200044c4, 0x0, 0x6226e17d1e5db672) 11:35:38 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc088}}, 0x20}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) 11:35:38 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000), &(0x7f0000000080)=0x4) 11:35:38 executing program 5: pipe2(&(0x7f0000003dc0), 0x80800) [ 593.155670][ T32] audit: type=1800 audit(1608118539.084:516): pid=12921 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16278 res=0 errno=0 [ 593.333830][ T32] audit: type=1804 audit(1608118539.144:517): pid=12921 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/155/bus" dev="sda1" ino=16278 res=1 errno=0 11:35:39 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x20000800) 11:35:39 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) setsockopt$sock_int(r1, 0x1, 0x2b, &(0x7f0000000100)=0x20, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) write(r0, 0x0, 0x0) 11:35:39 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = openat$zero(0xffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x88000, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0xc00c5512, &(0x7f0000000080)=@usbdevfs_disconnect={0x4}) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000100)=""/253) ioctl$EVIOCGABS0(r3, 0x80184540, &(0x7f0000000040)=""/26) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) 11:35:39 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x40004) 11:35:39 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc088}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x3}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x16}]}}}]}, 0x44}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) 11:35:39 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendto(r0, &(0x7f0000000080)="64aeac5f7ba1a2f65c3778215fe0bfed7b6d1f15b30525375010f50be17fe3978474aa6944a5235ad2004e7aff60ad0d49f3ef8294ef2fb73ec214b428", 0x3d, 0x0, 0x0, 0x25) 11:35:40 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendto(r1, &(0x7f0000000100)='&', 0x1, 0x0, 0x0, 0x0) recvfrom(r0, 0x0, 0x0, 0x63, 0x0, 0x0) 11:35:40 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x0, 0x0) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 11:35:40 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={0x0}}, 0x20008804) 11:35:40 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc088}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x3}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x16}]}}}]}, 0x44}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) 11:35:40 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x41002) 11:35:41 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x29, 0x4, 0x20, 0x20, 0x2a, @dev={0xfe, 0x80, [], 0x17}, @private1, 0x7, 0x7, 0x7f, 0x9}}) 11:35:41 executing program 1: pipe2(&(0x7f0000003680)={0xffffffffffffffff}, 0x0) sendmsg$NL80211_CMD_GET_REG(r0, 0x0, 0x0) 11:35:41 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080), 0x4) 11:35:41 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[], 0x208}}, 0x40) [ 595.931464][ T32] kauditd_printk_skb: 9 callbacks suppressed [ 595.931535][ T32] audit: type=1800 audit(1608118541.854:527): pid=12972 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16288 res=0 errno=0 [ 596.170137][ T32] audit: type=1804 audit(1608118541.944:528): pid=12976 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/157/bus" dev="sda1" ino=16288 res=1 errno=0 [ 596.196944][ T32] audit: type=1800 audit(1608118541.944:529): pid=12976 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16288 res=0 errno=0 11:35:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x8881) 11:35:42 executing program 5: openat$null(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/null\x00', 0x28042, 0x0) 11:35:42 executing program 1: syz_emit_ethernet(0x2c, 0x0, 0x0) 11:35:42 executing program 2: pipe2(&(0x7f0000003dc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, 0x0) 11:35:42 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc088}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x3}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x16}]}}}]}, 0x44}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) [ 596.702668][ T32] audit: type=1804 audit(1608118542.624:530): pid=12976 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/157/bus" dev="sda1" ino=16288 res=1 errno=0 [ 596.728176][ T32] audit: type=1804 audit(1608118542.624:531): pid=12978 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/157/bus" dev="sda1" ino=16288 res=1 errno=0 [ 596.753055][ T32] audit: type=1800 audit(1608118542.624:532): pid=12978 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16288 res=0 errno=0 11:35:42 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = openat$capi20(0xffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x1e480, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000040)={0x9, 0x62ff, 0x2, 0x3, 0x2, [0x8000, 0x0, 0x8, 0x1db6]}) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x1000) lseek(r2, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r3 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r2, r3, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$FS_IOC_RESVSP(r1, 0x402c5828, &(0x7f0000000100)={0x0, 0x0, 0x100, 0x1}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r4 = openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r4, 0x660c) 11:35:43 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r0, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20004063, 0x0) 11:35:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 11:35:43 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000002140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2023, 0x0) 11:35:43 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x880) [ 597.605378][ T32] audit: type=1800 audit(1608118543.534:533): pid=12999 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16274 res=0 errno=0 [ 597.772577][ T32] audit: type=1804 audit(1608118543.594:534): pid=13000 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/158/bus" dev="sda1" ino=16274 res=1 errno=0 [ 597.797476][ T32] audit: type=1800 audit(1608118543.594:535): pid=13000 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16274 res=0 errno=0 11:35:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x4090) 11:35:44 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc088}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x3}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x16}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc}]}}}]}, 0x50}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) 11:35:44 executing program 2: pipe2(&(0x7f0000003680)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, 0x0, 0x0) 11:35:44 executing program 3: pipe2(&(0x7f0000003680)={0xffffffffffffffff}, 0x0) sendmsg$NL80211_CMD_SET_MPATH(r0, 0x0, 0x0) [ 598.373958][ T32] audit: type=1804 audit(1608118544.294:536): pid=12999 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/158/bus" dev="sda1" ino=16274 res=1 errno=0 11:35:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x5, &(0x7f0000000180)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, &(0x7f0000000100)) 11:35:44 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r2 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendmmsg$inet(r2, &(0x7f0000000080)=[{{&(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10, 0x0}}, {{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0xf, 0x0}}], 0x2, 0x0) ftruncate(r0, 0x1) lseek(r1, 0x1000, 0x6) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r3 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r3, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) 11:35:44 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f000000d200), 0x0, 0x20000000) 11:35:45 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc088}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x3}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc}]}}}]}, 0x48}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) 11:35:45 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x6000, 0x0) 11:35:45 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r0, 0x0, 0x0) 11:35:45 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) openat$dlm_plock(0xffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x40000, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) 11:35:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={0x0}}, 0x20004000) 11:35:46 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={0x0}}, 0x4048014) 11:35:46 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x20040890) 11:35:46 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc088}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x3}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc}]}}}]}, 0x48}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) 11:35:46 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@private1, 0x0, 0x0, 0x0, 0xd}, &(0x7f0000000140)=0x20) [ 600.973910][ T32] kauditd_printk_skb: 10 callbacks suppressed [ 600.973986][ T32] audit: type=1804 audit(1608118546.894:547): pid=13050 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/160/bus" dev="sda1" ino=16303 res=1 errno=0 [ 601.004236][ T32] audit: type=1804 audit(1608118546.904:548): pid=13048 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/160/bus" dev="sda1" ino=16303 res=1 errno=0 [ 601.030127][ T32] audit: type=1800 audit(1608118546.904:549): pid=13048 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16303 res=0 errno=0 11:35:47 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x44000) 11:35:47 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000040)=""/199, &(0x7f0000000140)=0xc7) 11:35:47 executing program 2: ioprio_set$uid(0x0, 0xffffffffffffffff, 0x0) 11:35:47 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) 11:35:47 executing program 1: prlimit64(0x0, 0x7, &(0x7f0000000040), 0x0) syz_genetlink_get_family_id$fou(0x0) 11:35:47 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc088}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x3}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc}]}}}]}, 0x48}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) [ 601.882270][ T32] audit: type=1800 audit(1608118547.804:550): pid=13074 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16303 res=0 errno=0 11:35:48 executing program 1: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$TCSETXW(r0, 0x5435, 0x0) 11:35:48 executing program 3: pipe2(&(0x7f0000003dc0)={0xffffffffffffffff}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, 0x0) [ 602.125202][ T32] audit: type=1804 audit(1608118548.054:551): pid=13074 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/161/bus" dev="sda1" ino=16303 res=1 errno=0 [ 602.151341][ T32] audit: type=1800 audit(1608118548.054:552): pid=13074 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16303 res=0 errno=0 11:35:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) [ 602.660990][ T32] audit: type=1804 audit(1608118548.574:553): pid=13082 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/161/bus" dev="sda1" ino=16303 res=1 errno=0 [ 602.684724][ T32] audit: type=1804 audit(1608118548.574:554): pid=13086 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/161/bus" dev="sda1" ino=16303 res=1 errno=0 [ 602.711223][ T32] audit: type=1800 audit(1608118548.574:555): pid=13086 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16303 res=0 errno=0 11:35:48 executing program 5: pipe2(&(0x7f0000003680)={0xffffffffffffffff}, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, 0x0) 11:35:48 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc088}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x3}, @IFLA_BR_FORWARD_DELAY={0x8}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc}]}}}]}, 0x50}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) 11:35:48 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000040)='./bus\x00', 0x8, 0x9, &(0x7f0000000540)=[{&(0x7f0000000100)="366828f1a8ade8c2a9c8f34dc4c37e077af20605a91ca23f04b0f909a4e8e4cebb735d995d71d903186a39957353ce0eead8d2cfeccccf5d9db5c6d507b10b583a1bb467e28d1f910b18", 0x4a, 0x40}, {&(0x7f0000000080)="d2a7badf2397eb34f908c664acb33930f165369f", 0x14, 0x5}, {&(0x7f0000000280)="2c0849f2bd4f07f6e6864226bc2f2c8a74e38f81c765d6181e29dd435ba4f930fc246cc78380006b21aa8e021a981d52e5deb718abc9fd8a84a0761a7c3a661da40349a65329f30dfb5150c5d898b14a8a6a910252a062deed81b8f4a1bf2518ddd8df6dd6ce1bd7b947b9fcf560ec76fa44994091b1b94212c9e5f96e517e5496dd254a93768d9fdc822c31fe82e53d1b46edb4b39d75a696608318226bcc27a144549dfd24718183d7a895f5ad30be488bbb76c1de4549d66c30b1d7d9e92667e74367bc0408d37f314a904c2973da9fd594811921444f48745d685957bb", 0xdf, 0x8}, {&(0x7f0000000740)="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", 0x1000, 0x1f}, {&(0x7f0000000180)="3635866c35a1fd09f696275166eb1fb098378a3e693c95d5077c58c9aa22c4990dfc908b0f88411cd2766cb53a7a4b", 0x2f, 0x3}, {&(0x7f0000000380)="caa9b92fedbd4db01f6f452b45ce6f715030caa23a0464c64f70474f64fb8ff502959766166ede58d8097a21f76b8180995d40e8564f34618a09df8ace5e0fcec6f4326cef58a719726b68e1138bd471750eb1b604423b89c978505ffa16f0c242b71baecf59d7c1dac695a6d8df68f89eac412b8491b3bd0ca91c2e91802d620de674de5e06ab77563d8ec1cc13cae28245f7b3a5ec2f5fadb7a17e99779b902d923a5e5e5c2aaf4a21422646b24fd52fcafd32aa9ce5c74058bd81ff8867e3828d280efd206cf344e34c0db6f4797ff07ff19264a30befa020adabd7cd8e196a0d3c2b8d5d4a3043fc5a76", 0xec, 0x8}, {&(0x7f00000001c0)="a14f4950dcfe0df64e9a486fde12b5d3dd2d31ddcc7bf219266cc3ea9a5f576a", 0x20, 0x75}, {&(0x7f0000000200)="ec6611", 0x3, 0x1000}, {&(0x7f0000000480)="90d0bd54c94c2744a0e29c3d1b587920c0b89708d27c886d21f01d3c469f000011a405e7e7cf7df7c33223de891b2d5ab9acf360f6ef1cf4a6f19c1a75e77009c153a1ddf41383017d08cff2b6b32c6c7a576d635da2d7a4a508a7e5175d68b8b309938b2134e3ae98b67a55f3d3e4681fa3c2676ee537214d508b5e40cadfda472de8771bf4d32b4e908d5ed0437a9901215e54fd31ec4bd91bffe076793fde5ef74a4af67b", 0xa6, 0x80}], 0x200000, &(0x7f0000001740)=ANY=[@ANYBLOB="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"]) ftruncate(0xffffffffffffffff, 0x1004) lseek(0xffffffffffffffff, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r1 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) 11:35:49 executing program 1: openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x310180, 0x0) 11:35:49 executing program 3: ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) 11:35:49 executing program 2: shmget$private(0x0, 0x6000, 0x200, &(0x7f0000ff8000/0x6000)=nil) [ 603.646249][ T32] audit: type=1800 audit(1608118549.574:556): pid=13102 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16297 res=0 errno=0 11:35:49 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x40008d5) [ 603.760218][T13106] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0xbb12c346) [ 603.768871][T13106] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 604.116869][T13106] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 604.125060][T13106] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock 11:35:50 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc088}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x3}, @IFLA_BR_FORWARD_DELAY={0x8}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc}]}}}]}, 0x50}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) [ 604.237507][T13102] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0xbb12c346) [ 604.246415][T13102] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 604.256313][T13102] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 604.265404][T13102] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock 11:35:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$EVIOCGABS0(r0, 0x80184540, 0x0) 11:35:50 executing program 1: pipe2(&(0x7f0000003680)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendmsg$SMC_PNETID_ADD(r0, 0x0, 0x0) 11:35:50 executing program 2: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r0, 0x0, 0x0) 11:35:50 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x40) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) 11:35:50 executing program 5: sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) 11:35:51 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/18) 11:35:51 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc088}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x3}, @IFLA_BR_FORWARD_DELAY={0x8}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc}]}}}]}, 0x50}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) 11:35:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 11:35:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x80) 11:35:51 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[], 0x34}}, 0x44000) 11:35:52 executing program 1: syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x0, 0x80003) [ 606.124398][ T32] kauditd_printk_skb: 6 callbacks suppressed [ 606.124480][ T32] audit: type=1804 audit(1608118552.034:563): pid=13139 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/163/bus" dev="sda1" ino=16284 res=1 errno=0 [ 606.185994][ T32] audit: type=1804 audit(1608118552.114:564): pid=13138 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/163/bus" dev="sda1" ino=16284 res=1 errno=0 [ 606.210316][ T32] audit: type=1800 audit(1608118552.114:565): pid=13138 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16284 res=0 errno=0 11:35:52 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc088}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_FORWARD_DELAY={0x8}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc}]}}}]}, 0x48}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) 11:35:52 executing program 3: pipe2(&(0x7f0000003680)={0xffffffffffffffff}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, 0x0, 0x0) 11:35:52 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) syz_mount_image$afs(&(0x7f0000000040)='afs\x00', &(0x7f0000000080)='./bus\x00', 0x20, 0x1, &(0x7f0000000180)=[{&(0x7f0000000100)="4baf1c507003c0187f5dd294bbcf4d943ef0f99230644a1b9e0b4d950bcec1ee25f103c59f406cfd3fc53f0b1e05803e90375d6d5201c8a9683351893fdbb4ccbe0dfc4be2564c45611f23379d364cd096c77a7b316728c6dcc6a9ac84dcf5a603c7e77ac50e37fe9ecc197c76118514fcf47581f6110d341d", 0x79, 0x4}], 0x1002, &(0x7f00000001c0)={[{@autocell='autocell'}, {@flock_local='flock=local'}, {@flock_openafs='flock=openafs'}, {@source={'source', 0x3d, '\'}\''}}], [{@fsuuid={'fsuuid', 0x3d, {[0x36, 0x38, 0x66, 0x38, 0x61, 0x35, 0x66, 0x64], 0x2d, [0x56, 0x62, 0x37, 0x38], 0x2d, [0x31, 0x63, 0x65, 0x61], 0x2d, [0x34, 0x62, 0x65, 0x37], 0x2d, [0x32, 0x64, 0x39, 0x35, 0x38, 0x30, 0x38, 0x38]}}}]}) lseek(r1, 0x7f, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000000)='./bus\x00', 0x105050, 0xa6) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) 11:35:52 executing program 2: ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) 11:35:52 executing program 5: pipe2(&(0x7f0000000200)={0xffffffffffffffff}, 0x0) sendmsg$TIPC_CMD_GET_LINKS(r0, 0x0, 0x0) 11:35:52 executing program 1: r0 = semget$private(0x0, 0x1, 0x0) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000140)={{0x2}}) [ 606.993968][ T32] audit: type=1800 audit(1608118552.904:566): pid=13165 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16066 res=0 errno=0 11:35:53 executing program 2: io_cancel(0x0, &(0x7f0000002580)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 11:35:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, 0x0, 0x0) 11:35:53 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc088}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_FORWARD_DELAY={0x8}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc}]}}}]}, 0x48}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) 11:35:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000340)={&(0x7f00000003c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000300)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [""]}, 0xfffffd94}}, 0x0) 11:35:53 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r2 = socket(0x22, 0x2, 0x2) getpeername$l2tp6(r2, 0x0, 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(r2, 0x8, 0xffffffffffffffff) r3 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r3, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) 11:35:53 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)) 11:35:53 executing program 5: openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x8000, 0x0) [ 608.173496][ T32] audit: type=1800 audit(1608118554.094:567): pid=13196 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16328 res=0 errno=0 11:35:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x4) [ 608.457242][ T32] audit: type=1804 audit(1608118554.224:568): pid=13199 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/165/bus" dev="sda1" ino=16328 res=1 errno=0 [ 608.481994][ T32] audit: type=1800 audit(1608118554.224:569): pid=13199 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16328 res=0 errno=0 11:35:54 executing program 2: semget$private(0x0, 0x2, 0x44) 11:35:54 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x80) 11:35:54 executing program 1: timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, r0+10000000}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = memfd_create(&(0x7f0000000340)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x948\xe1\x01\xe5`iq@Fse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf$\x89\x00\x00\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9d\x18\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88\xf0\x1e\r\xd5\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j%\xa5\xcc\xa6\x86\xb2\xdeY\x17yX\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd7\x1c]ImZlU\".\x18)\xcf\x1am\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xcew\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf\x00\x80\x00'/246, 0x0) fcntl$setlease(r2, 0x400, 0x1) fcntl$setown(r2, 0x8, 0x0) execveat(r2, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) syz_open_dev$ttys(0xc, 0x2, 0x0) 11:35:54 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc088}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_FORWARD_DELAY={0x8}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc}]}}}]}, 0x48}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) [ 608.952159][ T32] audit: type=1804 audit(1608118554.874:570): pid=13196 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/165/bus" dev="sda1" ino=16328 res=1 errno=0 11:35:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4000000) [ 609.089492][ T32] audit: type=1804 audit(1608118554.914:571): pid=13200 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/165/bus" dev="sda1" ino=16328 res=1 errno=0 [ 609.115446][ T32] audit: type=1800 audit(1608118554.914:572): pid=13200 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16328 res=0 errno=0 11:35:55 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$KVM_SIGNAL_MSI(r2, 0x4020aea5, &(0x7f0000000000)={0x0, 0x1, 0x4, 0x42, 0x9}) 11:35:55 executing program 5: pipe2(&(0x7f0000003dc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, 0x0, 0x0) 11:35:55 executing program 2: openat$null(0xffffffffffffff9c, 0x0, 0x410000, 0x0) 11:35:56 executing program 3: r0 = semget$private(0x0, 0x4, 0x0) semctl$SEM_STAT(r0, 0x3, 0x12, &(0x7f0000000680)=""/4096) 11:35:56 executing program 1: ioctl$EVIOCSABS20(0xffffffffffffffff, 0x401845e0, 0x0) 11:35:56 executing program 5: waitid(0x2, 0x0, 0x0, 0x0, 0x0) 11:35:56 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc088}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}, @IFLA_BR_FORWARD_DELAY={0x8}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc}]}}}]}, 0x50}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) 11:35:56 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00000002c0)) 11:35:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0xc000) 11:35:56 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) pipe2(&(0x7f0000000000), 0x100800) sendfile(r1, r0, 0x0, 0x2) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) 11:35:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x4000) 11:35:57 executing program 5: pipe2(&(0x7f0000003680)={0xffffffffffffffff}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) [ 611.610801][ T32] kauditd_printk_skb: 6 callbacks suppressed [ 611.610883][ T32] audit: type=1800 audit(1608118557.534:579): pid=13255 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16351 res=0 errno=0 [ 611.749490][ T32] audit: type=1804 audit(1608118557.624:580): pid=13255 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/167/bus" dev="sda1" ino=16351 res=1 errno=0 [ 611.775440][ T32] audit: type=1800 audit(1608118557.624:581): pid=13255 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16351 res=0 errno=0 11:35:57 executing program 2: r0 = socket$inet_icmp(0x2, 0x2, 0x88) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000000)) 11:35:57 executing program 1: semget$private(0x0, 0x2, 0x80) [ 611.796040][ T32] audit: type=1804 audit(1608118557.654:582): pid=13255 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/167/bus" dev="sda1" ino=16351 res=1 errno=0 [ 611.820277][ T32] audit: type=1800 audit(1608118557.654:583): pid=13255 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16351 res=0 errno=0 11:35:57 executing program 3: openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x42200, 0x0) 11:35:58 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc088}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}, @IFLA_BR_FORWARD_DELAY={0x8}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc}]}}}]}, 0x50}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) 11:35:58 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) r2 = syz_mount_image$hpfs(&(0x7f0000000000)='hpfs\x00', &(0x7f0000000040)='./bus\x00', 0x3, 0x4, &(0x7f0000000280)=[{&(0x7f0000000080)="cb873bbc26fb000c025ef5a2d059", 0xe, 0x80000000}, {&(0x7f0000000100)="35880fe585044f28df4b0f64625735973c9b5e0e8582cc23af07d50a543ace4e217ee357ad0553140290ee58dc7e8acf1265200287c818fe486ff868ae752fd853101d681d54de71fca9350064", 0x4d, 0x40}, {&(0x7f0000000180)="80f34d374b2b26d4e4dfbad633f007aad598622d78ec2358cfa04c171a71221a6dc94f9eb3c9f6ca0c8a09220b0a9483ae1d9a7768aff234641eb7c3a593edffa0320b5d65e4064bc1149b50655876094dd58fd3e315443f4fb0aaa09f574d23bb20af3ec23fd66362377b0c4c", 0x6d, 0x112}, {&(0x7f0000000200)="e8a897707014204f41de2cd9bc3b6cf870636bf865af579fda343ceb93b8c469d6954f8767f335c1e247a15a8a4199c1d122f0768df87002d6ee0bb002d2", 0x3e, 0x3}], 0x123885, &(0x7f00000002c0)={[], [{@appraise_type='appraise_type=imasig'}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':#$'}}, {@fsuuid={'fsuuid', 0x3d, {[0x33, 0x32, 0x61, 0x34, 0x38, 0x61, 0x31, 0x36], 0x2d, [0x64, 0x33, 0x64, 0x61], 0x2d, [0x35, 0x34, 0x39, 0x35], 0x2d, [0x62, 0x1b, 0x31, 0x62], 0x2d, [0x61, 0x30, 0x62, 0x31, 0x35, 0x32, 0x36, 0x33]}}}, {@appraise_type='appraise_type=imasig'}, {@pcr={'pcr', 0x3d, 0x1c}}]}) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r2, 0x80089419, &(0x7f0000000380)) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r3 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r3, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) 11:35:58 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f00000004c0)='/dev/vcs#\x00', 0x5286, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, 0x0, 0x0) 11:35:58 executing program 1: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendmsg$GTP_CMD_DELPDP(r0, 0x0, 0x0) [ 612.507707][ T32] audit: type=1800 audit(1608118558.434:584): pid=13271 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16357 res=0 errno=0 11:35:58 executing program 2: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmat(r0, &(0x7f0000ffd000/0x2000)=nil, 0x4000) 11:35:58 executing program 3: pipe2(&(0x7f0000003680)={0xffffffffffffffff}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, 0x0, 0x0) 11:35:59 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x101000, 0x0) 11:35:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x4) 11:35:59 executing program 1: syz_emit_ethernet(0x2c, &(0x7f00000002c0)=ANY=[], 0x0) 11:35:59 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x108) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f) ioctl$NBD_DO_IT(r2, 0xab03) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r3 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r3, 0x0, 0x8000fffffffe) r4 = openat$procfs(0xffffff9c, &(0x7f0000000100)='/proc/vmallocinfo\x00', 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(r4, 0x2271, &(0x7f00000001c0)=0x1) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r5 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendmmsg$inet(r5, &(0x7f0000000080)=[{{&(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10, 0x0}}, {{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0xf, 0x0}}], 0x2, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r5, 0x8008f512, &(0x7f0000000000)) 11:35:59 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc088}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}, @IFLA_BR_FORWARD_DELAY={0x8}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc}]}}}]}, 0x50}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) 11:35:59 executing program 3: r0 = getpid() sched_setaffinity(r0, 0x8, &(0x7f0000000000)=0x9) 11:35:59 executing program 2: pipe2(&(0x7f0000003680)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, 0x0) 11:35:59 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendto(r0, &(0x7f0000000040)='#', 0x1, 0x0, 0x0, 0x0) [ 614.345159][ T9499] Bluetooth: hci4: command 0x0406 tx timeout [ 614.574003][ T32] audit: type=1800 audit(1608118560.444:585): pid=13308 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16381 res=0 errno=0 11:36:00 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000001140)=""/233) 11:36:00 executing program 2: sched_setscheduler(0x0, 0x5, &(0x7f0000000040)) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000340)=[0x0, 0x0, &(0x7f0000000240)='sysfs\x00', &(0x7f00000002c0)='\x00', &(0x7f0000000300)='\x00'], &(0x7f00000004c0)=[&(0x7f0000000380)='\x00', 0x0, &(0x7f0000000440)='/@\x00', &(0x7f0000000480)='sysfs\x00']) 11:36:00 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f00000000c0)) 11:36:00 executing program 3: pipe2(&(0x7f0000000480)={0xffffffffffffffff}, 0x0) sendmsg$NL80211_CMD_DEL_KEY(r0, 0x0, 0x0) 11:36:01 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc088}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x3}, @IFLA_BR_FORWARD_DELAY={0x8}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc}]}}}]}, 0x50}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) [ 615.130614][ T32] audit: type=1804 audit(1608118561.054:586): pid=13313 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/169/bus" dev="sda1" ino=16381 res=1 errno=0 [ 615.157227][ T32] audit: type=1800 audit(1608118561.054:587): pid=13313 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16381 res=0 errno=0 11:36:01 executing program 1: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) [ 615.462705][ T32] audit: type=1804 audit(1608118561.204:588): pid=13308 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/169/bus" dev="sda1" ino=16381 res=1 errno=0 11:36:01 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r2 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendmmsg$inet(r2, &(0x7f0000000080)=[{{&(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10, 0x0}}, {{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0xf, 0x0}}], 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@mss, @timestamp, @window={0x3, 0x8001}, @mss={0x2, 0x30000000}, @window={0x3, 0x9, 0xfa}, @mss={0x2, 0x4}], 0x6) r3 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r3, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) 11:36:01 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000041c0)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x0, @dev}, 0x1c, 0x0}}], 0x1, 0x4000000) 11:36:01 executing program 5: openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x20a00, 0x0) 11:36:02 executing program 1: prlimit64(0x0, 0x7, &(0x7f0000000040), 0x0) socket$unix(0x1, 0x2, 0x0) [ 616.243501][T13338] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 11:36:02 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc088}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x3}, @IFLA_BR_FORWARD_DELAY={0x8}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc}]}}}]}, 0x50}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) 11:36:02 executing program 3: futex(&(0x7f00000000c0), 0x81, 0x0, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140), 0x0) 11:36:02 executing program 5: syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x0, 0x0) [ 617.323795][ T32] kauditd_printk_skb: 5 callbacks suppressed [ 617.323882][ T32] audit: type=1804 audit(1608118563.184:594): pid=13343 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/170/bus" dev="sda1" ino=16374 res=1 errno=0 [ 617.354195][ T32] audit: type=1800 audit(1608118563.184:595): pid=13343 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16374 res=0 errno=0 [ 617.374235][ T32] audit: type=1804 audit(1608118563.184:596): pid=13350 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/170/bus" dev="sda1" ino=16374 res=1 errno=0 11:36:03 executing program 2: timer_create(0x0, 0x0, &(0x7f0000000380)=0x0) timer_settime(r0, 0x0, &(0x7f0000000200)={{}, {0x77359400}}, 0x0) 11:36:03 executing program 1: pipe2(&(0x7f0000003680)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x0, 0x0, 0x0) 11:36:03 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) openat$proc_capi20ncci(0xffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x14040, 0x0) r3 = accept4$tipc(r0, &(0x7f0000000040)=@id, &(0x7f0000000080)=0x10, 0x0) sendfile(r0, r3, 0x0, 0xffff) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) 11:36:03 executing program 3: inotify_init1(0x400) 11:36:03 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc088}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x3}, @IFLA_BR_FORWARD_DELAY={0x8}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc}]}}}]}, 0x50}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) 11:36:03 executing program 5: mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil) [ 618.158125][ T32] audit: type=1800 audit(1608118564.084:597): pid=13368 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16378 res=0 errno=0 11:36:04 executing program 3: timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, r0+10000000}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = memfd_create(&(0x7f0000000340)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x948\xe1\x01\xe5`iq@Fse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf$\x89\x00\x00\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9d\x18\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88\xf0\x1e\r\xd5\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j%\xa5\xcc\xa6\x86\xb2\xdeY\x17yX\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd7\x1c]ImZlU\".\x18)\xcf\x1am\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xcew\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf\x00\x80\x00'/246, 0x0) fcntl$setlease(r2, 0x400, 0x1) fcntl$setown(r2, 0x8, 0x0) execveat(r2, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) [ 618.691893][ T32] audit: type=1804 audit(1608118564.124:598): pid=13368 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/171/bus" dev="sda1" ino=16378 res=1 errno=0 [ 618.716880][ T32] audit: type=1800 audit(1608118564.124:599): pid=13368 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16378 res=0 errno=0 11:36:04 executing program 1: prlimit64(0x0, 0x7, &(0x7f0000000040), 0x0) socketpair(0x1, 0x5, 0x0, 0x0) 11:36:04 executing program 5: openat$tun(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/net/tun\x00', 0xc4000, 0x0) 11:36:04 executing program 2: openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x40, 0x0) [ 618.917734][ T32] audit: type=1804 audit(1608118564.834:600): pid=13370 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/171/bus" dev="sda1" ino=16378 res=1 errno=0 [ 619.108315][ T32] audit: type=1804 audit(1608118564.924:601): pid=13378 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/171/bus" dev="sda1" ino=16378 res=1 errno=0 [ 619.135687][ T32] audit: type=1800 audit(1608118564.924:602): pid=13378 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16378 res=0 errno=0 11:36:05 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000100)=[{0x0, 0x0, {0x3, 0x1, 0x1}, {0x0, 0xff}, 0xfd, 0x2}, {0x3, 0x0, {0x1, 0x1, 0x1}, {0x0, 0x0, 0x3}, 0xfd, 0x2}, {0x2, 0x3, {0x3, 0x1, 0x5}, {0x1, 0x1, 0x4}, 0xff}, {0x2, 0x1, {0x2, 0xf0}, {0x1, 0xf, 0x4}, 0x2, 0x1}, {0x2, 0x2, {0x2, 0xff, 0x1}, {0x1, 0x1, 0x1}, 0xff, 0x2}, {0x2, 0x1, {0x2, 0xff, 0x3}, {0x0, 0x1, 0x3}, 0xff, 0xfe}, {0x1, 0x1, {0x0, 0xf0, 0x4}, {0x2, 0x0, 0x2}, 0xff, 0xfd}, {0x2, 0x2, {}, {0x0, 0x0, 0x4}, 0xfe, 0x1}, {0x3, 0x2, {0x2, 0x0, 0x2}, {0x0, 0xf0}, 0x1, 0xfd}, {0x1, 0x1, {0x0, 0x1, 0x4}, {0x2, 0x1, 0x4}}], 0x118) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x140) ftruncate(r1, 0x1000) r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0xc000, 0x0) lseek(r1, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r3 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040)={'vxcan1', 0x32, 0x36}, 0x9) sendfile(r2, r3, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) 11:36:05 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc088}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x3}, @IFLA_BR_FORWARD_DELAY={0x8}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc}]}}}]}, 0x50}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) 11:36:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x24000000) 11:36:05 executing program 5: prlimit64(0x0, 0x7, &(0x7f0000000040), 0x0) socket$packet(0x11, 0x3, 0x300) 11:36:05 executing program 2: pipe2(&(0x7f0000003680)={0xffffffffffffffff}, 0x0) sendmsg$NL80211_CMD_SET_PMK(r0, 0x0, 0x0) 11:36:06 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, &(0x7f0000000140)) [ 620.175430][ T32] audit: type=1800 audit(1608118565.974:603): pid=13398 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16368 res=0 errno=0 11:36:06 executing program 1: memfd_create(&(0x7f0000000000)='/dev/vcs#\x00', 0x3) 11:36:06 executing program 5: pipe2(&(0x7f0000003680)={0xffffffffffffffff}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, 0x0, 0x0) 11:36:06 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$VT_GETMODE(r2, 0x5601, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) 11:36:06 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc088}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x3}, @IFLA_BR_FORWARD_DELAY={0x8}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc}]}}}]}, 0x50}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) 11:36:06 executing program 3: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) 11:36:06 executing program 2: syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x0, 0x82042) 11:36:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x4000) 11:36:07 executing program 5: timer_create(0x2, &(0x7f0000000340)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000380)) 11:36:07 executing program 2: timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, r0+10000000}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000740)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = memfd_create(&(0x7f0000000340)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x948\xe1\x01\xe5`iq@Fse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf$\x89\x00\x00\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9d\x18\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88\xf0\x1e\r\xd5\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j%\xa5\xcc\xa6\x86\xb2\xdeY\x17yX\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd7\x1c]ImZlU\".\x18)\xcf\x1am\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xcew\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf\x00\x80\x00'/246, 0x0) fcntl$setlease(r2, 0x400, 0x1) fcntl$setown(r2, 0x8, 0x0) execveat(r2, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) socket$inet_udp(0x2, 0x2, 0x0) 11:36:08 executing program 3: pipe2(&(0x7f0000003dc0)={0xffffffffffffffff}, 0x0) getpeername(r0, 0x0, 0x0) 11:36:08 executing program 1: ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, 0x0) 11:36:08 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) r3 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendmmsg$inet(r3, &(0x7f0000000080)=[{{&(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10, 0x0}}, {{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0xf, 0x0}}], 0x2, 0x0) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000000)={0x7f, 0x5, 0x10000}) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) 11:36:08 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @rc={0x1f, @none}, @rc={0x1f, @fixed}, @nl=@proc}) [ 622.722194][ T32] kauditd_printk_skb: 10 callbacks suppressed [ 622.722286][ T32] audit: type=1800 audit(1608118568.644:614): pid=13445 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16065 res=0 errno=0 [ 623.069199][ T32] audit: type=1804 audit(1608118568.684:615): pid=13448 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/174/bus" dev="sda1" ino=16065 res=1 errno=0 [ 623.093669][ T32] audit: type=1800 audit(1608118568.684:616): pid=13448 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16065 res=0 errno=0 11:36:09 executing program 1: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, 0x0, 0x0) 11:36:09 executing program 3: prlimit64(0x0, 0x7, &(0x7f0000000040), 0x0) syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) 11:36:09 executing program 2: timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, r0+10000000}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = memfd_create(&(0x7f0000000340)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x948\xe1\x01\xe5`iq@Fse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf$\x89\x00\x00\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9d\x18\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88\xf0\x1e\r\xd5\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j%\xa5\xcc\xa6\x86\xb2\xdeY\x17yX\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd7\x1c]ImZlU\".\x18)\xcf\x1am\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xcew\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf\x00\x80\x00'/246, 0x0) fcntl$setlease(r2, 0x400, 0x1) fcntl$setown(r2, 0x8, 0x0) execveat(r2, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) ptrace$peeksig(0x4209, 0x0, 0x0, 0x0) 11:36:09 executing program 5: timer_create(0x0, 0x0, &(0x7f0000000380)=0x0) timer_delete(r0) [ 623.545464][ T32] audit: type=1804 audit(1608118569.364:617): pid=13445 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/174/bus" dev="sda1" ino=16065 res=1 errno=0 [ 623.569428][ T32] audit: type=1804 audit(1608118569.374:618): pid=13450 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/174/bus" dev="sda1" ino=16065 res=1 errno=0 11:36:09 executing program 4: timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, r0+10000000}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = memfd_create(&(0x7f0000000340)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x948\xe1\x01\xe5`iq@Fse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf$\x89\x00\x00\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9d\x18\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88\xf0\x1e\r\xd5\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j%\xa5\xcc\xa6\x86\xb2\xdeY\x17yX\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd7\x1c]ImZlU\".\x18)\xcf\x1am\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xcew\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf\x00\x80\x00'/246, 0x0) fcntl$setlease(r2, 0x400, 0x1) fcntl$setown(r2, 0x8, 0x0) execveat(r2, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0) [ 623.593927][ T32] audit: type=1800 audit(1608118569.374:619): pid=13450 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16065 res=0 errno=0 11:36:09 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 11:36:10 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r0, 0x0, 0x0, 0x0, &(0x7f0000001f00)) 11:36:10 executing program 1: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x402, 0x0) 11:36:10 executing program 5: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0x1d, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000070011000e8665fc"], &(0x7f0000000640)='GPL\x00', 0x5, 0xf2, &(0x7f0000000680)=""/242, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 11:36:10 executing program 4: r0 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) [ 624.525555][ T32] audit: type=1800 audit(1608118570.454:620): pid=13470 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15827 res=0 errno=0 [ 624.688282][ T32] audit: type=1804 audit(1608118570.504:621): pid=13470 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/175/bus" dev="sda1" ino=15827 res=1 errno=0 [ 624.713122][ T32] audit: type=1800 audit(1608118570.514:622): pid=13470 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15827 res=0 errno=0 11:36:10 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x6) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0xd, 0xa, 0x201}, 0x14}}, 0x0) 11:36:11 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x891d, &(0x7f0000000100)={'wlan0\x00'}) 11:36:11 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_lsm={0x1d, 0x1, &(0x7f00000005c0)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x7a}], &(0x7f0000000640)='GPL\x00', 0x5, 0xf2, &(0x7f0000000680)=""/242, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 625.308021][ T32] audit: type=1804 audit(1608118571.234:623): pid=13471 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/175/bus" dev="sda1" ino=15827 res=1 errno=0 11:36:11 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) 11:36:11 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x89e0, 0x0) 11:36:11 executing program 2: r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x5411, 0x0) 11:36:11 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) r3 = open(&(0x7f0000000280)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r4 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendmmsg$inet(r4, &(0x7f0000000080)=[{{&(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10, 0x0}}, {{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0xf, 0x0}}], 0x2, 0x0) fcntl$setown(r4, 0x8, r2) dup3(r3, r3, 0x71ddbc2ece9068dc) ioctl$DRM_IOCTL_MODE_GETENCODER(r3, 0xc01464a6, &(0x7f0000000040)={0x80000001}) r5 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r5, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) 11:36:12 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) 11:36:12 executing program 5: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x2e4}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 11:36:12 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x5}, 0x40) 11:36:12 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000540), 0x8) 11:36:12 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) readv(r0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/131, 0x83}], 0x1) 11:36:12 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8921, &(0x7f0000000100)={'wlan0\x00'}) 11:36:12 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8922, &(0x7f0000000100)={'wlan0\x00'}) 11:36:13 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x0, 0xc, 0x3}, 0x14}}, 0x0) 11:36:13 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x40000140) 11:36:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x20}}, 0x0) 11:36:13 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) creat(&(0x7f0000000140)='./bus\x00', 0x32) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) open(&(0x7f00000003c0)='./bus\x00', 0x18982, 0x40) r2 = open(&(0x7f0000000240)='./bus\x00', 0x4050, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = socket(0x40000000002, 0x2, 0x2) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendmmsg$inet(r3, &(0x7f0000000080)=[{{&(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10, 0x0}}, {{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0xf, 0x0}}], 0x2, 0x0) clone(0x100, &(0x7f0000000280)="bbff779ea3fd10776bc58c67585cb1d99168b1d23464cf89c1c5be5e48f55e8da042f4323e3b9a1b39ace33e1f5a1afb7d43f05f83ffffd53ed8b325ef0a6115255c09cfd11c6318a3d028743a183f71c11f3779619527980f4e21cc889a835ba80f661830122c9cb28275a234e722c36f151ae07e8e97dc48d24872f1f318e2b25ac18355c0a0e68521e8db2580fd6c46cbd3df8546ca1358f526292308f7aa77b0ae8f338f9c576c", &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000340)="da5c400e328436d7e32f679528c5a9bb8b2eef86ecbb1d2348f84ab8d7415621ea9306c08c83f623e6cf9c9b1c81f330d1be23dc1519a4539ca436d2339c387202") openat2(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000200)={0x1c1683, 0x1c1}, 0x18) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) [ 627.436557][T13519] wlan0: mtu less than device minimum 11:36:13 executing program 3: pipe(&(0x7f0000000000)) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000003, 0x11, r0, 0x0) 11:36:13 executing program 1: connect$caif(0xffffffffffffffff, 0x0, 0x0) 11:36:13 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet6(r0, 0x0, 0x0) [ 627.910222][ T32] kauditd_printk_skb: 7 callbacks suppressed [ 627.910295][ T32] audit: type=1800 audit(1608118573.834:631): pid=13529 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15828 res=0 errno=0 11:36:14 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) accept4$inet(r0, 0x0, 0x0, 0x0) [ 628.101435][ T32] audit: type=1804 audit(1608118573.914:632): pid=13529 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/177/bus" dev="sda1" ino=15828 res=1 errno=0 [ 628.127495][ T32] audit: type=1800 audit(1608118573.914:633): pid=13529 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15828 res=0 errno=0 11:36:14 executing program 4: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) 11:36:14 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) r2 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendmmsg$inet(r2, &(0x7f0000000080)=[{{&(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10, 0x0}}, {{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0xf, 0x0}}], 0x2, 0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) r3 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r3, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) 11:36:14 executing program 3: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, 0x0, 0x0) 11:36:14 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x30, 0x0, 0xb, 0x3, 0x0, 0x0, {}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x10, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x30}}, 0x0) 11:36:14 executing program 5: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r0, 0x89e2, &(0x7f0000000100)) 11:36:14 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) connect(r0, 0x0, 0x0) 11:36:14 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x0, 0x3, 0x3}, 0x14}}, 0x0) [ 628.971470][ T32] audit: type=1800 audit(1608118574.894:634): pid=13551 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16003 res=0 errno=0 [ 629.108869][ T32] audit: type=1804 audit(1608118574.984:635): pid=13551 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/178/bus" dev="sda1" ino=16003 res=1 errno=0 [ 629.133424][ T32] audit: type=1800 audit(1608118574.984:636): pid=13551 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16003 res=0 errno=0 [ 629.153356][ T32] audit: type=1804 audit(1608118575.014:637): pid=13553 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/178/bus" dev="sda1" ino=16003 res=1 errno=0 [ 629.177531][ T32] audit: type=1800 audit(1608118575.014:638): pid=13553 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16003 res=0 errno=0 11:36:15 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8924, &(0x7f0000000100)={'wlan0\x00'}) 11:36:15 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x210080, 0x1ec) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) 11:36:15 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x58, 0x0, 0x9, 0x3, 0x0, 0x0, {}, [@NFCTH_PRIV_DATA_LEN={0x8}, @NFCTH_NAME={0x3c, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}, @NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @broadcast}}}]}]}, 0x58}}, 0x0) 11:36:15 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280), 0xc, 0x0}, 0x0) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000027000511d25a802a8c63940d0424fc60040012400a001100022f000037153e370a000180046f0100d1bd", 0x2e}], 0x1}, 0x0) 11:36:15 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000140)) 11:36:15 executing program 4: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_lsm={0x1d, 0x7d00, &(0x7f00000005c0)=@raw=[@func], &(0x7f0000000640)='GPL\x00', 0x5, 0xf2, &(0x7f0000000680)=""/242, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 11:36:15 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000180)) write$tun(r1, &(0x7f0000000b80)={@void, @void, @ipx={0xffff, 0x1e, 0x17, 0x14, {@broadcast, @current, 0x2}, {@current, @broadcast}}}, 0x1e) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f00000004c0)={0x4, &(0x7f00000001c0)=[{@fixed}, {}, {@fixed}, {@fixed}]}) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, &(0x7f0000000000)=0xffffffe1, 0x4) unshare(0x60020480) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x7800, 0x10, 0x10001, 0x4, {{0x8, 0x4, 0x1, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @local, @remote, {[@lsrr={0x83, 0xb, 0xb9, [@initdev={0xac, 0x1e, 0x0, 0x0}, @empty]}]}}}}}) [ 629.905880][ T32] audit: type=1804 audit(1608118575.834:639): pid=13570 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/179/bus" dev="sda1" ino=15940 res=1 errno=0 [ 629.930484][ T32] audit: type=1800 audit(1608118575.834:640): pid=13570 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15940 res=0 errno=0 11:36:16 executing program 5: select(0x40, &(0x7f0000000080), 0x0, &(0x7f0000000100)={0x3}, &(0x7f0000000140)) 11:36:16 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x1000000000000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$vcsu(&(0x7f0000000080)='/dev/vcsu#\x00', 0x3ff, 0x28100) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, 0xffffffffffffffff) dup(0xffffffffffffffff) write(r3, &(0x7f00000001c0), 0xffffff0f) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) [ 630.337555][T13577] IPVS: ftp: loaded support on port[0] = 21 11:36:16 executing program 2: socket$caif_stream(0x25, 0x1, 0x5) 11:36:16 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f00000006c0), 0x4) 11:36:16 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) r2 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendmmsg$inet(r2, &(0x7f0000000080)=[{{&(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10, 0x0}}, {{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0xf, 0x0}}], 0x2, 0x0) r3 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendmmsg$inet(r3, &(0x7f0000000080)=[{{&(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10, 0x0}}, {{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0xf, 0x0}}], 0x2, 0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) r4 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r4, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) [ 631.021304][T13580] IPVS: ftp: loaded support on port[0] = 21 11:36:17 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c00000000406ffffffffffdd8250ab00e0ffffff050004e5010400000900020073797a3000f200000500010006"], 0x54}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x447fe7, 0x0) 11:36:17 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8971, &(0x7f0000000100)={'wlan0\x00'}) 11:36:17 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000180)) write$tun(r1, &(0x7f0000000b80)={@void, @void, @ipx={0xffff, 0x1e, 0x17, 0x14, {@broadcast, @current, 0x2}, {@current, @broadcast, 0x40}}}, 0x1e) accept4$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2711, @my=0x1}, 0x10, 0x41000) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f00000004c0)={0x4, &(0x7f00000001c0)=[{@fixed}, {}, {@fixed}, {@fixed}]}) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, &(0x7f0000000000)=0xffffffe1, 0x4) unshare(0x60020480) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x0, 0x10, 0x10001, 0x4, {{0xa, 0x4, 0x0, 0x11, 0x28, 0x66, 0x0, 0x9, 0x2f, 0x0, @local, @remote, {[@lsrr={0x83, 0x13, 0xb9, [@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) [ 631.685520][T13638] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.5'. 11:36:17 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 11:36:17 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_timeval(r0, 0x1, 0x14, 0x0, &(0x7f00000004c0)) [ 632.233444][T13646] IPVS: ftp: loaded support on port[0] = 21 11:36:18 executing program 2: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x0, 0x3938700}, &(0x7f0000000440)={&(0x7f0000000400), 0x8}) 11:36:18 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c00000000406ffffffffffdd8250ab00e0ffffff050004e5010400000900020073797a3000f200000500010006"], 0x54}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x447fe7, 0x0) 11:36:18 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x1224, 0x4, 0x9, 0x101, 0x70bd2a, 0x25dfdbfb, {0xa, 0x0, 0x3}, [@typed={0xc, 0x6b, 0x0, 0x0, @u64=0x40}, @nested={0x1195, 0x89, 0x0, 0x1, [@typed={0x14, 0x39, 0x0, 0x0, @ipv6=@ipv4={[], [], @multicast1}}, @typed={0x8, 0x5a, 0x0, 0x0, @u32=0x3f}, @typed={0xc, 0x7a, 0x0, 0x0, @u64=0x7}, @generic="1cdf1a13bf6163495f187219185effddfdb6005c896f6c0c3f77238eefe2796f09391749aeb150acbd7328fb9cfda5103457eacc6f39022db6dae0795e37999dfd2c0d60a167f15877633ec93459f91179a1759e02e327b9bc3fcb6779725ebb0388f8a4eba9f90aa87d598a657ff0de110f4a808a1fc2d65c", @typed={0x1004, 0x3e, 0x0, 0x0, @binary="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"}, @generic="50b9be5bd4b4326e2e512e11a10002e5518c1f00cdf429fb0ceffdd8f8cc56ffc1e2cb40101d6ae3bd7b114cd66193f369e18d6b5f727ce8c8bdba2c2ad30a8df37deb04e5ba2e866867a6f2dea8242943a92d28a4af121204fec483c6ba5c161143cfab1f6ac12e6a8ac6962b8f60aa449addc65a069c96b5bfea393a373df65222aa745a482661715cb3453c35adcb60abd6c915b2debb5ed0308a806f5f58e224b3f278ba3df6bd77f3ca56491a3f54794aa3f1e3eed6d0ba877ba2d3eec743e56e033fdad00b", @typed={0x4, 0x3}, @typed={0x14, 0x2d, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @typed={0xa, 0x24, 0x0, 0x0, @str='vlan0\x00'}]}, @typed={0x4, 0x45}, @typed={0xc, 0x6, 0x0, 0x0, @u64=0x3}, @generic="8b747161d3c8158b67080ecfad686082190cb6e137708e5fb814318ed58c639465996f11ee", @generic="1e789df7ebe45df43fba6a41af312eb6af9f8de9e7e8e1434f376b2552251bff0adb016a55fffe547d792f351285596b015e93b5e9d6"]}, 0x1224}, 0x1, 0x0, 0x0, 0x4000097}, 0x20008010) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000040)={0x0, 0x400}, &(0x7f0000000080)=0x8) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x1, 'vlan0\x00', {}, 0x4}) [ 632.994655][T13675] IPVS: ftp: loaded support on port[0] = 21 11:36:19 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f) ioctl$KDGKBSENT(r2, 0x4b48, &(0x7f00000002c0)={0x0, "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"}) r3 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r3, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) r4 = open(&(0x7f0000000280)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r4, 0x0) r5 = dup3(r4, r4, 0x71ddbc2ece9068dc) ioctl$CHAR_RAW_RAGET(r5, 0x1263, &(0x7f00000005c0)) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc00c64b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f0000000100)={r6, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000080)=[0x0]}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) 11:36:19 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvfrom$inet6(r0, 0x0, 0x0, 0x10161, 0x0, 0x0) 11:36:19 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000480), &(0x7f00000004c0)=0x10) [ 633.409201][T13701] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.5'. [ 633.709177][ T32] kauditd_printk_skb: 9 callbacks suppressed [ 633.709245][ T32] audit: type=1800 audit(1608118579.634:650): pid=13707 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16368 res=0 errno=0 11:36:19 executing program 4: sendto$llc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) [ 634.144934][ T32] audit: type=1804 audit(1608118580.074:651): pid=13708 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/181/bus" dev="sda1" ino=16368 res=1 errno=0 [ 634.169260][ T32] audit: type=1800 audit(1608118580.074:652): pid=13708 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16368 res=0 errno=0 11:36:20 executing program 5: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_lsm={0x1d, 0x1, &(0x7f00000005c0)=@raw=[@func], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [0x2], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 634.466536][ T32] audit: type=1804 audit(1608118580.144:653): pid=13711 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/181/bus" dev="sda1" ino=16368 res=1 errno=0 [ 634.490308][ T32] audit: type=1804 audit(1608118580.244:654): pid=13708 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/181/bus" dev="sda1" ino=16368 res=1 errno=0 [ 634.516532][ T32] audit: type=1800 audit(1608118580.244:655): pid=13708 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16368 res=0 errno=0 [ 634.536803][ T32] audit: type=1804 audit(1608118580.244:656): pid=13710 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/181/bus" dev="sda1" ino=16368 res=1 errno=0 11:36:20 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) r2 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendmmsg$inet(r2, &(0x7f0000000080)=[{{&(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10, 0x0}}, {{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0xf, 0x0}}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x6, 0x10010, r2, 0xed976000) lseek(r1, 0x0, 0x2) r3 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) lseek(r3, 0x0, 0x4) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r4 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r4, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) 11:36:20 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) ppoll(&(0x7f0000001200)=[{r0, 0x1}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') 11:36:21 executing program 5: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)={&(0x7f0000000200)='./file0\x00'}, 0x10) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000640)={&(0x7f0000000600)='./file0\x00'}, 0x10) 11:36:21 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$inet6(r0, 0x0, 0x0, 0x0) 11:36:21 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_lsm={0x8, 0x1, &(0x7f00000005c0)=@raw=[@func], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 635.202839][ T32] audit: type=1800 audit(1608118581.024:657): pid=13724 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16193 res=0 errno=0 [ 635.223229][ T32] audit: type=1804 audit(1608118581.094:658): pid=13724 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/182/bus" dev="sda1" ino=16193 res=1 errno=0 11:36:21 executing program 3: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000100)) pipe(&(0x7f00000003c0)) [ 635.247326][ T32] audit: type=1800 audit(1608118581.094:659): pid=13724 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16193 res=0 errno=0 11:36:21 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x8, 0x0, &(0x7f00000000c0)) 11:36:22 executing program 1: syz_emit_ethernet(0x3e, &(0x7f0000000180)={@link_local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "32a59e", 0x8, 0x0, 0x0, @rand_addr=' \x01\x00', @private2, {[@hopopts={0x3a}]}}}}}, 0x0) 11:36:22 executing program 5: getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f00000000c0)) r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000180)) 11:36:22 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000040)={@private0, 0x1000004b}) 11:36:22 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x5, &(0x7f0000000040)=0x2, 0x4) 11:36:22 executing program 0: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000000080)=[{{&(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10, 0x0}}, {{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0xf, 0x0}}], 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000280)={0x4, {{0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, [], 0x17}, 0x55}}, 0x1}, 0x8c) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x1000) lseek(r2, 0x0, 0x2) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) r3 = socket(0x40000000002, 0x3, 0x2) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000140)={0x2}) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendmmsg$inet(r3, &(0x7f0000000080)=[{{&(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10, 0x0}}, {{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0xf, 0x0}}], 0x2, 0x0) sendfile(r2, r3, 0x0, 0xffffffde) sendfile(r1, r1, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x8, 0x1, 0x0, 0xffffffffffffffff}) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000040)={0x6, 0xa3, 0x2, 0x5, 0x6}) 11:36:22 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000080)) 11:36:22 executing program 1: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) accept4$inet6(r0, 0x0, 0x0, 0x0) 11:36:22 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) 11:36:23 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r1, 0xba9}, 0x14}}, 0x0) 11:36:23 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg(r0, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x0) 11:36:23 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) 11:36:23 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000340), 0x4) 11:36:23 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {}, {0x20, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'veth0_to_team\x00'}}}}}, 0x3c}}, 0x0) 11:36:23 executing program 2: syz_emit_ethernet(0xd2, &(0x7f0000000640)={@local, @broadcast, @void, {@mpls_uc={0x8847, {[], @ipv6=@udp={0x0, 0x6, "1b05f4", 0x9c, 0x11, 0x0, @private0, @rand_addr=' \x01\x00', {[], {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "a5e55b5197ff27fb05c9434ff1447732f7c0976d42c96cc53ea18398c4299fe0", "fdfb1f74ff1ab4c9244a3c05cc9c4e49f5dabd693244a96222308824f1799a32b6028b7e0528c932295eeb3d5ebb98a5", "ae03bf7325c6eb9727e7d942fcc732393f273f66f4fc68dfa8bfc60e", {"538af02ccca78a758d424abd2ac345c2", "33eb5035f4b2022f62bfc7e434867b37"}}}}}}}}}, 0x0) 11:36:23 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000200), 0x4) [ 638.271136][T13781] tipc: Started in network mode [ 638.276564][T13781] tipc: Own node identity aaaaaaaaaa1f, cluster identity 4711 [ 638.287212][T13781] tipc: Enabled bearer , priority 0 11:36:24 executing program 4: socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x2c, &(0x7f0000000000)={@link_local, @remote, @void, {@ipx={0x8137, {0xffff, 0x1e, 0x0, 0x0, {@random, @broadcast}, {@broadcast, @broadcast}}}}}, 0x0) [ 638.520974][T13786] tipc: Enabling of bearer rejected, already enabled 11:36:24 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'tunl0\x00', &(0x7f0000000280)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote}}}}) 11:36:24 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x17, &(0x7f0000001000)={0x0, 0x1000}, 0x4) 11:36:24 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000000), 0x4) 11:36:24 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x1, &(0x7f0000000180)=@raw=[@call], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 11:36:24 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000000080)={0x14, r3, 0x1, 0x0, 0x0, {0x12}}, 0x14}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x54, r3, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r4 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r4, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) [ 639.342799][ T32] kauditd_printk_skb: 14 callbacks suppressed [ 639.352347][ T32] audit: type=1800 audit(1608118585.264:674): pid=13798 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16374 res=0 errno=0 [ 639.403489][ T8492] tipc: 32-bit node address hash set to aaaab500 11:36:25 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom$inet6(r0, 0x0, 0x0, 0x40022022, 0x0, 0x0) 11:36:25 executing program 2: unshare(0x42040600) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000001140)={'batadv0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000001140)={'batadv0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) [ 639.552411][ T32] audit: type=1804 audit(1608118585.344:675): pid=13798 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/185/bus" dev="sda1" ino=16374 res=1 errno=0 [ 639.576924][ T32] audit: type=1800 audit(1608118585.344:676): pid=13798 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16374 res=0 errno=0 11:36:25 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) bind(r0, &(0x7f0000005bc0)=@in={0x2, 0x4e21, @local}, 0x80) 11:36:25 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x3, &(0x7f0000000000), 0x4) 11:36:25 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x0, @udp='udp:syz1\x00'}}}}, 0x34}}, 0x0) [ 640.104277][ T32] audit: type=1804 audit(1608118586.024:677): pid=13801 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/185/bus" dev="sda1" ino=16374 res=1 errno=0 [ 640.210371][T13808] IPVS: ftp: loaded support on port[0] = 21 [ 640.320166][ T32] audit: type=1804 audit(1608118586.114:678): pid=13801 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/185/bus" dev="sda1" ino=16374 res=1 errno=0 [ 640.346585][ T32] audit: type=1800 audit(1608118586.114:679): pid=13801 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16374 res=0 errno=0 11:36:26 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}, &(0x7f0000000140)=0x14) 11:36:26 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r3 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendmmsg$inet(r3, &(0x7f0000000080)=[{{&(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10, 0x0}}, {{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0xf, 0x0}}], 0x2, 0x0) getpeername$inet(r3, &(0x7f0000000000)={0x2, 0x0, @private}, &(0x7f0000000040)=0x10) 11:36:26 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x102) 11:36:26 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000600)={'bond_slave_0'}, 0xf) write$tun(r0, &(0x7f0000000080)={@void, @void, @ipx={0xffff, 0xff2, 0x0, 0x0, {@broadcast, @current}, {@random, @random="0ec99edd9007"}, "f307c351cd3d22b2487bd03314909df39c39a24e6416f1d93eb05a1b1c049e989bb1a0e371257bf2b89bd93e2e324f9d0b5d952d3a5ccd3436ac91899bd92e3a9748ac4f61f2167319c8f1bbe08f0a21295efc97fdeac8be8f83cfb7a0e7c7bb820c9e67c94a0e9ea2a6a1f1fe5cfcf6849462b8986ff5e96dba4ec75fa6b89dbf85cef1c7b779e29fe75cd88208b510f678ab26cba17d0dd516560b05d0d6d4999a5a4a6bb911cdddfa68c3fdf949b78225ce6b8881c8c65d9beb1e3f327bcdb98e0c9e3182d27e7028bac8d026332ce922b6fcb844ae8e70470cbf8c9f405986a121d2acabb36a54117d9d255ead3209f33c2754d63d7eb3e601863ac93bd9d8ff82633b9fb1c44fe4ee6d2b82522c009c409f184454af93f948e2611702f9906b3aa9362be73471438ea6a1084a0f291c4bb5e1ad38f596f8ebe8a99e997b1a2b2c9c9413f7b0e28b97a2a8ca5e88d657897c57c25f5fccd700c16013de2a88eef3271886deb2f1570599b0c188333260815b775beb745baaf764091ee110c369fcd5d22bc5da2390da982b5380db8149431c4f211dbe26ab09b7440810e862f43b75bf57557ebe676bdd43cad5175231b559fd0925aa0d9717f4077d295d3e4ead9a70f63f0dc17f84247600ed3c83d662b0e0afdd995f1ffbf5b58069f25a61b9b908133c2b37efca12cb29f160d00008d302807344b576fbc335e3a9f4b0ceae0e138fd5c5f63e76d28d56ac8cfd72a6f19ebded459bd70c0300dcfe10ec40deecb51b118d3fd3a5f8d39e4a57b72ce1a17ad81dbdf2fc492c7adf218a57f104e402d21a8ee8f0864bfc9b38a844b909bda40e8a9b4801b4e1ce0d5e519099a856ba7a75a7da9c0a1552fd077b642a3c583e095f1c634c73219e4e5a24e5d344f281f34da31035e8269659bbec6e589736329f5ffc87b51a76715a8d17242d99a40f669437871766e9464e2939475e8c395f8815e5018d1f0bc40a855723f1997fa40ba7c751ae8816500474adf1a106450965e0adc80f47e4cb2e9dacc151c8296859927c81bbf77efe6b90606b0688845b862111418dfbd0e3a1fd8bfa2a4a738c144d503f1e3af9bc7e9a2c1a7e3a368fdc563361e25db6040824661b0910d773703b5d6e569fdc2a3409e832a23c973163aa81d44b93329714f8d1f8d8fe8e4d2e4372cf6f9a6e8a28122b7d941958bb3f51cd75e976c015377411a7c71c445c56d3d980366fe064213a5eedd138c19b0e2909a0237f6c2d55f797e79ed47384253ed060f1f3152ae85e8340308825a0b9e8e39bfb1d92c430d4d6179af52b4a295041881e57c340cfe2636faeaaf0676ec5610f88d9c7fd2578b2273a86a4bf3e3b073c0627cfcd4d3eb7b8a54c10da8f8003724813913432143717ed76d971cf40043da3a873384c0a1ef6056e184b8518b8288a723c870e53f355a77b47dcb004df79ad6b3e9ab8b950bdaf84487cb2be5ae856124277e6dbd97ac718aa2dcfea17b2e607d3b6f144a73d7dbaf086510a9a7d6a4b555d94276449ec5c45aa6d8ee1719f5e5e5b8974c8d100ab010fc173f9e9cb32cf51331cc2f92ba22de79005480cecbb0417c1c471834eb9bb024a9b6eb08c3a70bc6232269fccbeeedcac9b68dc461b520a78acaec3c9404f4ca1e330cda91d6ef44c72b67544158bf8ba48d1d422471a2dfcd919902058993ad4c599433c0026d09e2073fd1705646adc16a0fd1a9d2cc504a0dddc6493c4ad1f5b9e54af28c51e2771238afc98ce03273391385b6eaaebf01f838faf24a878d0cbc7b958191acdc5642f4c8fa97e7fe0bd9fd08e74b98ab0479a51e1e0dbcff195056d98b930481f0fdd41572e2854247a0f09706c6346eb94cc7a810d21100d7cb227facad201549d06f805a7224a19cd8c5675e849c0eef4936ad171b7cbcb7ed06f6c6f410059156ef21c7438165c11b21723c4ef4dec5f3640336232093ec3662a69a2c00c3c27df7b93252d2c3ea709c4506964a4c54a65c8dc63ef51862e70b47078b3670349a487c2578d7d8f14b2a06717a7960677f04a8e9dd0cb4987bdba4be35c51a20e81e0ac65b4ef0dae45d0b31c65470bfd0e4436d8a07394e5b7c37c86ca81bc9b887bb0d817e9ecefbb9047c452ae7cabb25413213887ec0acf8c56ed32dbbfc6361d84db6ed2c91253e6101b59eab029d3ddf77f10ec4541cc28a95671de03626fd5d785a0190bf9d20c9468867d86d7c8828e6709b8d428ec581c02a1955b22abbaf05a7ef15111ba56cf6d021e0b73930b671ef2a862d1f616c9b16f5713e14a3ae5194d67d0abf77ddaaa09fab9aad31e7764f0ead4b7f9092a653cd529c5d9fe58de8f02f355764c313d58b151e3645d3584ac7e36d8257310a6c6f8cb2a945124210d5ce0689f0f13cfd43ddbcb1aa532c4664ef088fd7dd33669dbb2c8711bedbb8461d09193a9764ffb1e151491cf996867fe8a7c5fd20a23d8c77a319cda0324b54d0ffcc2fddecf91422d6b5e51bbff24b9cc1cbc64aeb5b99f203220f76a9f1af2cfbddff1d4701b2fb4d85657761e154397625590e636ecf70b2326ebe25beaed03e53ee7c5d51b757fe03fd4689b33bf74a94d82345a86adeeaa62c41a5c6b30ec656047c7c6ed91b4deb25bde98d34fbd18ca126fea3ac8823abf23b5e59dd26502a1858b823c209fae322b1bc1e93ffdd51890370af3290a97eb2a4da0b81565e4c06a758eab2769f53f5a0b7aef9c7ea67d7017043eac4f58dc6a0457cec54cc22f9a5c5a66b4ed5e9466c2dcedd9dbb1d70b7e55cf2d534abe36196bdac360a39f2042c284553ae908a57e20c4c32437bcfd4b375c3745f58f25f4c694a5a69441b03b6fc79e12dffa783df2763b7b7fb133759237948cd2f221a9497db3cd7fbd247c564bbf17107dae943a6a637a8c782ad430c2be3e36b903bd2b0d23f1dd3209ac4c7ef7f419685dc382cf7ed2baa8bb6d9056d810075bf0ac80851faf2f3a954787080358a1fe75e653e4583bbbf2b735f9a1ac57ebfc37364d6a9c6111fedb2ec8d4ebf15518b6a3c6d2e213322a4bdbfc613f830e8409b1bbdaf438d0e1adf9bd887a01d2197a9256588d3d513ddd6c1723074a15b030b58a6b40ad39fc4cde1a224a1fe3644389f7ff319642d9f84bcbb27a9537997a7f1044bd84d32fb2b6884f89d82669369b0a56ae7b5aacca867f98ad1b14e861840e22b8189b83ee3ba3e9ae1aaa52c4a9a145cb7ecc085156016893c9a6311f9a4b4f57a41a8ec40249cf1360a67825e510976e3bcafd905ae531fe87882c6a6a199b3af50e36ef7acf4ed7d2d005526c2529989f50af3d2c8513f92991f46c8179d0de7b95b7878bfed384436f5917f0d139523c6c94e84a00272936799868140045b3161aacc62851295685ae4372554c9102ffb7a1e5111bc0df0f1840fa128db3d5c85219f020f672e020c3e2eda5e47b4f9e865216087f6b7624639634d7fd8745f39d9904a459a8d8e5fd708ec888d92958784b6b3718e2a585df061a2826c9653438c7647b87ec5128c863b53b684f41939d6366bcaab25920c350b7d6531fbb933cc4225831a701a35a6ff3db73aaa15e950b9bf279503807f715571c7866918eae6664abbcb656f25d0cf4fb87252a087b260d19d177225d1fdc9190bfd3f811dbeb4053df3a6ce8902eab8b2fdcc071b20c8127d70694cd62f5fa1900cbd02de000ebadf42426d92309325ef8b54b5e2cc82d19c2935f56369002606d8407d1f990103e96bf3e3ab3282da37e64c0408f4581f7ea0f678c3eb2019d636f82df32c04e329012b5f97775047de10c868f700e878177ce82e87cb38f6d2a042a7fd81b999e1183c41823d87d87bb56c200e655cefd450600c4e134a7dc33243a3a57537a340b03d4fb9d95a9e0fa09dd975f83a361dcc76f60add21470165d8812754b5d234424b32b393ee20e2ee15c0cd01931397c39f117538a247d47b358da5ae2e9b514c4701b6b3a9e4e1caafdd467a6b2305e364b8d8cd88c043f45aafe372edd95685a4f48c755779ce66d4f52bda571bfeb8d5581d0f1b2b9aee7f55bf5a047251085213f20279f9c5ecb4a9c353256ec1687edcd0a42a47eae4f5965edf1ca77e8d6f306ce5b7512f8dbc0d2cf8aebf56f9447c7671e92463fb95ace767fc05145c2e23892911e26c7fc0fd38f6fedd3458a3b46ede3f77e4dc0871c46f79a8654fb12f24193a360a77c409614c0669ac53ab93db18ced7ecd6f6cdcadac7d1f279c8bae075489f36d3523f2db3d6595f5ea12ec3b98a83794cfd130b14fa499d3bde733439a77f9ec66fb0e648b53dd8fbb4916c26e15e09573d5faa5d4bd8ae1541eef87e253ac56700cd026c5190298b94a4f228663c51881de369ccc213a1daf5f14f14114f55481d847629deb8748c27a13997e2bcbbba1018b17dffda366ec30b0f0c3cd26634f458a679192c075488c185477431802f05af8039add13a36c7a4bd9ff3e2ca3d857d58cfa0b9cee0b3312e360eb34e6f0ed9bbd0fddca30dc7dd7f512a9c122ff2b0cdaf8a69757d98f442d8caa1ff29829efd47b1de1f86c635f501f42ef33991fb4e473115d19b452488244f411e5ae4e3a2624fefc5904756d65de2f6ce28daffc212fa4672f8f29ca6109f2ed63f01555b32a6ff6a8aae38a6240158a441b5f423e39d01b6856a663e6d208a1fd16e5d32afe2a646053d46cef3ff6d0365774bb4f74d20391e11900232fbf86d191ab6423a0fa25066cb4e7e5cc675dcff5193db93f2efe018d100ce605b22a52dd934d92bfc130abfbedb4527b8d59ad18aed1a5481879dc5804843b154114dabc299f6d5046a785e564f852f3c65fc200c5c29eb5cb3c49eefa062366037d714dd78e03699073f63e54fb675bfdd2a23543aa412ecec857865d4dc9a8cb58a9175b21ad211db61c7919af6bcd2809eb3c345e212a683369e6396da1f49ef03e8cfe0ca5afeaf9330cba21a3f856eceda5811dc4111a6e91a1cbdc8cf8246e263d5c267be180e92911c7bb5b802fb9e972c3a5c5a0feb580e3f0d16e59be634acc38a63ad8bf25177a48e8f78933b01e3eacf9949098f09e1a9085f8dcbec440a3332168cd94faa01d902155ad232cbcf58486a28936ef0f1959f0808d04fb2da125cb8d5dd801bbe9c053a75dfe9e914decf8d9e69c50ebf512af23675b22cd831253a663d3facefa478c668ec29885e78d50658753df61cf35877eb6b8dee0a036618fc0efe8eba903eb47375b58ff4a95392ceef0d8367152ed7a9226b973a4c05b8a3fd235b588364e1196ce2fa7eea2c2b23fe293fea8916d27aee52bfa453438f9ff3e0b9fe331136ce02041c995628b07b04bd905661e9d818f2d3cddda413e2ca1dc4a4a0e79c0ef36ba466e5149371f2178d7c3b955f548069f215112619720e281f622e34340f1b149f2fc6a801c194b35d8da69c3ca2ceb9b185f6c78d31e938df2f41488f6632849a052f0a055500c34c389c9e7f22a479a861dd14b37b1127fde99f3a4bc31951748178de364045e794157614da626b0fffcb5762116f7034afca4c06101ef19389279423f62c8786764dbe7fb6abb2515932a304bb1f060ac594b16b71a53e51487d4fadef0a0bdbef175fcb6e9f0fa62ae35939728f8ee1e9cd42326a46807ecd4d1217566a4a3b9ae8db90c716353aba8ecd18e0f13f9e7687963a0e460ed0ea72cbf"}}, 0xff2) 11:36:26 executing program 1: recvmsg(0xffffffffffffffff, 0x0, 0x80010161) [ 640.901302][T13808] IPVS: ftp: loaded support on port[0] = 21 [ 641.259760][ T32] audit: type=1800 audit(1608118587.184:680): pid=13855 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16371 res=0 errno=0 [ 641.429247][ T32] audit: type=1804 audit(1608118587.294:681): pid=13855 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/186/bus" dev="sda1" ino=16371 res=1 errno=0 [ 641.453834][ T32] audit: type=1800 audit(1608118587.294:682): pid=13855 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16371 res=0 errno=0 11:36:27 executing program 4: syz_emit_ethernet(0xc0, &(0x7f0000000180)={@link_local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "32a59e", 0x8a, 0x2b, 0x0, @rand_addr=' \x01\x00', @private2, {[@hopopts={0x3c, 0x4, [], [@hao={0xc9, 0x10, @mcast1}, @calipso={0x7, 0x10, {0x0, 0x2, 0x0, 0x0, [0x0]}}]}, @hopopts={0x3a, 0x2, [], [@hao={0xc9, 0x10, @private0}]}], "5f6c6db37a041f7d0f29a9b952da0c6741e98b182d659500ec610054d7cc4682b5ab2d315e7ae02778c9afa76931cfbdc2ef94e6622a0f303033"}}}}}, 0x0) 11:36:27 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000001000)={0x0, 0x1000}, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') 11:36:27 executing program 1: syz_emit_ethernet(0xae, &(0x7f0000000000)={@remote, @link_local, @val={@void}, {@ipv4={0x800, @gre={{0x16, 0x4, 0x0, 0x0, 0x9c, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast, @local, {[@generic={0x0, 0x2}, @noop, @timestamp_prespec={0x44, 0x14, 0x0, 0x3, 0x0, [{@broadcast}, {@broadcast}]}, @lsrr={0x83, 0xf, 0x0, [@rand_addr, @broadcast, @broadcast]}, @rr={0x7, 0x1b, 0x0, [@loopback, @local, @private, @loopback, @local, @multicast1]}]}}}}}}, 0x0) 11:36:27 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) bind$packet(r0, &(0x7f0000000000), 0x14) 11:36:27 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32, @ANYBLOB="0174000000000000240012000c00010062726964676500"], 0x44}}, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x2}, @GTPA_LINK={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_LINK={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008002}, 0x40804) socket$inet_udplite(0x2, 0x2, 0x88) write(0xffffffffffffffff, &(0x7f0000001400), 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) [ 641.997392][ T32] audit: type=1804 audit(1608118587.924:683): pid=13868 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/186/bus" dev="sda1" ino=16371 res=1 errno=0 11:36:28 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) fsetxattr$security_evm(r1, &(0x7f0000000000)='security.evm\x00', &(0x7f0000000040)=@ng={0x4, 0x8, "ffba0d"}, 0x5, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) 11:36:28 executing program 4: syz_emit_ethernet(0x6a, &(0x7f0000000000)={@remote, @link_local, @val={@void}, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast, @local}}}}}, 0x0) [ 642.370886][T13882] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 11:36:28 executing program 3: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$tun(r0, &(0x7f0000000080)={@void, @void, @ipx={0xffff, 0x1001, 0x0, 0x0, {@broadcast, @current}, {@random, @random="0ec99edd9007"}, "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"}}, 0x1001) 11:36:28 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f00000003c0)={0x18, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0) 11:36:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x48}, 0x0) 11:36:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01"], 0x3c}}, 0x0) 11:36:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x34, r1, 0x1, 0x0, 0x0, {{}, {0x0, 0x410c}, {0x18, 0x17, {0x0, 0x0, @udp='udp:syz1\x00'}}}}, 0x34}}, 0x0) 11:36:29 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000100)=0x800000, 0x4) 11:36:29 executing program 1: syz_emit_ethernet(0x90, &(0x7f0000000180)={@link_local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "32a59e", 0x5a, 0x2b, 0x0, @rand_addr=' \x01\x00', @private2, {[@hopopts={0x3a}], "5f6c6db37a041f7d0f29a9b952da0c6741e98b182d659500ec610054d7cc4682b5ab2d315e7ae02778c9afa76931cfbdc2ef94e6622a0f3030336f2c0f00da2a84b35753b217ff042c01fa37c8baba89aaa0"}}}}}, 0x0) 11:36:29 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000006840)=[{{&(0x7f0000000180)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000800)="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", 0x5ad}], 0x1}}], 0x1, 0x0) 11:36:29 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x40300, 0x0) 11:36:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x34, r1, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}, {0x18, 0x17, {0x0, 0x0, @udp='udp:syz1\x00'}}}}, 0x34}}, 0x0) 11:36:29 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) socketpair(0x2b, 0x8000d, 0xad1, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={0x0, 0xfffffffa}, 0x8) sendfile(r0, r0, 0x0, 0x8080fffffffe) r4 = socket(0x40000000002, 0x3, 0x2) open$dir(&(0x7f00000001c0)='./bus\x00', 0x111080, 0x9) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendmmsg$inet(r4, &(0x7f0000000080)=[{{&(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10, 0x0}}, {{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0xf, 0x0}}], 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000080)={'team0\x00'}) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x0, 0x0) ioctl$EVIOCGEFFECTS(r5, 0x80044584, &(0x7f0000000140)=""/11) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) 11:36:30 executing program 3: syz_emit_ethernet(0x6e, &(0x7f0000000180)={@link_local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "32a59e", 0x38, 0x2b, 0x0, @rand_addr=' \x01\x00', @private2, {[@hopopts={0x0, 0x4, [], [@ra, @jumbo, @generic, @pad1, @hao={0xc9, 0x10, @mcast1}]}], "5f6c6db37a041f7d"}}}}}, 0x0) [ 644.249080][T13914] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 11:36:30 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x1195c0, 0x0) 11:36:30 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f0000000780)=0x1, 0x4) 11:36:30 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x1d, 0x4) [ 645.115568][ T32] kauditd_printk_skb: 8 callbacks suppressed [ 645.115650][ T32] audit: type=1800 audit(1608118591.044:692): pid=13927 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16369 res=0 errno=0 [ 645.380962][ T32] audit: type=1804 audit(1608118591.084:693): pid=13927 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/188/bus" dev="sda1" ino=16369 res=1 errno=0 [ 645.405421][ T32] audit: type=1800 audit(1608118591.084:694): pid=13927 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16369 res=0 errno=0 11:36:31 executing program 3: syz_emit_ethernet(0x66, &(0x7f0000000180)={@link_local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "32a59e", 0x30, 0x2b, 0x0, @rand_addr=' \x01\x00', @private2, {[@hopopts={0x0, 0x4, [], [@ra, @jumbo, @pad1, @hao={0xc9, 0x10, @mcast1}, @generic={0x0, 0x1, 'Q'}]}]}}}}}, 0x0) 11:36:31 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000040), 0x4) 11:36:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x34, r1, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x14aa, 0x0, @udp='udp:syz1\x00'}}}}, 0x34}}, 0x0) 11:36:31 executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000001340), 0x4) 11:36:31 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) [ 645.906659][ T32] audit: type=1804 audit(1608118591.834:695): pid=13932 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/188/bus" dev="sda1" ino=16369 res=1 errno=0 [ 645.930719][ T32] audit: type=1804 audit(1608118591.834:696): pid=13933 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/188/bus" dev="sda1" ino=16369 res=1 errno=0 [ 645.955427][ T32] audit: type=1800 audit(1608118591.834:697): pid=13933 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16369 res=0 errno=0 [ 646.109126][T13940] tipc: Enabling of bearer rejected, failed to enable media [ 646.225450][T13944] tipc: Enabling of bearer rejected, failed to enable media 11:36:32 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000280)='./bus\x00', 0x20) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x3018d0, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) bind$l2tp6(r0, &(0x7f0000000200)={0xa, 0x0, 0x9, @remote, 0x0, 0x2}, 0x20) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r1, 0x110, 0x5, &(0x7f0000000000)=[0x2, 0x1], 0x2) openat$rtc(0xffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x80, 0x0) r3 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendmmsg$inet(r3, &(0x7f0000000080)=[{{&(0x7f0000000180)={0x2, 0x1, @multicast1}, 0x10, 0x0}}, {{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x2, 0x0) getsockopt(r3, 0x10, 0x400, &(0x7f0000000080)=""/36, &(0x7f0000000100)=0x24) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r4 = socket(0x1, 0x1, 0x2) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendmmsg$inet(r4, &(0x7f0000000080)=[{{&(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10, 0x0}}, {{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0xf, 0x0}}], 0x2, 0x0) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f00000001c0)={0xd2, 0xdf}, 0x2) 11:36:32 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x40000022) 11:36:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x34, r1, 0x1, 0x0, 0x0, {{}, {0x0, 0xb}, {0x18, 0x17, {0x0, 0x0, @udp='udp:syz1\x00'}}}}, 0x34}}, 0x0) 11:36:32 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x5421, &(0x7f0000000640)={'batadv_slave_1\x00'}) 11:36:32 executing program 4: syz_emit_ethernet(0x92, &(0x7f0000000180)={@multicast, @random="22254f61cb10", @val={@void}, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "5c8965", 0x58, 0x29, 0x0, @empty, @dev={0xfe, 0x80, [], 0x37}, {[@hopopts={0x0, 0x5, [], [@hao={0xc9, 0x10, @dev}, @pad1, @hao={0xc9, 0x10, @private1}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}], @payload_direct={{{{0x20, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x2, 0x3f}}}}}}}}}, 0x0) [ 646.873885][ T32] audit: type=1800 audit(1608118592.804:698): pid=13955 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16371 res=0 errno=0 11:36:33 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000000)={0xfe, 0x3, 0x1, 0x1f, 0xfffff800, 0x3}) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_names\x00') io_destroy(0x0) write$UHID_INPUT(r3, &(0x7f0000000740)={0x8, {"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", 0x1000}}, 0x1006) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) 11:36:33 executing program 3: syz_emit_ethernet(0x5e, &(0x7f0000000180)={@link_local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "32a59e", 0x28, 0x0, 0x0, @rand_addr=' \x01\x00', @private2, {[@hopopts={0x0, 0x4, [], [@ra, @generic, @pad1, @hao={0xc9, 0x10, @mcast1}, @generic={0x0, 0x3, "519b69"}]}]}}}}}, 0x0) 11:36:33 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x40002042, 0x0, 0x0) 11:36:34 executing program 1: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={0x0, 0x1c}}, 0x0) 11:36:34 executing program 4: syz_emit_ethernet(0xfdef, &(0x7f0000000000)={@remote, @link_local, @val={@void}, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "5c8965", 0x18, 0x29, 0x0, @empty, @dev, {[], @payload_conn={{{0x18, 0x0, 0x0, 0x0, 0x0, 0x6}}}}}}}}, 0x0) [ 648.476925][ T32] audit: type=1800 audit(1608118594.404:699): pid=14061 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16376 res=0 errno=0 [ 648.591507][ T32] audit: type=1804 audit(1608118594.474:700): pid=14061 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/190/bus" dev="sda1" ino=16376 res=1 errno=0 [ 648.616274][ T32] audit: type=1800 audit(1608118594.474:701): pid=14061 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16376 res=0 errno=0 11:36:34 executing program 2: syz_emit_ethernet(0x78, &(0x7f0000000180)={@link_local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "32a59e", 0x42, 0x2b, 0x0, @rand_addr=' \x01\x00', @private2, {[@hopopts={0x3c, 0x3, [], [@generic={0x0, 0x1, "ad"}, @pad1, @hao={0xc9, 0x10, @mcast1}, @generic={0x0, 0x3, "519b69"}]}], "5f6c6db37a041f7d0f29a9b952da0c6741e98b182d659500ec61"}}}}}, 0x0) 11:36:34 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x40) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) timerfd_create(0x6, 0x800) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) 11:36:34 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'tunl0\x00', 0x0}) 11:36:35 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x2) getsockopt$inet6_tcp_int(r0, 0x6, 0x0, 0x0, 0x0) 11:36:35 executing program 1: syz_emit_ethernet(0x3e, &(0x7f0000000180)={@link_local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "32a59e", 0x8, 0x0, 0x0, @rand_addr=' \x01\x00', @private2, {[], "5f6c6db37a041f7d"}}}}}, 0x0) 11:36:35 executing program 4: syz_emit_ethernet(0xe82, &(0x7f0000000000)={@remote, @link_local, @val={@void}, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "5c8965", 0xe48, 0x6, 0x0, @empty, @dev, {[@dstopts={0x0, 0x0, [], [@jumbo]}, @dstopts, @dstopts={0x0, 0x1c1, [], [@generic={0x0, 0xe07, "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"}]}], @payload_conn={{{0x18, 0x0, 0x0, 0x0, 0x0, 0x6}}}}}}}}, 0x0) 11:36:35 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x2, 0x0, &(0x7f00000000c0)) 11:36:35 executing program 3: syz_emit_ethernet(0x90, &(0x7f0000000180)={@link_local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "32a59e", 0x5a, 0x0, 0x0, @rand_addr=' \x01\x00', @private2, {[@hopopts={0x3a}], "5f6c6db37a041f7d0f29a9b952da0c6741e98b182d659500ec610054d7cc4682b5ab2d315e7ae02778c9afa76931cfbdc2ef94e6622a0f3030336f2c0f00da2a84b35753b217ff042c01fa37c8baba89aaa0"}}}}}, 0x0) 11:36:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x34, r1, 0x1, 0x0, 0x0, {{0x0}, {}, {0x18, 0x17, {0x0, 0x0, @udp='udp:syz1\x00'}}}}, 0x34}}, 0x0) 11:36:36 executing program 1: syz_emit_ethernet(0xfc2, &(0x7f0000000000)={@remote, @link_local, @val={@void}, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "5c8965", 0xf88, 0x6, 0x0, @empty, @dev, {[@dstopts={0x0, 0x0, [], [@jumbo]}, @dstopts={0x0, 0x0, [], [@jumbo]}, @dstopts={0x0, 0x1e8, [], [@generic={0x0, 0xf3f, "d01bacb261b687cc874763f1b2b52c277249cae1d217cdf9d8ab8e022bd1dbdc67fdcc8114334dc2d27b73fdd12b3c53936b5a3f5b8a57a40c7275da60d739dcab447621b669c2a4f5ad4c575bf367d6a694993e57774cfa0314e923f98456c87161003be1fe6f333ae383637e93b990816c48ebab7a36f424b6874b406892fe751dc584f71ff83b13d17e4575c2232c6754e98b87cd6c89c6386fe667688df461783b7ded8c55d1dd893593120ec120cd7be6a376e220651e2124715738420eb9083ac4acd636ca5571051ed71d09b29af72f0eda15dcd9dcc0516b1c71be80cac12280f08014c694220e17cdc08221a28f6cf1abdafd3f70f8895337d8ca01deb0c03b075e39ba7a856c36ec7aad746d01885a9bca96b55392064d615fe84ae1be7f39362537316558fa69a97ecf6a322f173f9863d6c85c7876ee596754c5a54bf34e1ed970f88da6d869921a1ee2223f5c48f72b1f821d73aa0445627dcc2c6132af95114e32dd414c4a38f27d2981bbdcc86a8947f1218b21018a35e1e025c0aa3e9f66b6766db90dbb508f48fda236b58d2521c0fe603f3bdda373ec063b887e7a0a7ee6e0e553c0e1decc28ce0b5e36302e3373ce4bfba6776d47e4bc86ee71cc213f317b0140475f780e3d262dbe7bbf74ea9d464a08659de2b649b88bd28d27fccc90b1b6ddd2e087ce012bc5f4a920c118c6b3adf9e0592a4b2feb3d03baa41573c51915163ab7dba24a7fab862dc257a9add846f31523ac3f799d9eca8aee7b47b257aecf9e6875be7e098a821ad080aa7e486dce9dc3ae11910e01b8fbc41a0649771dbd19bb4a5f02ab3913e75718e928aeb19cc5138e7e01effdcef1beff7ef7a6c981655dba718aef16f64204c7620a26de6c43781c14cee4264d3df0fcb74b1a6c9488f32dc688754c80ff05c8f60bc3e8e2946e938a6cf44219586bf6e8c5b6abad9696d10b49939ad4c7d5f15778eaf5ce76b96634949a300b99172f9d67aeb2cf5e250b27d86528ced91c4657345631898b88c70a0cb243f24272df6d25b117c94edb5f05e3b10c745e15f4685556e926c33a4815c363a4007197ad16eaa43de28df368ec6cfd6724a6308636d8e33a3a8892ef1eb00388e54ad9998d73034a4b12ec41b6f11494ced9650458218f17003abad9333f49cbad030b519571126b7be56a843033339d6eaaa79f1846b970a61150931561e05cfa4eefb651a4a3341ed3b28d3cf26ef086298d8895344b39d0cfc7bda2bc6cae9530792afe94707fd9d6ecf6eb7e01133e8dd554d280a892e282e25a818c2dc13fce1ede38ef9869c04b2689b26c8e339f624f97156ae32956b2dbf94ed776f5cd845ce74089562b4119afabe35e15550cd404a0778e883ad3d1e95aed07fd25d20d7982fdcda1103f45dc171008afe8f97f67949f6b86f053a7f24e4c0c1f3a8bef6993db493aa9a907a20671e4cfc1db319fca21e5359fe359fa3a4ca8f2ebd9f0c770b8b1d923829900a02c45ddc203a5bfc436d3be0bb0e9f4a38a6e7de622f5d5319409d76ceae0c289db5f043d74cec42317491e0c4bd510b5b41c70375712c01a64315bd0ab5eecf2dd950d6689bca598642aea9649427ff107d991397b74a4d43bede21ad73845853cab47eec866b024a946013e1d9d84fe87fa80ba0e03a7db9d4a9e66ab9ecd415c2dc641a997e70807e7a1352ed3daa48aa1695d255d61ce8fbc34658fb36c4d843eed6c38d24bbef16768c36fb935c37ac8856392fdd0bcec91fa1cc2c6feb0e362537d25d7d66f8ec0b584a4aed86683044ac8416576505955173487e978fd98e0a7f30161e0c00cc63e0820636ed69a0b14da5bf2603c31cf9704fd08652212b1d0c1c5f5371fa40ee363af0a610aadde89d00476852ceae7eb885a8b48fa873b7bf24437e93e86ebf3fe302428d74c3e0405ae0b7bda0dbc8600993e3dfc22b18395dd8898f6f2486c95583d4d0aa2e11df3b16355330b677436a8368335e31b6e5f12e078fcf5cb05e255921278c58577f4f1d4b84695bcb17d248721b431bb98ee64b6a2bf2257bb4477fb31e2a33d89c08f984d38acaa1bbf08e0611797f892ef86b2e6f702daf5043556700e09f0ec839db1fc495362e641995caf21417bdcc3f06852a33c9524dd9fa520803c1124934c44b60f5f262a76d0ca378ad21237e92a90fd8cbb3d7f6de663e3c7d50ed574785d48214a62f18021cf0f5235b06121af5f93d7cbb90a6bd5e663522910d7a3ce3f7835ec461e23a88b2271135cc7824f6c0a249770d83e2f4cda9506a67506e1adcac588c1959d06d22a9abb1cffdf364ed69dc0435b6a5a937989a5159d5c86a5f950a7cc6bee2f59dd7a5080a3219870278b06ca73241f9dda0da460029054e8120d06cd37efc2171cedd8c9c3ebc3b6f8d08fb3c8fc52343dd5d1a2f2f00025d007f07d2766a364ee0f77b0a4137d3530b1629641650187d169f028320d642a8721e4e4f5cd3c7adcacba51dfb5ea4ed6a59054a004de1d5a371bc135ebc69743efeedafbcf7b6ce77dad0252cd2b334cbdf6005c584aaa6fc12c3c6f5d478b5e8d48efa30e2153b16705c27b0d46c31c3988b225613957938a1aba14f41e7f1b8069c5d6cd31d39647b57d8dfc7ba5ae06f6a1cac3d180f1a5765d2408e8c6bc647aaea45f28a7497276ad9a7667c26ed68bc6cab50074a9c5a5d0f65ad2978a076d57475873bfb58c3a75d66352bdc49e5f8b2f1bf890648a59d950a7981e9c1173f252cdb0689861491f5347c83e2798f9f9cb6714ebef692bdccf72f73f90068c16b4613b8f3060875437d078991bc34f5c137fa3f16f91f195a35576d2693c19d7cdea9b84bdb4855f8745eedd277dece9c64a604ef3a1323145d18aa2946b6141d2c48b00d28cf2b3b09aa169566646a91f73cbad4f8aba37c3e266786cf86812bf6438abc106babe2cf5102d8260673ef3d8659161bb58f14618bf420d6f9b6ff4bfbde978d405f67e045c712357168da375725253d358d911da4031b40e2d20189a8e080bc4b8ae474e99e55277a2fa1c8bc30b6e1e814b2112d4afe3b8397d46ec8510c6de7607f1a6ba666f55c177c21d3fd711df9c1119a5a2cbf3b1e47eaed8a61a0277e6205ca014a24334824b3081198afe9e07be2635f49303af5a8e96d2393f85aa852bbc05c0cddc5049e7810ef5b419d57525b1bd7672e9c390bb4b43d8816bbf1194b73cc59e5e70068cfced887692621587f0db2e00eb2d4a24d989627c3ccb6bf61d09878272231f2a3e25f8c9d6a32fe5a3b0bf727047e46d10c2d7b9bcc63b5e4b4018962acf8fa977c1ec0a15b22eeccc9120974f67455d0c3052413e1c0c37a7306695e89dc43c73d2dd182193963be2449ca0601232115d1ee259cf01d6aba73c0d8cefab0e89786245fdc93700270b8edaf8729b6745083dde747374e1fc5968d6f0e96c6a5fde8043189ae0988afb1026d5e6d81b9744f4f1d51ec65d290e944b51d2e953af417f5997c078d40b294466d007bde327ab592962fd744ca1358df7626a8f7624449646e2052b7b7c868f9c4bd549a8913ff4ceab40534b4c88047b3b10494ec0d643d43c0bc498613c4f5a62b0d1625959ac5520d7db8169ceb81a5599e426168bee7451e568a83a6814481788fe3ad38b79b429295df867b51c49db35c0a4f7edb3b3464aad5cdeb4c11381d243a65d941346aabf9a11b531bb6e48143c510ba86c7f45e2714d520831d3fb004adf9601ffd3afa4144746d683adf306a7bc518528cb31e38a39998e0db4798557bdceeeb10e070383f62d1d1bbb5c59dada5b1d6dce402fcc66271518aae35f85db5e1e9b69bced9fd7168f5881492dfc66be0db64645a876a06e044ec5ff5fff096b4acf88655b78261b59c32ab948a9b7ffb36e6597817ebf6db4093ddb1ba30cbc10caa60cc07b336c2240f50ca096c16bae7ecbdf8adc6564f22acf6eecf5c7fd987c5ed6b3f2e5f50250f29d97321d93da723753bedf99a89ec34b1e05f472bde8c52dfafc6a93654028e22568d2e5bbe1802ecdff9e82aa252c8e339fc57cf03bc6351e065c42131b7a6071f1d9cfa34a1c89d80cd521019160bc59755f602a940ae8bc114e676b5b8fb4451e20741dbbfac8a953d4f9eaf796f51e3bea15cc145de288f81ee984daa7a3df4914013490dabc23ba3270c3be3eb30ac39e38e68b6faf0d5c3b030d587cad938023c14f31fbb38a4f83dbb95b2bf8e25c600ec3ddef1016467f2247aa11dbb5aa6e8982cd90cd529d5ca032aa34bb9c55b0eec03c91e2d90c637b18d58af927478503eb3c54e241ed59062e7c4816dce4bc2e055fa054e9a6e80673f83d7ba1583fa4097df1141e4f88fd0f396921f95b7b5ac8ec03d534c70a80cf359526b6ad7b18b7532fa8332677e61af4dd73b76f116325b0b02c6f214bea0baea1679f7ded8553330f0340e39fbe7e6376dd10435432294f9f3c60b38d3ef0baacb6563e9c76ec19095bcd24b988cf7fa4a73c4459f300977024f1074c3caf0740712bdee0e20380c7a42d3554fd9e46ed297622f0719547d6847cbdcce8a27e2d86c84714a9e0530bb5927eaa8d0c3e2c77aedd5fbac34e04ab589e97cab13d091fff8a18b194eba920f4a17f18b1545f8b610d673d7734dc97d1d69389be4e65901477300b0c2e0bd212a5728b9130806d58ac23e42187a610d0e1c5709586fd9244d94a7b3bbca6e5fd6047560ac2be3cdba161abeed805566f9776a457d263226aa2137a0d37529b57b3877835d87371415aba382981fa3b69ae59e3085beae9144e307d12a47b8fb64c86afdd357d10539444eb1ed091e6b733c994c0cf5514754360e70d9c87f3fa3f4d35dcb306cabb4ab1595fb147035838b81fc8f862c9100f2a14d581c53e23908af661db967410f05bd01dc9b5e6aa8978681818a65f1b50f293bcb1d0ae9051dfce7a023a86fc27a73f3eea3cc7c6e0e616e99cf27196ce527d76bd16aeff2d9881c14732275ae99fe4c6f2cd3118138b04f258f83ed4750e9ccd52f0ff5203465647fc017054b2af16977bdd192f4da87fe30ede14ee7c6e72151d3a316053bc7ecbc17fdfeea4e80d582bccbd2c7c838e011c9d74e7492ae4787fa558f3cb38a94e8c8d00781a91d4b79f192ba7ba2f9f4ebfd19bb9c65da5757e643c29c2b588605071c6cdd17d36dcb2f865369f53faa81ab11e6892394d690fe4b0363f31d8cd29f14e6ff09e29d41172bcba05c01c6b72dabc77376368ad8e5a7a2acf1ed213a56b1a3822724fc485ad35606e7b95a4024235f1fe76ae032ccdf6ca4947f7cb8ff5b7a26f831be35bed31621e90d08826b890c4999d945947460aec8068b5958d442fb6efc25214e7e108b54b69478902b95d063acca3658d96fb676d10294ae0816f61c5e7a4e3a3d66dbd1eece8d47483c9b8695c906aa3316f98dadbb5be10858df24e3632c01ac893d0f71d6dbcd5e07e6906567df9024bc15eac9534e3"}]}], @payload_conn={{{0x18, 0x0, 0x0, 0x0, 0x0, 0x6}}}}}}}}, 0x0) [ 650.250042][ T32] kauditd_printk_skb: 5 callbacks suppressed [ 650.250126][ T32] audit: type=1804 audit(1608118596.174:707): pid=14078 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/191/bus" dev="sda1" ino=16377 res=1 errno=0 [ 650.280450][ T32] audit: type=1804 audit(1608118596.174:708): pid=14080 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/191/bus" dev="sda1" ino=16377 res=1 errno=0 [ 650.304613][ T32] audit: type=1800 audit(1608118596.174:709): pid=14080 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16377 res=0 errno=0 11:36:36 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x6, 0x11}]}}, &(0x7f0000000200)=""/247, 0x26, 0xf7, 0x1}, 0x20) 11:36:36 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x2, &(0x7f0000000040)=@raw=[@btf_id], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 11:36:36 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x8916, &(0x7f0000001600)) 11:36:36 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1cfdbe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) r2 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendmmsg$inet(r2, &(0x7f0000000080)=[{{&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, 0x0}}, {{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x2, 0x0) ioctl$FIOCLEX(r2, 0x5451) lseek(r1, 0x0, 0x2) r3 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendmmsg$inet(r3, &(0x7f0000000080)=[{{&(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10, 0x0}}, {{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0xf, 0x0}}], 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000a00)={0x0, 0x0}) recvmmsg(r3, &(0x7f00000009c0)=[{{&(0x7f0000000140)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000000840)=[{&(0x7f00000001c0)=""/116, 0x74}, {&(0x7f0000000280)=""/54, 0x36}, {&(0x7f00000002c0)=""/72, 0x48}, {&(0x7f0000000340)=""/167, 0xa7}, {&(0x7f0000000400)=""/229, 0xe5}, {&(0x7f0000000500)=""/54, 0x36}, {&(0x7f0000000540)=""/175, 0xaf}, {&(0x7f0000000600)=""/237, 0xed}, {&(0x7f0000000740)=""/228, 0xe4}], 0x9, &(0x7f00000008c0)=""/206, 0xce}, 0x6}], 0x1, 0x2000, &(0x7f0000000a40)={r4, r5+60000000}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000000100)={0x1, 'veth0_to_hsr\x00', {}, 0x4}) r6 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r6, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) 11:36:36 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 11:36:37 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000140), 0x4) 11:36:37 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x8918, 0x0) 11:36:37 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f00000001c0)={0x0, @nl=@unspec, @ethernet={0x0, @multicast}, @l2tp}) [ 651.199427][ T32] audit: type=1804 audit(1608118597.124:710): pid=14108 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/192/bus" dev="sda1" ino=16372 res=1 errno=0 [ 651.224096][ T32] audit: type=1800 audit(1608118597.124:711): pid=14108 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16372 res=0 errno=0 11:36:37 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01"], 0x24}}, 0x0) [ 651.562106][ T32] audit: type=1800 audit(1608118597.224:712): pid=14108 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16372 res=0 errno=0 [ 651.582268][ T32] audit: type=1800 audit(1608118597.264:713): pid=14108 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16372 res=0 errno=0 11:36:37 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r2 = openat$cachefiles(0xffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x400, 0x0) fsconfig$FSCONFIG_SET_FLAG(r2, 0x0, &(0x7f0000000040)='rw\x00', 0x0, 0x0) open(&(0x7f0000000240)='./bus\x00', 0x1050d0, 0x40) sendfile(r1, 0xffffffffffffffff, 0x0, 0xfffffffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f0000000100)='./bus/file0\x00', 0x6, 0x4, &(0x7f00000001c0)=[{&(0x7f0000000140)="e46fce56702cdb7b29456980783f087d3b85a0b857b79b3f3cb26b4a92e1554ce41fa03da6ad26a574f23bbe1be4f215976b040c7686930535a8171036be1e1c9f8e246130bddac76ff180766cd593e25de44652d10fcd8ee10aa049d02d1538b0f16e8524fedf94dec7a13c6a2de8c48648322f", 0x74, 0x9}, {&(0x7f0000000740)="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", 0x1000}, {&(0x7f0000000280)="1870c44bf71e1221b276281adf66587d9e656b8506afa89e68c55508229a813330471ed5be3cf150b6583d27ce2be54eba98bd33b337324fc8bfa8a35bcb1cc6a87fae8a1cc5b9ece3bf51ec07ba64e92b26f63bfc50fcd5e88ee78e8c607160882b44f4691ff740a74d5b9c913ee121cfe3efd1ace23269899c80bf24c64ae144495190674ddd498114ec41a56859dc246455e0b3d041270473b309f7bc33003c7dca4bf5c2e8d9901df2237a8b26911c850726c34f7954ba290bc9e33325da3b027b08a158ebcc57b66fba8f6a76d7d07f2eaf2a44a20247da05432a55a5c8ead9abc8b1f134e542b32ff034db379bff19c7317338d1c335", 0xf9, 0x6}, {&(0x7f0000000380)="fe335ae487a3491e21f44678849df70a9b342507aaa4400f3bbcaddb59fd090c1700e55d9c718a1f31d455724e685239899ec8e84823e57658004715cc0011bd95260d95e760a97146603a558f78ea322d76b6e259c840e6304e0f771a0b79f98749cdc8093ef9416400eea4feb8dc3c68d1767cca21dfc5ec051b122186da42a798d4f9a0d4a2c0262b11a52de1c39686485d25da7f48be7bebe117ad9a87c9e99a7f7271f246eb46c61d86ddc29b4733ed8f4f8d2a516d732d5240dd7c96f43fa157dcb53e0db19584cdb3b8fe36dbe72a9debf82ce5173b57ead7122379b57d590bd46c", 0xe5, 0x7ff}], 0x4000, &(0x7f0000000480)={[{'/dev/cachefiles\x00'}, {}, {'-#'}], [{@smackfshat={'smackfshat', 0x3d, ')'}}, {@smackfsroot={'smackfsroot', 0x3d, '-#/!'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}]}) fadvise64(r3, 0xfffffff8, 0x3f, 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) 11:36:37 executing program 1: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x2, &(0x7f00000000c0)='\x00\x00'}, 0x7b) 11:36:37 executing program 5: bpf$BPF_BTF_LOAD(0x10, &(0x7f0000000000)={0x0, &(0x7f00000001c0)=""/72, 0x0, 0x48}, 0x20) 11:36:37 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000280)={&(0x7f0000000000)=""/5, 0x110000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x8, 0x4) r2 = socket(0x100000000011, 0x2, 0x0) bind(r2, &(0x7f0000000380)=@generic={0x11, "0000010000000000080044944eeba71a4976e2526f0c0900000036005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000001000101013c5811039e17775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c0001000000f3ffff2f43740000000000000006ad8e5ecc326d3a0000c2c65400"}, 0x80) getsockname$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0}, &(0x7f0000000200)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) bind$xdp(r1, &(0x7f00000002c0)={0x2c, 0x0, r3}, 0x10) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000080), 0x4) 11:36:37 executing program 2: pipe(&(0x7f0000000c00)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) [ 652.059783][ T32] audit: type=1800 audit(1608118597.984:714): pid=14124 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15874 res=0 errno=0 11:36:38 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x3c, &(0x7f00000007c0)={0x1, &(0x7f0000000780)=[{}]}, 0x10) 11:36:38 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x23, &(0x7f00000007c0)={0x1, &(0x7f0000000780)=[{}]}, 0x10) 11:36:38 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x8916, 0x0) 11:36:38 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000280)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = dup3(r2, r2, 0x71ddbc2ece9068dc) ioctl$CHAR_RAW_RAGET(r3, 0x1263, &(0x7f00000005c0)) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r3, 0x40045730, &(0x7f0000000100)=0xffff) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r4 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) r5 = socket(0x40000000002, 0x3, 0x2) sendmmsg$inet(r5, &(0x7f0000000080)=[{{&(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10, 0x0}}, {{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0xf, 0x0}}], 0x2, 0x0) r6 = openat$khugepaged_scan(0xffffff9c, &(0x7f00000001c0)='/sys/kernel/mm/transparent_hugepage/khugepaged/scan_sleep_millisecs\x00', 0x1, 0x0) sendfile(r6, r5, 0x0, 0x7ffffffc) lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='trusted.overlay.redirect\x00', &(0x7f0000000080)='./bus\x00', 0x6, 0x1) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) fcntl$getflags(r4, 0x813) 11:36:38 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000240)={{{@in=@multicast2, @in=@broadcast}}, {{@in6=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000000)=0xfffffffffffffdaf) 11:36:38 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="f7"], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xfd, &(0x7f0000000240)=""/253, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 652.880767][ T32] audit: type=1800 audit(1608118598.804:715): pid=14147 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15735 res=0 errno=0 [ 653.011930][ T32] audit: type=1804 audit(1608118598.864:716): pid=14147 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/194/bus" dev="sda1" ino=15735 res=1 errno=0 11:36:39 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000240)={&(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000040)="2c88fc5cc9d92a9b045f7e0c4c8ab980c912e751a4fe256e1a276e851f32222c29b217a6b2f16e97a655289f17147864c3", 0x31}, {&(0x7f0000000140)="dd3111e6b028fa49e895e99d98911b77591f786f63c50e75f2c4e8ab5179cd051ce887beff0b75d0275c9c66ec38e7074d5ab5c14db899012dc5a593a5", 0x3d}], 0x2}, 0x0) 11:36:39 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 11:36:39 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000280)={&(0x7f0000000000)=""/5, 0x110000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x8, 0x4) r2 = socket(0x100000000011, 0x2, 0x0) bind(r2, &(0x7f0000000380)=@generic={0x11, "0000010000000000080044944eeba71a4976e2526f0c0900000036005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000001000101013c5811039e17775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c0001000000f3ffff2f43740000000000000006ad8e5ecc326d3a0000c2c65400"}, 0x80) getsockname$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0}, &(0x7f0000000200)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) bind$xdp(r1, &(0x7f00000002c0)={0x2c, 0x0, r3}, 0x10) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000080), 0x4) 11:36:39 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) 11:36:39 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000280)={&(0x7f0000000000)=""/5, 0x110000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x8, 0x4) r2 = socket(0x100000000011, 0x2, 0x0) bind(r2, &(0x7f0000000380)=@generic={0x11, "0000010000000000080044944eeba71a4976e2526f0c0900000036005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000001000101013c5811039e17775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c0001000000f3ffff2f43740000000000000006ad8e5ecc326d3a0000c2c65400"}, 0x80) getsockname$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0}, &(0x7f0000000200)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) bind$xdp(r1, &(0x7f00000002c0)={0x2c, 0x0, r3}, 0x10) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000080), 0x4) 11:36:39 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000280)={&(0x7f0000000000)=""/5, 0x110000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x8, 0x4) r2 = socket(0x100000000011, 0x2, 0x0) bind(r2, &(0x7f0000000380)=@generic={0x11, "0000010000000000080044944eeba71a4976e2526f0c0900000036005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000001000101013c5811039e17775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c0001000000f3ffff2f43740000000000000006ad8e5ecc326d3a0000c2c65400"}, 0x80) getsockname$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0}, &(0x7f0000000200)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) bind$xdp(r1, &(0x7f00000002c0)={0x2c, 0x0, r3}, 0x10) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000080), 0x4) 11:36:39 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000002d40)=[{{&(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10, 0x0, 0x0, &(0x7f0000000300)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback}}}], 0x38}}], 0x1, 0x0) 11:36:39 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x6, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 11:36:40 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000280)={&(0x7f0000000000)=""/5, 0x110000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x8, 0x4) r2 = socket(0x100000000011, 0x2, 0x0) bind(r2, &(0x7f0000000380)=@generic={0x11, "0000010000000000080044944eeba71a4976e2526f0c0900000036005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000001000101013c5811039e17775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c0001000000f3ffff2f43740000000000000006ad8e5ecc326d3a0000c2c65400"}, 0x80) getsockname$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0}, &(0x7f0000000200)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) bind$xdp(r1, &(0x7f00000002c0)={0x2c, 0x0, r3}, 0x10) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000080), 0x4) 11:36:40 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000280)={&(0x7f0000000000)=""/5, 0x110000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x8, 0x4) r2 = socket(0x100000000011, 0x2, 0x0) bind(r2, &(0x7f0000000380)=@generic={0x11, "0000010000000000080044944eeba71a4976e2526f0c0900000036005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000001000101013c5811039e17775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c0001000000f3ffff2f43740000000000000006ad8e5ecc326d3a0000c2c65400"}, 0x80) getsockname$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0}, &(0x7f0000000200)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) bind$xdp(r1, &(0x7f00000002c0)={0x2c, 0x0, r3}, 0x10) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000080), 0x4) 11:36:40 executing program 5: bpf$BPF_BTF_LOAD(0x3, 0x0, 0x0) 11:36:40 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000280)={&(0x7f0000000000)=""/5, 0x110000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x8, 0x4) r2 = socket(0x100000000011, 0x2, 0x0) bind(r2, &(0x7f0000000380)=@generic={0x11, "0000010000000000080044944eeba71a4976e2526f0c0900000036005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000001000101013c5811039e17775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c0001000000f3ffff2f43740000000000000006ad8e5ecc326d3a0000c2c65400"}, 0x80) getsockname$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0}, &(0x7f0000000200)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) bind$xdp(r1, &(0x7f00000002c0)={0x2c, 0x0, r3}, 0x10) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000080), 0x4) 11:36:40 executing program 1: sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00') sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x49, r1, 0x1, 0x0, 0x0, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}, {0x6}, {0x8}, {0x5}}]}, 0x50}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, 0x0, 0x0) 11:36:40 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) r3 = open(&(0x7f0000000280)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r4 = dup3(r3, r3, 0x71ddbc2ece9068dc) ioctl$CHAR_RAW_RAGET(r4, 0x1263, &(0x7f00000005c0)) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f0000000000)={{@any, 0x40004}, @hyper, 0x4, 0x1c, 0x5, 0x8001, 0x8001, 0x12, 0x100}) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) [ 655.112486][T14189] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.1'. [ 655.172152][T14190] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.1'. 11:36:41 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000280)={&(0x7f0000000000)=""/5, 0x110000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x8, 0x4) r2 = socket(0x100000000011, 0x2, 0x0) bind(r2, &(0x7f0000000380)=@generic={0x11, "0000010000000000080044944eeba71a4976e2526f0c0900000036005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000001000101013c5811039e17775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c0001000000f3ffff2f43740000000000000006ad8e5ecc326d3a0000c2c65400"}, 0x80) getsockname$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0}, &(0x7f0000000200)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) bind$xdp(r1, &(0x7f00000002c0)={0x2c, 0x0, r3}, 0x10) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000080), 0x4) 11:36:41 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000)={0x776}, 0x4) 11:36:41 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000280)={&(0x7f0000000000)=""/5, 0x110000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x8, 0x4) r2 = socket(0x100000000011, 0x2, 0x0) bind(r2, &(0x7f0000000380)=@generic={0x11, "0000010000000000080044944eeba71a4976e2526f0c0900000036005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000001000101013c5811039e17775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c0001000000f3ffff2f43740000000000000006ad8e5ecc326d3a0000c2c65400"}, 0x80) getsockname$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0}, &(0x7f0000000200)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) bind$xdp(r1, &(0x7f00000002c0)={0x2c, 0x0, r3}, 0x10) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000080), 0x4) 11:36:41 executing program 1: bpf$BPF_BTF_LOAD(0x18, 0x0, 0x0) 11:36:41 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000280)={&(0x7f0000000000)=""/5, 0x110000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x8, 0x4) r2 = socket(0x100000000011, 0x2, 0x0) bind(r2, &(0x7f0000000380)=@generic={0x11, "0000010000000000080044944eeba71a4976e2526f0c0900000036005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000001000101013c5811039e17775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c0001000000f3ffff2f43740000000000000006ad8e5ecc326d3a0000c2c65400"}, 0x80) getsockname$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0}, &(0x7f0000000200)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) bind$xdp(r1, &(0x7f00000002c0)={0x2c, 0x0, r3}, 0x10) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000080), 0x4) [ 655.555208][ T32] kauditd_printk_skb: 7 callbacks suppressed [ 655.555271][ T32] audit: type=1800 audit(1608118601.484:724): pid=14193 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15795 res=0 errno=0 [ 655.739377][ T32] audit: type=1804 audit(1608118601.524:725): pid=14194 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/196/bus" dev="sda1" ino=15795 res=1 errno=0 [ 655.763829][ T32] audit: type=1800 audit(1608118601.524:726): pid=14194 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15795 res=0 errno=0 [ 655.783811][ T32] audit: type=1804 audit(1608118601.544:727): pid=14194 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/196/bus" dev="sda1" ino=15795 res=1 errno=0 11:36:42 executing program 2: r0 = socket(0x11, 0xa, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000200)={@empty}) 11:36:42 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x7, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 11:36:42 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0xb, &(0x7f00000007c0)={0x0, 0x0}, 0x10) [ 656.415929][ T32] audit: type=1804 audit(1608118602.194:728): pid=14194 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/196/bus" dev="sda1" ino=15795 res=1 errno=0 [ 656.439876][ T32] audit: type=1804 audit(1608118602.234:729): pid=14193 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/196/bus" dev="sda1" ino=15795 res=1 errno=0 11:36:42 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000200)=ANY=[@ANYBLOB='gre0\x00'/14, @ANYRES32=0x0, @ANYBLOB="07450040ffff"]}) 11:36:42 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000040)="2c1317a446114013ce34aa98aa3c3d4fdd2f3e4f1970a8e1442b151449840e6d15dee7c4c083ddb9b35735d24c42e1a8f506e4df6e2f2b4f0e9ac115c43b67309eeba8f7f30322d6f0798293ce2d08d646b167807c91a203859b5e41430d09e1c51d6ba4fdd8f7fa06e54b794f3f3798040a73092b791829e854872037eb78577fdbf613a22896795dbb015f", 0x8c}, {&(0x7f0000000100)="0f", 0x1}], 0x2}}], 0x1, 0x0) 11:36:42 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) sendmsg$sock(r3, &(0x7f0000000280)={&(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'wg2\x00'}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000300)="7dcda9077b4fb5760df56649e2d9c47eb93251707cb5d399027a69624b7b38bfdde31cf9a12d090cd2c4650643e1075cf1f3432272aea1ee2e3bd2c4998d1d22ea68912b40d2c06256904d9a853da7fa11e99d85e0a8f37d9eaca5e6649c422343e2c8d51a64220de2c976ed7ffd36284b9375115bbae93e6b07b28df3851d6c019fefb6e5d1efcbcb7d0f2b30a5c4352acb2c93d48469463785ca27ee81a77784aa9a90babeead8b3524908c5f1b062a79874dba00fd2eb04f0d9e455190fb299a3a756645a69a01830e9fa4e6b11d145b2b416d757e7193e31b808353648a9452d7165b67bb77516", 0xe9}, {&(0x7f0000000400)="3debced2c18e2d8dc0971961990caf82010b7ed00f3c7c331b7831ec48dcc0a10c13fb0125fd313b89fb9431ffe9f8ddfb83537b10a7dee47f6aa4d590263a5df6cfe7f88b2a66411d03a5ae4deea7952db00b7c23f603a3fd17200f768246e0660c1c1a220c2f86285dea1fe16348ddf0d54dbd3871a373cec07d0ebd9a1a0751a40bb228efd397bd249a72f92405118a6b75ffe7654abd6bf26c91c56d45aeb854", 0xa2}], 0x2, &(0x7f0000000180)=[@mark={{0x10, 0x1, 0x24, 0xffffffff}}, @mark={{0x10, 0x1, 0x24, 0x36c0}}, @mark={{0x10, 0x1, 0x24, 0x2d}}, @txtime={{0x14, 0x1, 0x3d, 0x2}}, @txtime={{0x14, 0x1, 0x3d, 0x2}}], 0x58}, 0x20000014) r4 = openat$drirender128(0xffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x222c00, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r4, 0xf50f, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) r5 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6100) ftruncate(r5, 0x8200) write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x175d900f) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r5, 0x7b1, &(0x7f0000000040)={&(0x7f0000000740)=[0x1, 0x1000, 0x6, 0x9, 0x2ddd, 0x0, 0x3, 0x40, 0x7fff, 0x1, 0x0, 0xffff, 0x1000, 0x6, 0x400, 0x10001, 0x4f, 0xb, 0x3, 0x3, 0x3, 0x7fff, 0x3, 0x7fffffff, 0x1000, 0xb78, 0x2, 0x3, 0xff, 0x2, 0x180000, 0x20, 0x0, 0x0, 0x456b, 0x5, 0x8393, 0xff, 0x101, 0x4, 0x4, 0x1, 0x5, 0x40, 0x401, 0x80000001, 0x3, 0x3be400, 0x800, 0xac39, 0x1, 0x8001, 0x3, 0x80000001, 0x1, 0x7, 0x4, 0x6, 0x401, 0x1, 0x80, 0x4, 0x1, 0x8, 0xb0, 0x7, 0xdd, 0x4, 0x1a73, 0x8, 0x0, 0xfffffe00, 0x1f, 0x61d, 0x1, 0x80, 0x1, 0x269d33d7, 0x3, 0x4, 0x6, 0xd1, 0x54c, 0x8, 0x8, 0x5, 0x3, 0x81, 0x9, 0x0, 0x7, 0x0, 0x1, 0x5, 0x5, 0x100, 0x9, 0x24c, 0xbf, 0x0, 0x1000, 0x7ff, 0x7, 0x1, 0x8, 0x5, 0x1, 0x8, 0x1, 0x7fffffff, 0x6, 0x3, 0x8, 0x6, 0x1, 0x101, 0xffff, 0x9, 0x7, 0x8, 0x2, 0x1f, 0x400000, 0x7382, 0x200, 0x6, 0x3, 0x7d4, 0x9, 0x73c, 0x9, 0x4, 0x6, 0x1ff, 0x400, 0x7, 0x5, 0x5, 0x400000, 0x2, 0x9, 0x1, 0xd8e, 0x8, 0x1, 0xf314, 0xfff, 0xec28, 0x80000000, 0x20, 0x8000, 0x100, 0x80, 0x4, 0x0, 0x4, 0x3, 0xbf, 0x7, 0x800, 0xa4d9, 0x0, 0x8001, 0x5, 0x9, 0xffffffe1, 0x0, 0x200, 0x5, 0x5, 0x8, 0x20, 0x9, 0x9, 0x100, 0x2400, 0x7, 0x80, 0x1, 0x5fb3, 0x5, 0x401, 0x0, 0x6839, 0x691, 0x1, 0x9, 0x400, 0x1, 0x2, 0x1, 0x7fffffff, 0x8821, 0x7, 0xe7, 0x67fcb491, 0x800, 0x7, 0x5, 0x8, 0x5, 0x4, 0x400, 0x9, 0xfffffff9, 0x155f, 0x4, 0x2, 0xffff7fff, 0x1ca, 0x7d, 0x9, 0x0, 0x7fff, 0xff, 0xfffffffe, 0x8, 0x9, 0x0, 0x8, 0x4c5e83a0, 0x7, 0x2, 0x2, 0x8000, 0x80000000, 0x2, 0x80, 0x174c0000, 0x1000, 0x5, 0x40, 0x1, 0x1, 0xd1, 0x6, 0x7fffffff, 0x40, 0x9, 0xff, 0x2, 0x3f, 0x80000001, 0x8, 0x1, 0x6, 0x5615, 0x5, 0x2, 0x8, 0x4, 0xc5d, 0x400, 0x6, 0x8, 0x4, 0x4, 0x7, 0x9, 0x1, 0xffff, 0x6, 0x9, 0x9, 0x2, 0x8bd4, 0x5, 0x4, 0xffff8001, 0x6, 0x7f, 0x5, 0x40, 0x1, 0x7, 0x40000000, 0xae3, 0x6, 0x3, 0x9, 0x3, 0x401, 0x2, 0x20, 0x6, 0x7f, 0x81, 0x80000000, 0x9, 0x4, 0x20, 0x8, 0x4, 0xfffffe00, 0x948, 0x8, 0x4, 0x9, 0x1f, 0xffff7fff, 0x26, 0x7, 0x0, 0x7fff, 0x2, 0xea, 0x10000, 0xc0, 0xfff, 0x2, 0x7fffffff, 0x4, 0x3, 0x800, 0xff, 0x1, 0x100, 0x91, 0xffffffff, 0x20, 0x7fff, 0x1, 0x3, 0x1, 0x7, 0x9, 0x9, 0x4, 0x1f, 0x4, 0x135, 0x7, 0x4, 0x2, 0x6, 0x2, 0x4, 0xfffffff9, 0x5, 0x2, 0xd1, 0x7fffffff, 0x9, 0x0, 0x1f56, 0x2, 0x3, 0x0, 0x3393, 0x2, 0x1, 0x2, 0x7, 0x7fff, 0x7, 0x81, 0xc3eb, 0x5, 0x9, 0x1, 0x6, 0x1f, 0x7, 0x8, 0x8, 0x5, 0x3, 0xc4eb, 0x8001, 0x5, 0x3, 0x4fd, 0x4, 0xd5a3, 0x400, 0x2, 0x61, 0x3, 0x6b, 0x8, 0xff, 0xfffffffc, 0x1f, 0x8, 0x8, 0xe1, 0x3, 0x80000000, 0x101, 0x4, 0x9, 0x10001, 0x5, 0x6, 0x7fff, 0x6, 0x9, 0x3, 0x8, 0xfffffffa, 0xffff8000, 0x1, 0x1f, 0x91, 0x6, 0x101, 0x5, 0x7, 0x3, 0x0, 0xfffff7fe, 0x1, 0x3, 0x80, 0x2, 0x4, 0x6, 0x3, 0x81, 0x3, 0x7ff, 0x8, 0xf3, 0x6, 0x6, 0x3ff, 0x32, 0x20, 0x80000001, 0x0, 0x5, 0x1, 0x2d0743c5, 0xe2, 0x2f, 0xfffffffd, 0x1, 0x9, 0x200, 0x1, 0x4, 0x7, 0x200, 0x9, 0x81, 0x8000, 0xd86b, 0x5, 0x1, 0x6, 0x1, 0xffff, 0xffffffff, 0x1, 0xff, 0xffffffe5, 0x401, 0x5, 0x0, 0x8000, 0x800, 0xfffffffa, 0x0, 0x4, 0x2, 0x81, 0x5, 0x7fffffff, 0x5, 0x5, 0x400, 0xfffffff7, 0x3, 0x1, 0x1, 0x5, 0xb63, 0x98862b1, 0x7fffffff, 0x40, 0x2, 0xfff, 0x10000, 0x101, 0x3, 0x8, 0x5, 0x6, 0x2, 0xe643, 0x9, 0x1, 0x0, 0x4, 0xaa7, 0x101, 0x39c, 0x6, 0x8000, 0xb2, 0x3, 0x7f, 0xbcd, 0x1, 0xce, 0x200, 0x6, 0x8, 0x80, 0xd2, 0x9, 0x1, 0x2c17, 0x0, 0xde, 0x275, 0xf41, 0x5, 0x1, 0x4, 0x0, 0x1, 0x7, 0x36, 0x3ad, 0x2, 0x5, 0x919, 0xffffff01, 0x5, 0x400, 0x3, 0x6a0, 0x6, 0x29, 0x7, 0x7, 0x1b05, 0x9, 0x4, 0x7f, 0x75f, 0x8001, 0x3, 0x8001, 0x5, 0x6, 0xfffffffb, 0x4, 0x0, 0x9, 0x762, 0x10001, 0x4, 0x9, 0x2, 0x80, 0x1, 0x2, 0x7, 0x9, 0xda, 0xfff, 0x60, 0x8790, 0x1200000, 0x58d5, 0xffffffff, 0x1, 0xffffa430, 0x7, 0xc40, 0x2, 0x1, 0x2, 0x3095, 0x6, 0x7ff, 0x7, 0x7ff, 0x7, 0x9, 0x62, 0x7fffffff, 0x610b6cee, 0x101, 0x800, 0x83, 0x8c88, 0x6, 0x6, 0x4, 0x3bf, 0x6, 0x1, 0x5, 0x4788, 0x4a8, 0x9f37, 0x6, 0x2, 0x1, 0xe3, 0x7, 0x7ff, 0x8, 0x4, 0xfff, 0x8, 0x9, 0xcbd2, 0x7, 0x5eb7cde2, 0x8acc, 0x1000, 0x800, 0x4, 0x7f, 0x3, 0x2, 0x3a, 0x5, 0x8, 0x9, 0x1, 0x1, 0x1000, 0x7, 0x9b, 0xffffffff, 0x8, 0xa472, 0xffffffff, 0x8001, 0x6, 0x20, 0xfff, 0x9, 0xff, 0x57, 0x1, 0x97, 0x1ff, 0x5c85, 0x9, 0xfffffe01, 0x6, 0x80, 0x81, 0x3, 0x80000001, 0x5, 0x3ff, 0xb2, 0x4, 0x3f, 0x7, 0x401, 0x6, 0xdb23, 0x3ff, 0x0, 0x4, 0xb605, 0x401, 0x6, 0x8, 0x7ff, 0x7f, 0x799f1635, 0x7, 0x4, 0x80000000, 0x7, 0x7, 0x4, 0x2, 0xb86d, 0x9, 0x4, 0x1, 0xf8b, 0x0, 0x728ba302, 0x81, 0x6, 0x2, 0x9, 0x6, 0x7, 0x400, 0x3f, 0x101, 0x80, 0x3, 0x9, 0x8, 0x0, 0xfffffffa, 0x4, 0x3, 0x410, 0x9, 0x6, 0x10000, 0x1, 0x7f, 0x3c43, 0x2e, 0x3, 0xfff, 0x3, 0x7cf79d49, 0x3, 0xffff, 0x10001, 0x9, 0x1, 0xffffffff, 0x3b57, 0x4, 0x7, 0x7fffffff, 0x7, 0x3, 0x3, 0x4, 0x6, 0x8001, 0x7, 0x9, 0xfff, 0x4, 0x20, 0x180, 0x5, 0x80000000, 0x8, 0x7, 0x1497, 0x2a, 0xc911, 0x5ee, 0xffff, 0x952, 0x8, 0x332, 0xc75, 0x2, 0x8, 0x1, 0x3f, 0xffffff84, 0xff, 0x6, 0x40, 0x6bd0, 0x8, 0x5, 0x0, 0x401, 0xffffffff, 0x9d2, 0x3, 0x4, 0x7f, 0x2, 0x20, 0x3, 0x6, 0xffff, 0x25a9, 0x2, 0x0, 0x15b, 0x7, 0x8464, 0x3b, 0x9, 0x1, 0x7e, 0x1f, 0x3, 0x9, 0x2, 0x7, 0x9, 0x9, 0x5, 0x4, 0x74, 0x1f, 0x6, 0x8, 0x1ff, 0x1, 0x7, 0x4, 0x9, 0x5, 0x0, 0x11, 0x80000001, 0x7, 0x7fff, 0x80000000, 0x9, 0x9db2, 0x6, 0x0, 0x6, 0x2, 0x3ff, 0x4, 0x8, 0x4, 0x3, 0x6, 0x8, 0x20, 0x3, 0xffffff00, 0x9, 0x7, 0xffffffea, 0x4159, 0x0, 0x0, 0x101, 0x40000, 0x3, 0x6, 0x1f, 0x5, 0xffff, 0x3ff, 0x78, 0x2, 0x1, 0x9, 0x1ff, 0x9, 0x200, 0x3d1, 0x3, 0x8, 0xa81, 0x80000000, 0x6, 0x44, 0x3, 0xfffffffa, 0x3, 0x7fff, 0x15, 0x5, 0x4, 0x7, 0x100, 0x0, 0x1, 0x2, 0x1000, 0x100, 0x1, 0x7, 0x1, 0x20, 0x400, 0x101, 0x0, 0x101, 0x8b7d, 0x1, 0x1, 0x7, 0x4, 0x1, 0x10000, 0x1ff, 0x875, 0xffffffff, 0x0, 0x9, 0x1, 0xf3, 0x400, 0x0, 0x8001, 0x200, 0x6, 0x85f, 0x3, 0x6, 0x10001, 0x4, 0x40, 0x7, 0x0, 0x7, 0x7, 0x8, 0x1, 0x0, 0x0, 0x0, 0x9, 0x4, 0x5df, 0x1, 0x6, 0x3, 0x100, 0x3b, 0x8, 0x9, 0x3, 0x9, 0x5, 0x101, 0x400, 0x4, 0x3ff, 0x1000, 0x0, 0x9, 0xfffffffe, 0x0, 0x7, 0x8f57, 0x1, 0x2a87, 0x2, 0xa80, 0x4, 0xffffffe0, 0x7fff, 0x8, 0x7ff, 0x4, 0xfff, 0x462e, 0x1bac, 0x10000, 0x7, 0x0, 0x1, 0xaab, 0x1, 0x25c, 0x8001, 0x1d1, 0x5, 0x9, 0x7fff, 0x5, 0x8, 0x100, 0x3, 0x3, 0x3, 0x739dc4a2, 0x7, 0x6, 0x2, 0x8001, 0x7, 0x1f, 0x0, 0x81, 0x20, 0x4, 0xfd, 0x0, 0xd96, 0x3000, 0x3, 0x3, 0x4e3480, 0x80000000, 0x76d7, 0x8, 0x81, 0x66b2, 0x7, 0x800, 0xc0b, 0x9e1, 0x80, 0x74, 0x3, 0x8, 0x4, 0x0, 0x2, 0x8, 0x6, 0x80000001, 0x3ff, 0x6, 0x200, 0x3, 0x1f, 0x8, 0x3, 0x1, 0x7f, 0x5, 0xa2c, 0x3, 0x2, 0x472, 0x3, 0x5b9b, 0x2, 0x8, 0x4, 0x401, 0x800, 0x5, 0xffff8001, 0x3, 0x100000, 0x7], 0x1, 0x400, 0x1, 0x80000000}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) 11:36:43 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r0, 0x0, &(0x7f0000000100)) 11:36:43 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000002d40)=[{{&(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10, 0x0}}], 0x1, 0x0) [ 657.222210][ T32] audit: type=1800 audit(1608118603.144:730): pid=14223 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15748 res=0 errno=0 11:36:43 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0xa, &(0x7f00000007c0)={0x1, &(0x7f0000000780)=[{}]}, 0x10) [ 657.380066][ T32] audit: type=1804 audit(1608118603.224:731): pid=14223 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/197/bus" dev="sda1" ino=15748 res=1 errno=0 [ 657.404711][ T32] audit: type=1800 audit(1608118603.234:732): pid=14223 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15748 res=0 errno=0 11:36:43 executing program 3: r0 = socket(0x11, 0xa, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x890b, &(0x7f0000000200)) 11:36:43 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 657.747614][ T32] audit: type=1804 audit(1608118603.394:733): pid=14225 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/197/bus" dev="sda1" ino=15748 res=1 errno=0 11:36:43 executing program 4: bpf$BPF_BTF_LOAD(0x15, 0x0, 0x0) 11:36:44 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000500)={&(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=[@hopopts={{0x18}}, @hoplimit_2292={{0x14}}], 0x30}, 0x0) 11:36:44 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x2e, &(0x7f00000007c0)={0x0, 0x0}, 0x10) 11:36:44 executing program 1: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000100)=0x2e4, 0x4) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x2000000, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c910ccab00220bc31d41e44f96f67971b8ed8a3dc9eb4123a903d58da02dd1eca653150422bc91e9585fbf8", 0x57}, {&(0x7f00000011c0)="7cc3be44ec8663e0c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0), 0x80fe}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb07accdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x400000000000132, 0x400000a) 11:36:44 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000000)={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x24}}, {0x6, @broadcast}, 0x0, {0x2, 0x4e23, @empty}, 'caif0\x00'}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) 11:36:44 executing program 3: r0 = socket(0x11, 0xa, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000240)={@private2}) 11:36:44 executing program 4: bpf$BPF_BTF_LOAD(0x1c, 0x0, 0x0) 11:36:44 executing program 5: bpf$BPF_BTF_LOAD(0xb, &(0x7f0000000000)={0x0, &(0x7f00000001c0)=""/72, 0x0, 0x48}, 0x20) 11:36:45 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00') sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x50, r1, 0x1, 0x0, 0x0, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}, {0x6}, {0x8}, {0x5}}]}, 0x50}}, 0x0) 11:36:45 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'gretap0\x00', &(0x7f0000000000)={'ip_vti0\x00', r6, 0x10, 0x780e, 0x8, 0xfff, {{0x20, 0x4, 0x1, 0x3, 0x80, 0x65, 0x0, 0xff, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, {[@ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x44, 0x90, 0x3, 0xc, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@multicast1, 0xffff38d8}, {@broadcast, 0x10001}, {@empty}, {@empty, 0x10000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@rand_addr=0x64010101, 0x25}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffffffa}]}, @cipso={0x86, 0x10, 0x3, [{0x2, 0xa, "e3e4e8191b63687c"}]}, @generic={0x86, 0x6, "bc669998"}, @ssrr={0x89, 0xb, 0x26, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102]}, @noop]}}}}}) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) 11:36:45 executing program 3: bpf$BPF_BTF_LOAD(0x1e, &(0x7f0000000000)={0x0, &(0x7f00000001c0)=""/72, 0x0, 0x48}, 0x20) 11:36:45 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000006b80)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x840) 11:36:45 executing program 4: syz_emit_ethernet(0x15, &(0x7f0000000340)={@multicast, @remote, @val={@void}, {@x25}}, 0x0) 11:36:45 executing program 5: r0 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) [ 659.647474][T14267] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 659.717313][T14269] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 11:36:45 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0xa, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 11:36:46 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0xc, &(0x7f00000007c0)={0x0, 0x0}, 0x10) 11:36:46 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x0, 0x1, 0x0, 0xe}, 0x20) 11:36:46 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x40) [ 660.378157][T14277] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 660.433538][ T8489] Bluetooth: hci5: command 0x0406 tx timeout 11:36:46 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) 11:36:46 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x0, 0x0, 0x0, 0xe}, 0x20) 11:36:46 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) readv(r0, &(0x7f0000000200)=[{&(0x7f0000000100)=""/234, 0xea}, {&(0x7f0000000280)=""/249, 0xf9}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000000000)=""/136, 0x88}, {&(0x7f0000000380)=""/205, 0xcd}, {&(0x7f0000000480)=""/177, 0xb1}], 0x6) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) openat$vcsu(0xffffff9c, &(0x7f0000000600)='/dev/vcsu\x00', 0x80a00, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) getresgid(&(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) 11:36:46 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x1, 0x9}, 0x20) [ 660.976086][T14304] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable 11:36:46 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001b00)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000002900)={0x0, 0x0, &(0x7f00000028c0)={&(0x7f0000002680)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}]}, 0x2c}}, 0x0) 11:36:47 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) 11:36:47 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x2c, &(0x7f00000007c0)={0x0, 0x0}, 0x10) [ 661.337054][ T32] kauditd_printk_skb: 15 callbacks suppressed [ 661.337126][ T32] audit: type=1800 audit(1608118607.264:749): pid=14311 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15735 res=0 errno=0 [ 661.363405][ T32] audit: type=1804 audit(1608118607.284:750): pid=14311 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/200/bus" dev="sda1" ino=15735 res=1 errno=0 11:36:47 executing program 5: bpf$BPF_BTF_LOAD(0x6, &(0x7f0000000000)={0x0, &(0x7f00000001c0)=""/72, 0x0, 0x48}, 0x20) [ 661.363647][ T32] audit: type=1800 audit(1608118607.284:751): pid=14311 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15735 res=0 errno=0 11:36:47 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, &(0x7f0000000140)) 11:36:47 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0x67, 0x0, &(0x7f0000000040)) 11:36:47 executing program 4: syz_genetlink_get_family_id$nl80211(&(0x7f0000000bc0)='nl80211\x00') sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000001dc0)) [ 662.130508][ T32] audit: type=1804 audit(1608118608.054:752): pid=14311 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/200/bus" dev="sda1" ino=15735 res=1 errno=0 11:36:48 executing program 5: pipe(&(0x7f0000000a80)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) 11:36:48 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1600bd60, &(0x7f00000007c0)={0x0, 0x0}, 0x10) [ 662.292747][ T32] audit: type=1804 audit(1608118608.104:753): pid=14317 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/200/bus" dev="sda1" ino=15735 res=1 errno=0 [ 662.317278][ T32] audit: type=1800 audit(1608118608.104:754): pid=14317 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15735 res=0 errno=0 11:36:48 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r2 = syz_mount_image$vfat(&(0x7f0000000240)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000280)=ANY=[]) mkdirat(r2, &(0x7f0000000040)='./file1\x00', 0x0) unlinkat(r2, &(0x7f0000000380)='./file1\x00', 0x200) getdents(r2, &(0x7f0000000140)=""/219, 0xdb) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000000000), &(0x7f0000000040)) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r3 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) r4 = syz_mount_image$affs(&(0x7f0000000100)='affs\x00', &(0x7f0000000140)='./bus\x00', 0x9, 0x7, &(0x7f0000000640)=[{&(0x7f0000000180)="4e3622242623d235d1cc37d290d92f163465630c948add49876d2a117744bdc533b1671aeb6bf5a4513988a212c5c073f08e39beaddec7445a2c99e0d7592d0c04330df20707134db94e4a69c019df3bc6029a0b5d", 0x55, 0x2}, {&(0x7f0000000280)="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", 0xff, 0x3}, {&(0x7f0000000380)="7e039a3971fec8a969ebb1c3028e4bd4d3281060df578aca23651dd0f77a6eb6dc1dbc16e67074cbe3f7ce2ebc829dde4309cf5a312edaf054cefa88925f06685e446430ae84aaebe363c5c0a874f3e05b36d3cc6c43dbef5387f48e0e64f6484c8e3894f97bda7392f5f39d047db008f197b83d1cac12f56912edf45497342e1392e6cd17dba4ff68cceab17cb0e8c193e57c0540cc202f22078660c09d322f2f", 0xa1, 0x401}, {&(0x7f0000000740)="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", 0x1000, 0x7ff}, {&(0x7f0000000440)="2dc445afd1599e4ac1ca26490e34fcc840fe99d82f4bad896b9b3aa67ebea1f814b1518b5fecb7d574185e6de0c411f5fde3b1a38e090fa600121b2ff8d16688ecaa7623503b7ca3f50284a691bdbdc03b", 0x51, 0x1}, {&(0x7f00000004c0)="1e09e02833952656ad2b666676309f1ac92703612070fe7b8e6497401d380ad3ab375d5f500901099549638b5e994ea36bd75cde0623507403e0095b2ca77627f1c2d07e200ee164162466ffd5c7eccf29470ed703b96a0e41a5d9713bde3507b5dcb67d3bb6f9379a72b1f660f599d15214bf0fa62319f571ccd5c4521b5df874b299d1b5e0239c9a54347dd25bc2baba341ab635a5e8d1645e40baa401c9742063c96f", 0xa4, 0x229}, {&(0x7f0000000580)="f419c81f494cc46f536fd95a40fee5239002d15a81a620025259684b1961c0c2df61a2a8d0ca2c052a1e66d4c8ab549456ee138de8b67f432b65573ef627e0276d4bdd31e040842eb9bc77ad4a6b6b2040f97fb8cd99d2dc64357ef2d1e14cb0073f2097f098c93f4ae22deec12fd733e530018c8da5b1394257f74c5625e14c52b288d0d59fe28f8af30a62a572faed9e273e0fc308bd83e126", 0x9a, 0x3}], 0x300c35, &(0x7f0000001740)={[{'#\xc4%'}, {'#)'}, {')'}, {}, {'\t)'}, {'(,'}, {')4*\xfc'}], [{@seclabel='seclabel'}, {@hash='hash'}, {@smackfsroot={'smackfsroot', 0x3d, '}%}-@`$]'}}, {@euid_gt={'euid>', 0xee00}}, {@smackfstransmute={'smackfstransmute', 0x3d, '.%:%,$$+)'}}]}) sendfile(r4, r3, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x801) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000080)={0x0, r5}, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) 11:36:48 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000180)={@dev, 0x4ac}) 11:36:48 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000200)={'sit0\x00', 0x0, 0x0, 0x0, 0x52, 0x0, 0x0, @local, @private0}}) 11:36:49 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x3, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9}}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 11:36:49 executing program 2: bpf$BPF_BTF_LOAD(0x9, 0x0, 0x0) [ 663.110903][ T32] audit: type=1800 audit(1608118609.034:755): pid=14339 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15725 res=0 errno=0 11:36:49 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) r1 = socket(0x11, 0xa, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000200)) 11:36:49 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000003d00)=[{{&(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10, 0x0}}], 0x1, 0x0) [ 663.348836][ T32] audit: type=1804 audit(1608118609.274:756): pid=14339 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/201/bus" dev="sda1" ino=15725 res=1 errno=0 [ 663.374855][ T32] audit: type=1800 audit(1608118609.274:757): pid=14339 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15725 res=0 errno=0 [ 663.721973][ T32] audit: type=1804 audit(1608118609.384:758): pid=14343 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/201/bus" dev="sda1" ino=15725 res=1 errno=0 11:36:49 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x1871fe, 0x7a1d60bb7dbde0b3) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000280)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = dup3(r2, r2, 0x71ddbc2ece9068dc) ioctl$CHAR_RAW_RAGET(r3, 0x1263, &(0x7f00000005c0)) ioctl$UI_BEGIN_FF_ERASE(r3, 0xc00c55ca, &(0x7f0000000080)={0xd, 0x1000, 0xc1c2}) r4 = open(&(0x7f0000000240)='./bus\x00', 0x50a40, 0x18b) r5 = open(&(0x7f0000000280)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r5, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$PIO_UNISCRNMAP(r6, 0x4b6a, &(0x7f0000000040)="ae4d608af5c7ec5071281378495194273b6d06fa9ea4fafb42ac3ec348f3") dup3(r5, r5, 0x71ddbc2ece9068dc) ioctl$TIOCSTI(r5, 0x5412, 0x6) sendfile(r1, r4, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) 11:36:49 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x46, 0x0, &(0x7f0000000140)) 11:36:50 executing program 2: bpf$BPF_BTF_GET_FD_BY_ID(0xa, 0x0, 0x0) 11:36:50 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000040)={'ip6tnl0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @private0}}) 11:36:50 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@private0, @loopback, @ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d4b9eca49f495fe}) 11:36:50 executing program 5: bpf$BPF_BTF_LOAD(0x9, &(0x7f0000000000)={0x0, &(0x7f00000001c0)=""/72, 0x0, 0x48}, 0x20) 11:36:50 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) 11:36:50 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000002d40)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @empty}, 0x10, 0x0}}, {{&(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10, 0x0, 0x0, &(0x7f0000000300)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @dev}}}, @ip_ttl={{0x14}}], 0x38}}], 0x2, 0x0) 11:36:50 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000040)="2c1317a446114013ce34aa98aa3c3d4fdd2f3e4f1970a8e1442b151449840e6d15dee7c4c083ddb9b35735d24c42e1a8f506e4df6e2f2b4f0e9ac115c43b67309eeba8f7f30322d6f0798293ce2d08d646b167807c91a203859b5e41430d09e1c51d6ba4fdd8f7fa06e54b794f3f3798040a73092b791829e8548720", 0x7c}, {&(0x7f0000000100)="0f", 0x1}, {&(0x7f0000000200)="dc", 0x1}], 0x3}}], 0x1, 0x0) 11:36:50 executing program 3: bpf$BPF_BTF_GET_FD_BY_ID(0x21, 0x0, 0x0) 11:36:51 executing program 0: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) r1 = openat$uhid(0xffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0) prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ffc000/0x2000)=nil) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000280)={0x0, 0x1, 0x1, [0x2, 0x22823863, 0x4, 0x100000000, 0x20], [0xd2cc9e, 0x20, 0xfff, 0x892e, 0xfffffffffffffffe, 0x6, 0x40, 0x8, 0x0, 0x3, 0xa526, 0x100000000, 0x8, 0x3, 0x3ff, 0x0, 0x7, 0x4, 0x0, 0x6, 0x9, 0x11c5, 0x4, 0x3, 0x41, 0x4, 0x6, 0x9, 0xf, 0x6b, 0x8, 0x1, 0x7, 0x9, 0x2, 0x6, 0x4, 0x20, 0x7fffffff, 0x5, 0x8000, 0xd99c, 0x1, 0x0, 0x3, 0x0, 0x6, 0xb5, 0x5, 0x8, 0x4, 0x3, 0x3, 0x100000000, 0x2d4400, 0x0, 0x6, 0x1, 0x0, 0x4, 0x3b30000000, 0x1ff, 0x7, 0x8, 0x5, 0x0, 0x0, 0x1f, 0x3f, 0x9, 0x101, 0x3, 0x6, 0x8001, 0x37, 0x9, 0x6, 0x1000, 0x0, 0xffffffff, 0xd2fc, 0xfffffffffffffffa, 0x4, 0xfff, 0x1, 0xffffffffffffffa8, 0x0, 0x4, 0x3, 0x9, 0x0, 0xa1, 0x9, 0x10001, 0x7, 0x9, 0x7, 0x0, 0x0, 0x9, 0x4, 0x100000001, 0x9, 0x4, 0x6, 0x8, 0xffffffffffffff81, 0x1, 0x2, 0x0, 0x5, 0x5, 0x1f, 0xbec, 0x348, 0x100, 0x100000001, 0x8, 0x8000, 0x6, 0x3]}) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000080)={0xd, 0x7, 0x2, {0x4, '-)@$'}}, 0xd) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) ioctl$HIDIOCSUSAGE(r2, 0x4018480c, &(0x7f0000000000)={0x1, 0xffffffff, 0x40, 0xffffffff, 0x3c56af77, 0x8}) sendfile(r0, r2, 0x0, 0x8000fffffffe) r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000100)='/proc/capi/capi20\x00', 0x0, 0x0) ioctl$VT_DISALLOCATE(r3, 0x5608) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000040)={0x20000002}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) 11:36:51 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00', @local}}) 11:36:51 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x2, &(0x7f0000000100)={'ip6gre0\x00', 0x0}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0xffffffffffffffff, 0x7}, 0xc) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000240)={'ip6_vti0\x00', 0x0, 0x79, 0x7f, 0x80, 0x14d, 0x1, @rand_addr=' \x01\x00', @local, 0x40, 0x40, 0x7, 0xffffffff}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f0000000380)={'ip6_vti0\x00', &(0x7f0000000300)={'ip6gre0\x00', r3, 0x4, 0x4, 0xff, 0x42d, 0x2d, @empty, @empty, 0x40, 0x700, 0xbe, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'ip6_vti0\x00', r4, 0x4, 0x80, 0x8, 0x421f, 0x64, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @loopback, 0x8, 0x700, 0x7ff800, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000500)={'syztnl0\x00', &(0x7f0000000480)={'syztnl1\x00', r5, 0x29, 0x2, 0x2, 0x3, 0x61, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', 0x1, 0x8000, 0x1}}) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r6, 0x5411, &(0x7f0000000d80)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140)="c7d755ed555687f8e3d9c727cd35275715a4eba0fc72d7ce5c741b092d80ab24747b6a81bc81396022921a1b4f366763db56d380ada267a3e47b66c23b96c6e939c3f8990cde44febce9d9da1abe23515dccbaae550f80996d5fe8143b4eaa050b808bfff816cb3baf9768843a827fbe2afeb4682a12bcd4bb7f089db3c933fa6819b4166cdbc1250517cc1dd25797b0d9f3bc", &(0x7f00000000c0)=@udp=r6}, 0x20) r7 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r7, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={r7, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000540)='\x00'}, 0x30) 11:36:51 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000280), 0x4) 11:36:51 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000240)={&(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000040)="2c88", 0x2}], 0x1}, 0x0) 11:36:51 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000080)) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) 11:36:51 executing program 5: r0 = socket(0x11, 0xa, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'tunl0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}}}}) 11:36:52 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5421, &(0x7f0000001600)) 11:36:52 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x1}}, @enum]}}, &(0x7f0000000240)=""/217, 0x3e, 0xd9, 0x1}, 0x20) [ 666.449126][ T32] kauditd_printk_skb: 4 callbacks suppressed [ 666.449206][ T32] audit: type=1804 audit(1608118612.374:763): pid=14388 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/203/bus" dev="sda1" ino=16375 res=1 errno=0 [ 666.711233][ T32] audit: type=1804 audit(1608118612.454:764): pid=14388 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/203/bus" dev="sda1" ino=16375 res=1 errno=0 [ 666.738672][ T32] audit: type=1800 audit(1608118612.454:765): pid=14388 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16375 res=0 errno=0 11:36:52 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x43, 0x0, &(0x7f0000000040)) 11:36:52 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) fsetxattr$security_capability(r1, &(0x7f0000000000)='security.capability\x00', &(0x7f0000000040)=@v3={0x3000000, [{0x8, 0x5}, {0x2, 0x6476eabf}], 0xffffffffffffffff}, 0x18, 0x1) lseek(r1, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r2, 0x0, 0xfdfffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) 11:36:52 executing program 3: bpf$BPF_BTF_GET_FD_BY_ID(0x1e, 0x0, 0x0) 11:36:52 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 11:36:53 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000280)={0x0, {{0xa, 0x0, 0x0, @dev}}}, 0x90) [ 667.400894][ T32] audit: type=1800 audit(1608118613.324:766): pid=14427 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16371 res=0 errno=0 11:36:53 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x4, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}}, 0x0) [ 667.563914][ T32] audit: type=1804 audit(1608118613.394:767): pid=14427 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/204/bus" dev="sda1" ino=16371 res=1 errno=0 [ 667.590852][ T32] audit: type=1800 audit(1608118613.394:768): pid=14427 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16371 res=0 errno=0 11:36:53 executing program 3: socket(0x11, 0xa, 0x0) socket$packet(0x11, 0x2, 0x300) 11:36:53 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x4020940d, &(0x7f0000001600)) 11:36:53 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000200)={&(0x7f0000000100)=""/207, 0x0, 0x800}, 0x20) 11:36:54 executing program 4: bpf$BPF_BTF_LOAD(0x1e, 0x0, 0x0) [ 668.143969][ T32] audit: type=1804 audit(1608118614.074:769): pid=14429 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/204/bus" dev="sda1" ino=16371 res=1 errno=0 [ 668.338460][ T32] audit: type=1804 audit(1608118614.134:770): pid=14439 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/204/bus" dev="sda1" ino=16371 res=1 errno=0 [ 668.365524][ T32] audit: type=1800 audit(1608118614.144:771): pid=14439 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16371 res=0 errno=0 11:36:54 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x2, &(0x7f00000007c0)={0x0, 0x0}, 0x10) 11:36:54 executing program 0: ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(0xffffffffffffffff, 0x800c4151, &(0x7f0000000040)={0x0, &(0x7f0000000000)="2534b60ccaff60eb0ae97a9a59403e3120d2b60f13de558d85", 0x19}) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) 11:36:54 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0x8, 0x0, 0xbcf5}, 0x40) 11:36:54 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x2c0802, 0x0) 11:36:54 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1b, &(0x7f00000007c0)={0x0, 0x0}, 0x10) 11:36:54 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x76, &(0x7f00000002c0)=""/118, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 669.061226][ T32] audit: type=1800 audit(1608118614.984:772): pid=14455 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16382 res=0 errno=0 11:36:55 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) 11:36:55 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000001380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x8}, {0x2}]}]}}, &(0x7f0000000240)=""/209, 0x36, 0xd1, 0x1}, 0x20) 11:36:55 executing program 2: bpf$BPF_BTF_LOAD(0x16, 0x0, 0x0) 11:36:55 executing program 5: syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00') 11:36:55 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000001600)) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, 0x0, 0x20000000) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000800)=ANY=[@ANYBLOB], 0x8) pipe(0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0}}, 0x20040840) 11:36:56 executing program 3: epoll_create(0x1000) 11:36:56 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(r1, 0x7aa, &(0x7f0000000100)={{@my=0x1, 0x2}, 0x3, 0x7f}) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendmmsg$inet(r3, &(0x7f0000000080)=[{{&(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10, 0x0}}, {{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0xf, 0x0}}], 0x2, 0x0) r4 = fsmount(r1, 0x1, 0x4) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, 0x0) r5 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendmmsg$inet(r5, &(0x7f0000000080)=[{{&(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10, 0x0}}, {{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0xf, 0x0}}], 0x2, 0x0) getsockopt$inet_udp_int(r5, 0x11, 0x67, &(0x7f0000000000), &(0x7f0000000040)=0x4) 11:36:56 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast2, @private2}}) 11:36:56 executing program 2: pipe(&(0x7f0000000280)) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) 11:36:56 executing program 1: bpf$BPF_BTF_LOAD(0x7, 0x0, 0x0) 11:36:56 executing program 4: bpf$BPF_BTF_LOAD(0x13, 0x0, 0x0) 11:36:56 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000580)={&(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast1}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000180)=':', 0x1}], 0x1}, 0x4044810) 11:36:56 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000003140)=[{{&(0x7f0000000000)={0x2, 0x4e22, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000300)=[@ip_tos_int={{0x14}}, @ip_ttl={{0x14}}], 0x30}}], 0x1, 0x0) 11:36:57 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000000), 0x4) 11:36:57 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x2c, &(0x7f00000007c0)={0x1, &(0x7f0000000780)=[{}]}, 0x10) [ 671.524426][ T32] kauditd_printk_skb: 8 callbacks suppressed [ 671.524502][ T32] audit: type=1804 audit(1608118617.454:781): pid=14487 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/206/bus" dev="sda1" ino=16321 res=1 errno=0 11:36:57 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xfd, &(0x7f0000000240)=""/253, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 11:36:57 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000008c0)="1c0000001200050f04000049b23e9b200aaf37caf750b55fb97d0f08", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) [ 671.740770][ T32] audit: type=1804 audit(1608118617.524:782): pid=14496 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/206/bus" dev="sda1" ino=16321 res=1 errno=0 [ 671.768434][ T32] audit: type=1800 audit(1608118617.524:783): pid=14496 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16321 res=0 errno=0 11:36:57 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x13, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 11:36:57 executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x18, 0x140e, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}}, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0xc) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x1000) lseek(r2, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r3 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendmmsg$inet(r3, &(0x7f0000000080)=[{{&(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10, 0x0}}, {{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0xf, 0x0}}], 0x2, 0x0) getpeername$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000040)=0x1c) r4 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r2, r4, 0x0, 0x8000fffffffe) sendfile(r1, r1, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) 11:36:57 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f00000006c0)=[{{&(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10, 0x0, 0x0, &(0x7f00000005c0)=[@ip_tos_u8={{0x11}}, @ip_retopts={{0x14, 0x0, 0x7, {[@noop]}}}, @ip_ttl={{0x14}}], 0x48}}], 0x1, 0x0) [ 672.208388][T14506] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 11:36:58 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f00000006c0)=[{{&(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10, 0x0, 0x0, &(0x7f00000005c0)=[@ip_tos_u8={{0x11}}, @ip_retopts={{0x14, 0x0, 0x7, {[@noop]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @multicast1}}}], 0x50}}], 0x1, 0x4000800) [ 672.317312][T14506] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 672.365862][T14513] netlink: 'syz-executor.0': attribute type 8 has an invalid length. [ 672.435665][ T32] audit: type=1800 audit(1608118618.364:784): pid=14515 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15726 res=0 errno=0 [ 672.638311][ T32] audit: type=1804 audit(1608118618.434:785): pid=14513 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/207/bus" dev="sda1" ino=15726 res=1 errno=0 [ 672.667537][ T32] audit: type=1800 audit(1608118618.434:786): pid=14513 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15726 res=0 errno=0 11:36:58 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}}, &(0x7f0000000100)=""/185, 0x2e, 0xb9, 0x1}, 0x20) 11:36:58 executing program 2: bpf$BPF_BTF_LOAD(0x14, &(0x7f0000000000)={0x0, &(0x7f00000001c0)=""/72, 0x0, 0x48}, 0x20) 11:36:58 executing program 3: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000005c0), 0x0, 0x20, 0x0) 11:36:58 executing program 5: socketpair(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendto(r0, 0x0, 0x0, 0x4000010, &(0x7f0000000040)=@phonet, 0x80) [ 673.151538][T14515] netlink: 'syz-executor.0': attribute type 8 has an invalid length. [ 673.203467][ T32] audit: type=1804 audit(1608118619.124:787): pid=14523 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/207/bus" dev="sda1" ino=15726 res=1 errno=0 11:36:59 executing program 1: socketpair(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000003dc0)=[{{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000012c0)=""/124, 0x7c}], 0x1}}], 0x1, 0x0, &(0x7f0000003fc0)={0x0, 0x3938700}) [ 673.455271][ T32] audit: type=1804 audit(1608118619.164:788): pid=14523 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/207/bus" dev="sda1" ino=15726 res=1 errno=0 [ 673.482599][ T32] audit: type=1800 audit(1608118619.164:789): pid=14523 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15726 res=0 errno=0 11:36:59 executing program 4: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RUNLINKAT(r0, &(0x7f0000000180)={0x7}, 0xfffffe05) write$P9_RREADLINK(r0, &(0x7f0000000000)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) 11:36:59 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = creat(&(0x7f0000000280)='./bus\x00', 0x20) sendmsg$AUDIT_USER_TTY(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, 0x464, 0x100, 0x70bd25, 0x25dfdbfe, "368ce48553f6297fc0dffc8a60fd84215bb3e9cbf23b923fd1a7288caddf2f9e022c63c3", ["", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x40) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000040)="b512ed524be66bc1cabd0f82a29e300e", 0x10, 0x0}) r6 = open(&(0x7f0000000280)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r6, 0x0) r7 = dup3(r6, r6, 0x71ddbc2ece9068dc) ioctl$CHAR_RAW_RAGET(r7, 0x1263, &(0x7f00000005c0)) ioctl$SG_GET_LOW_DMA(r7, 0x227a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r4, 0xc01064ac, &(0x7f0000000200)={r5, 0xe1, &(0x7f0000000100)=""/225}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) 11:36:59 executing program 2: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bind(r0, 0xfffffffffffffffe, 0x0) 11:36:59 executing program 3: socketpair(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendto(r0, &(0x7f0000000100), 0x0, 0x9fc616a76931115b, &(0x7f0000000040)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80) 11:36:59 executing program 5: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r0, &(0x7f0000002e40), 0x0, 0x4000) [ 674.089662][ T32] audit: type=1800 audit(1608118620.014:790): pid=14539 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16383 res=0 errno=0 11:37:00 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendto(r0, 0x0, 0x0, 0x4000880, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80) 11:37:00 executing program 5: socketpair(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendto(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000040)=@can, 0x80) 11:37:00 executing program 3: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) 11:37:01 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RSTAT(r0, 0x0, 0x2a) 11:37:01 executing program 4: socketpair(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendto(r0, &(0x7f0000000000)="14", 0x1, 0x9fc616a76931515b, &(0x7f0000000040)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 11:37:01 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) r2 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendmmsg$inet(r2, &(0x7f0000000080)=[{{&(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10, 0x0}}, {{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0xf, 0x0}}], 0x2, 0x0) getsockopt$netrom_NETROM_N2(r2, 0x103, 0x3, &(0x7f0000000000)=0x7fff, &(0x7f0000000040)=0x4) lseek(r1, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r3 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r3, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) 11:37:01 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendto(r0, &(0x7f0000000000), 0x0, 0x4000010, &(0x7f0000000040)=@phonet, 0x80) 11:37:01 executing program 3: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendto(r0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffe8) 11:37:01 executing program 5: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendto(r0, &(0x7f0000000040)="1a14026d5fd5de8215127f188f670ccec7cdc1fd8e17e6af79b4f4f16978b87818b7ffe794ba24187f4049d5068b81b9e3f36422763f128e3a68cd67c424cf986c9b32921d8c9f3d2b1d776b0c273f90c473d69e8673c38f85538a85e30e3ed215ecda83d0c819907c7d2ce753af1810f063e5b9be5da8e056e7022dd4330731d63bdae6dc736c6eadc3e69d3091ea4f5844da96e6ae7e27168f09c0ed9404753ede1cf44690ec446f91fee13ee1b8f85561c86b4f29bdc5085e775eafde30555dc8bd619717f0b0c2", 0xc, 0x80, 0x0, 0x3b) 11:37:01 executing program 1: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0xfffffffffffffc5c, 0x0, 0x0, 0x0, 0xffffffffffffff0c}}], 0x1, 0x0, &(0x7f0000005280)) 11:37:01 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RCLUNK(r0, 0x0, 0x0) 11:37:01 executing program 2: socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto(r0, 0x0, 0x0, 0x1200c031, 0x0, 0xffac) 11:37:02 executing program 5: r0 = socket(0x18, 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0x69, 0x0, 0x0) 11:37:02 executing program 3: setitimer(0x0, &(0x7f0000000000)={{0x0, 0xffffffff}, {0x5}}, 0x0) 11:37:02 executing program 4: r0 = socket(0x18, 0x2, 0x0) shutdown(r0, 0x0) 11:37:02 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000080)='./bus\x00', &(0x7f0000000100)='trusted.overlay.origin\x00', &(0x7f0000000140)='y\x00', 0x2, 0x1) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x10, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40400d0}, 0x4) lseek(r1, 0x0, 0x2) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) 11:37:02 executing program 2: mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x1011, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 11:37:02 executing program 5: r0 = socket$inet(0x2, 0x3, 0x0) getpeername$inet(r0, 0x0, 0x0) 11:37:02 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_int(r0, 0xffff, 0x800, 0x0, 0x0) [ 677.148124][ T32] kauditd_printk_skb: 14 callbacks suppressed [ 677.148196][ T32] audit: type=1800 audit(1608118623.074:805): pid=14591 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16377 res=0 errno=0 11:37:03 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x100, &(0x7f0000000040), 0x5c) [ 677.346166][ T32] audit: type=1804 audit(1608118623.104:806): pid=14591 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/210/bus" dev="sda1" ino=16377 res=1 errno=0 [ 677.370609][ T32] audit: type=1800 audit(1608118623.104:807): pid=14591 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16377 res=0 errno=0 [ 677.390982][ T32] audit: type=1804 audit(1608118623.144:808): pid=14591 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/210/bus" dev="sda1" ino=16377 res=1 errno=0 [ 677.417309][ T32] audit: type=1800 audit(1608118623.144:809): pid=14591 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16377 res=0 errno=0 11:37:03 executing program 1: mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 11:37:03 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) shutdown(r0, 0x2) connect(r0, &(0x7f0000000540)=@in6={0x18, 0x2}, 0xc) 11:37:03 executing program 3: mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 11:37:03 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000140)="67561d26bd830f85cab11b4630faafc12f79b61f", 0x14) 11:37:04 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200, 0x0) unlink(&(0x7f0000000100)='./file0\x00') 11:37:04 executing program 1: r0 = socket(0x18, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x0) 11:37:04 executing program 2: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6) 11:37:04 executing program 3: r0 = socket$inet(0x2, 0x3, 0x0) connect$inet(r0, &(0x7f0000001100)={0x2, 0x1}, 0xc) 11:37:04 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1005, 0x0, 0x0) 11:37:04 executing program 4: utimes(0x0, &(0x7f0000000100)={{}, {0x0, 0xfffffffffffff05e}}) 11:37:04 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1002, 0x0, 0x0) 11:37:05 executing program 1: mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x10, 0xffffffffffffffff, 0x0) 11:37:05 executing program 5: r0 = socket$inet(0x2, 0x3, 0x0) getsockopt$inet_opts(r0, 0x0, 0x0, 0x0, 0x0) 11:37:05 executing program 4: r0 = socket(0x18, 0x3, 0x0) bind$unix(r0, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0xa) 11:37:05 executing program 3: mmap(&(0x7f0000ffc000/0x3000)=nil, 0x7ffffffffff, 0x0, 0x1011, 0xffffffffffffffff, 0x0) 11:37:05 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getown(r0, 0x5) 11:37:05 executing program 2: mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2005) 11:37:05 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="10002cbddf250200000008000100000000000c009967040020e70000000000000c000500"/46], 0x34}, 0x1, 0x0, 0x0, 0x854}, 0x8880) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xffffffffffffffff, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, r3, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}]}, 0x20}}, 0x10000) r4 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r4, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r5 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6100) ftruncate(r5, 0x8200) write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x175d900f) ioctl$TIOCL_SCROLLCONSOLE(r5, 0x541c, &(0x7f0000000000)={0xd, 0x1}) 11:37:06 executing program 5: socket(0x18, 0x3, 0x0) socket$inet6(0x18, 0x3, 0x0) 11:37:06 executing program 4: r0 = socket(0x18, 0x2, 0x0) setsockopt$sock_int(r0, 0xffff, 0x4, &(0x7f0000000040)=0x2, 0x4) [ 680.338350][ T32] audit: type=1800 audit(1608118626.264:810): pid=14657 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15726 res=0 errno=0 11:37:06 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000240)="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", 0x801}], 0x1) 11:37:06 executing program 3: mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) [ 680.507413][ T32] audit: type=1804 audit(1608118626.314:811): pid=14657 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/211/bus" dev="sda1" ino=15726 res=1 errno=0 [ 680.532163][ T32] audit: type=1800 audit(1608118626.314:812): pid=14657 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15726 res=0 errno=0 11:37:06 executing program 2: mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x1011, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2) [ 680.552429][ T32] audit: type=1804 audit(1608118626.374:813): pid=14658 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/211/bus" dev="sda1" ino=15726 res=1 errno=0 11:37:06 executing program 5: mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) [ 681.121165][ T32] audit: type=1804 audit(1608118626.864:814): pid=14657 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/211/bus" dev="sda1" ino=15726 res=1 errno=0 11:37:07 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r0, 0xffff, 0x10, 0x0, 0x42) 11:37:07 executing program 1: mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000) 11:37:07 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r2 = dup(r1) recvmsg(r2, &(0x7f0000000200)={&(0x7f0000000000)=@l2, 0x80, &(0x7f0000000080)=[{&(0x7f0000000100)=""/114, 0x72}, {&(0x7f0000000180)=""/90, 0x5a}, {&(0x7f0000000280)=""/195, 0xc3}], 0x3, &(0x7f0000000380)=""/135, 0x87}, 0x40000042) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r3 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r3, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$BLKTRACESTART(r3, 0x1274, 0x0) 11:37:07 executing program 2: r0 = socket$inet(0x2, 0x3, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x1}, 0xc) 11:37:07 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) recvmsg(r1, &(0x7f0000000240)={0x0, 0xffffff03, 0x0}, 0x803) 11:37:07 executing program 5: mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 11:37:07 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) write(r0, &(0x7f0000000080)="5d08562d08c6123b84e2eb5b125959c662bb22d28eca2dd3b2dcafe311a9b6c6e7cd063031e0e92f6c201303059a198b08b35e535dbc814797f6aa752064434ab1da2a0c0a998af9b65aedfda4218039581aa12b53502e1a6b0bb8206264ae1cc941905a48cd60757530a26e1afa2bc28bc3096ce04dd6ed0d3516982eceac3d0a19f884ae18e08e603b013f9a0f847312", 0x91) 11:37:08 executing program 1: r0 = socket(0x18, 0x2, 0x0) r1 = dup(r0) sendmsg$unix(r1, &(0x7f0000000000)={&(0x7f0000000380)=@abs={0x0, 0x0, 0x2}, 0x8, &(0x7f0000001940)=[{0x0}, {0x0, 0xa7}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) 11:37:08 executing program 3: setitimer(0x0, &(0x7f0000000640)={{0x80000001}, {0x0, 0x4}}, 0x0) 11:37:08 executing program 5: recvmsg(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000180)=@in6, 0xc, &(0x7f0000000680)=[{&(0x7f0000000240)=""/125, 0x7d}, {&(0x7f0000000980)=""/222, 0xde}, {&(0x7f0000000440)=""/88, 0x58}, {&(0x7f0000000340)=""/169, 0xa9}, {&(0x7f0000000580)=""/210, 0xd2}], 0x1000000000000361, &(0x7f00000004c0)=""/158, 0x9e}, 0x0) 11:37:08 executing program 2: open$dir(&(0x7f0000000340)='./file0\x00', 0xaa2, 0x9bf99c1b13c9dd17) [ 682.600275][ T32] kauditd_printk_skb: 4 callbacks suppressed [ 682.600349][ T32] audit: type=1804 audit(1608118628.524:819): pid=14687 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/212/bus" dev="sda1" ino=15953 res=1 errno=0 11:37:08 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f00000014c0)=[{0x0}], 0x1) [ 682.753903][ T32] audit: type=1804 audit(1608118628.584:820): pid=14688 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/212/bus" dev="sda1" ino=15953 res=1 errno=0 [ 682.778120][ T32] audit: type=1800 audit(1608118628.584:821): pid=14688 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15953 res=0 errno=0 11:37:08 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) syz_mount_image$romfs(&(0x7f0000000000)='romfs\x00', &(0x7f0000000040)='./bus\x00', 0x7fff, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="ab42350aaf03b687e4445877ac9e894079990cba96db0f9dafb627251ce78024be437670c277e385554f8ea9936e45b5bfc6539569fc7f0f0670d3aadcebcafab753b16f48457f8b6140ed55a952f9c9fc825d16c433676240eb6030b317c5c15dfa2b3f7ee46581479b07edcd818f2a3fdfe8b9bc5fba6e5862522f5f512eb7f62e64ebdb85eb7f09e1a510e504fb5db382b22fd52df837be961eacf3f3dda3df033a88baa7ffde345f9caae5fac81787cb3b", 0xb3, 0x6c6}], 0x800044, &(0x7f00000001c0)={[{'%)'}, {':$\x97$,'}], [{@euid_lt={'euid<', 0xee01}}]}) syz_mount_image$affs(&(0x7f0000000200)='affs\x00', &(0x7f0000000280)='./bus\x00', 0x9, 0x5, &(0x7f0000000580)=[{&(0x7f00000002c0)="a23e32742eb0b53ba53f83103e6bdbc2f5e6cac151e4fcc0bc576cc330b4ea949cacb9f4ed74c6f4684d889ad1eb31de2591964fa281bab6befdd6d4042ef3393c2426fbcc9860914ad8643dea4b789dbfd14dc726119b206594df69baef842e13755d2af3cebde9f1d0bcb8d8143146fec82140105002d742cc4b916a5f8b932b73366b74311572a7a608412ef03584e17357a37885dbcefafe819c1a1e0f82754a1d851206a86a632a586138b6d5947fa3c53520b4328e0fc561cb2d5fb56759249d2ec94831b88f3e1e67c33119de2acaac3ea68da0fc61585085af55d040e27af763b3c033dd4d", 0xe9, 0x75dd31b3}, {&(0x7f00000003c0)="7d3d7a290fb0cdb28b77c98ab6193fff98c08ee93b5fc278cb2c7e2de774f2002880d760012ff2f5fef9c6d849b8ea2f7dd9296dbaf0794687e11b1b2688401d32464312a42f2fa2e54ce5c260a698600cca4d807a810e861541a15223fe6614c2710eb96e0f6c17e82c81834cc387d4ac6a6a13cd031e20e353fc3ec5ef84fbdaa9", 0x82, 0x9}, {&(0x7f0000000480)="1b8ba10875aca79560deac6ab012015031b321fc28f34671e504bf4e937103f881a2a5cc26f2e304b87230774df74b999c7b2646a9b280c6fe67d91e7aef19bf33e215136409477cbbbb1f5b90548b0a0d476e23b9df0b872b9a6018e16dd65df29604b9afb62b488833b1e26553ad39320800151073", 0x76, 0x6}, {&(0x7f0000000500)="d36686d0e5b2aa199d2db6dcda250e0978e53956b308b1524cdb7cfdee183c357b196a6aaca2593798e518f00989f029bd4dcef8ccb5745b8673c7e49bf804fa", 0x40}, {&(0x7f0000000540)="b85cd8aff20c1e2e4bf4ed11f6e166eb5998e7d5c59f8646b9a16b7c252b449056", 0x21, 0x9}], 0x840002, &(0x7f00000005c0)={[{'%)'}, {'$'}, {',\xe3,:['}], [{@uid_gt={'uid>', 0xee00}}]}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) 11:37:08 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1021, &(0x7f0000000100), 0x4) [ 683.441782][ T32] audit: type=1800 audit(1608118629.364:822): pid=14712 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16338 res=0 errno=0 [ 683.550681][T14712] romfs: Unknown parameter '%)' 11:37:09 executing program 1: recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0xfffffffffffffdd1}, 0x0) 11:37:09 executing program 3: r0 = socket(0x2, 0x2, 0x0) getsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000100)=""/7, &(0x7f0000000140)=0x7) [ 683.727388][ T32] audit: type=1804 audit(1608118629.654:823): pid=14712 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/213/bus" dev="sda1" ino=16338 res=1 errno=0 [ 683.753479][ T32] audit: type=1800 audit(1608118629.654:824): pid=14712 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16338 res=0 errno=0 11:37:09 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@cred], 0x20}, 0xc) 11:37:09 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$unix(r0, 0x0, 0x0) 11:37:09 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r0, 0x0, 0x0, 0xc, 0x0, 0x0) [ 684.221999][ T32] audit: type=1804 audit(1608118630.144:825): pid=14714 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/213/bus" dev="sda1" ino=16338 res=1 errno=0 [ 684.244242][T14729] romfs: Unknown parameter '%)' [ 684.440420][ T32] audit: type=1804 audit(1608118630.234:826): pid=14722 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir613719777/syzkaller.XRzpjf/213/bus" dev="sda1" ino=16338 res=1 errno=0 [ 684.467053][ T32] audit: type=1800 audit(1608118630.234:827): pid=14722 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16338 res=0 errno=0 11:37:10 executing program 1: pipe(&(0x7f0000000600)) mprotect(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0) 11:37:10 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff}) fcntl$setown(r0, 0x6, 0xffffffffffffffff) 11:37:10 executing program 4: madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xfb8cfc658cbd036c) 11:37:10 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0xa) 11:37:10 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105051, 0x1) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) 11:37:10 executing program 5: r0 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_int(r0, 0xffff, 0x1, 0x0, 0x0) [ 685.250943][ T32] audit: type=1800 audit(1608118631.174:828): pid=14755 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16372 res=0 errno=0 11:37:11 executing program 1: mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4) 11:37:11 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) truncate(0x0, 0x0) execve(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=[&(0x7f00000000c0)='\x00', &(0x7f0000000100)='\x00', &(0x7f0000000140)='\x00', &(0x7f0000000180)='.\x00'], &(0x7f00000002c0)=[&(0x7f0000000200)='(#,+\x00', &(0x7f0000000240)='!\x00', &(0x7f0000000280)='\x00']) 11:37:11 executing program 2: madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) 11:37:11 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) sendto(r0, &(0x7f0000000180)="f0f9dd71ba2d7c55a9da281a36bd6d34f0cd6bd8535720759741f9554eaaddb9d059c0788da34b8fa1053a624b26fd183e70ad4620902f0b0037dfa31cef115a6bddadf7895bbab0508b29827ddf961eafc9fc6ee228bef2cc228cf30db5590ec91a057ac114f5a828763392c9471512a15f3342f7aedfea78ef1f76d3520dcdfe3ab432d9d517f875b3a60d60c0b1f734f76099acc2283b008b4a0000000000000000", 0xfffffffffffffcac, 0x0, &(0x7f0000000140)=@in6={0x18, 0x3}, 0x8) 11:37:11 executing program 5: r0 = socket(0x2, 0x3, 0x0) getsockopt$sock_int(r0, 0xffff, 0x800, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 11:37:11 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1871fe, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fdatasync(r1) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105050, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) sendfile(r0, r0, 0x0, 0x8080fffffffe) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) 11:37:11 executing program 1: setitimer(0x0, &(0x7f0000000000)={{}, {0x0, 0x36f3}}, 0x0) 11:37:12 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) shutdown(r0, 0x1) 11:37:12 executing program 4: shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fff000/0x1000)=nil, 0x0) 11:37:12 executing program 3: msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4) 11:37:12 executing program 5: pwritev(0xffffffffffffffff, &(0x7f00000017c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0, 0x0) 11:37:12 executing program 1: pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$lock(r0, 0x9, 0x0) 11:37:12 executing program 2: getrusage(0x0, &(0x7f0000000080)) 11:37:13 executing program 4: mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) 11:37:13 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)="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", 0x800}, {&(0x7f0000000000)="b5", 0x1}], 0x2) 11:37:13 executing program 5: utimensat(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={{}, {0x0, 0xfffffffffffffffe}}, 0x0) 11:37:13 executing program 0: semget(0x1, 0x2, 0x20b) 11:37:13 executing program 1: mknod(&(0x7f0000000180)='./file0\x00', 0x8025, 0x0) 11:37:13 executing program 2: semctl$SETALL(0x0, 0x0, 0x9, &(0x7f0000000040)=[0x0]) 11:37:13 executing program 4: open$dir(&(0x7f0000000100)='.\x00', 0x841, 0x0) 11:37:13 executing program 3: pipe2(&(0x7f0000000100), 0x0) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) 11:37:13 executing program 5: r0 = semget(0x2, 0x0, 0x0) msgctl$IPC_SET(r0, 0x1, 0x0) 11:37:13 executing program 0: fchmodat(0xffffffffffffffff, 0x0, 0x0) 11:37:14 executing program 1: madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x5) 11:37:14 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff}) fcntl$lock(r0, 0x8, 0x0) 11:37:14 executing program 4: mknod(&(0x7f0000000000)='./file0\x00', 0x8000, 0x0) 11:37:14 executing program 3: pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) pwritev(r0, &(0x7f0000000540)=[{0x0}], 0x1, 0x0, 0x0) 11:37:14 executing program 0: munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) 11:37:14 executing program 5: shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff}}) 11:37:14 executing program 1: r0 = semget(0x1, 0x0, 0x0) semctl$SETALL(r0, 0x0, 0x9, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x3]) 11:37:15 executing program 2: pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$dupfd(r1, 0x0, r0) 11:37:15 executing program 3: pipe2(&(0x7f0000000100), 0x0) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2) 11:37:15 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff}) dup2(r0, 0xffffffffffffffff) 11:37:15 executing program 0: mknod(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) 11:37:15 executing program 5: r0 = semget(0x2, 0x0, 0x0) semctl$SETALL(r0, 0x0, 0x9, &(0x7f0000000000)=[0x0, 0x3]) 11:37:15 executing program 1: munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ff2000/0xe000)=nil, 0xe000) 11:37:15 executing program 2: pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) fcntl$lock(r0, 0x7, 0x0) 11:37:15 executing program 4: semctl$GETALL(0x0, 0x0, 0x6, &(0x7f0000000080)=""/146) getrusage(0xffffffffffffffff, &(0x7f0000000480)) 11:37:15 executing program 3: r0 = semget(0x2, 0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0xffffffffffffffff}}) 11:37:16 executing program 5: semget(0x2, 0x1, 0x60f) 11:37:16 executing program 0: pipe2(&(0x7f0000000140), 0x0) select(0x40, &(0x7f0000000280), &(0x7f00000002c0)={0x6}, 0x0, 0x0) 11:37:16 executing program 1: shmget(0x1, 0x4000, 0xe9, &(0x7f0000ff9000/0x4000)=nil) 11:37:16 executing program 2: munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) 11:37:16 executing program 3: r0 = shmget(0x1, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000080)={{0x0, 0x0, 0xffffffffffffffff}}) 11:37:16 executing program 0: munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) 11:37:16 executing program 4: madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) 11:37:16 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_linger(r0, 0xffff, 0x80, &(0x7f0000000140), 0x8) 11:37:16 executing program 1: getgroups(0x7, &(0x7f0000000040)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0]) 11:37:17 executing program 2: mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 11:37:17 executing program 3: mknod(&(0x7f0000000000)='./file0\x00', 0x8000, 0x6) 11:37:17 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000004740)={0x0, 0x0, &(0x7f0000003440)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) 11:37:17 executing program 0: mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x7013, 0xffffffffffffffff, 0x0) 11:37:17 executing program 5: chown(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) chown(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) 11:37:17 executing program 1: shmget(0x1, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) 11:37:17 executing program 2: msgget(0x3, 0x272) 11:37:17 executing program 3: msgsnd(0x0, 0x0, 0x7a, 0x0) 11:37:18 executing program 4: pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fchdir(r0) 11:37:18 executing program 5: shmget(0x2, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) 11:37:18 executing program 0: r0 = semget(0x2, 0x0, 0x0) semctl$GETVAL(r0, 0x4, 0x5, 0x0) 11:37:18 executing program 1: pipe2(&(0x7f0000000140), 0x0) select(0x40, &(0x7f0000000280)={0x4}, &(0x7f00000002c0)={0x6}, &(0x7f0000000300)={0x9}, 0x0) 11:37:18 executing program 2: r0 = semget(0x2, 0x0, 0x0) semctl$GETALL(r0, 0x0, 0x6, &(0x7f0000000080)=""/131) 11:37:18 executing program 3: munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) 11:37:18 executing program 5: pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) setsockopt$sock_cred(r0, 0xffff, 0x1022, 0x0, 0x0) 11:37:18 executing program 4: fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) 11:37:18 executing program 0: r0 = syz_open_pts(0xffffffffffffffff, 0x0) write(r0, &(0x7f00000000c0)="bf64d4c218c43a23deaa7d671fabee3c6fe65c1b9519289f1a43e9a4e1f5d8c2ad4d14", 0x23) 11:37:18 executing program 1: setregid(0x0, 0x0) getrusage(0xffffffffffffffff, &(0x7f0000000080)) 11:37:19 executing program 2: r0 = socket$unix(0x1, 0x5, 0x0) connect$unix(r0, &(0x7f0000000100)=@abs={0x0, 0x0, 0x2}, 0x8) 11:37:19 executing program 3: r0 = shmget(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x0) 11:37:19 executing program 5: r0 = semget(0x2, 0x0, 0x0) semctl$GETVAL(r0, 0x0, 0x5, 0x0) 11:37:19 executing program 4: openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x2, 0x0) 11:37:19 executing program 0: r0 = shmget(0x1, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) shmctl$SHM_LOCK(r0, 0x3) 11:37:19 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_linger(r0, 0xffff, 0x80, 0x0, 0x0) 11:37:20 executing program 2: pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup2(r1, r0) 11:37:20 executing program 5: pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) lseek(r0, 0x0, 0x0) 11:37:20 executing program 3: shmat(0xffffffffffffffff, &(0x7f0000ffe000/0x1000)=nil, 0x0) shmdt(0x0) 11:37:20 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) fcntl$lock(r0, 0x7, 0x0) 11:37:20 executing program 4: clock_gettime(0x7f7bb69025f62948, 0x0) 11:37:20 executing program 1: mprotect(&(0x7f0000db0000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000db2000/0x2000)=nil, 0x2000) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffff9c, 0x29, 0x66, &(0x7f0000000180), 0xc) munlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) 11:37:20 executing program 2: pipe(&(0x7f0000001500)) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1) 11:37:20 executing program 3: r0 = shmget$private(0x0, 0x4000, 0x70f, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000040)=""/163) 11:37:20 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x200, 0x0) chown(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) 11:37:20 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) setsockopt(r0, 0x0, 0x0, &(0x7f0000000080)="1e52d42e7d25f7a6abba3d43b1fc058a8abf9faf3082ba794fb7d5539a6c8c9e786aedb8e83bc6af86d88618ba04c8eb104b1b8eb7463f977873bf6ab6cec0dc89b6456b6c74de769fad8099bfed14377d0b60773675bd04233c7474265b4ee176ea8bfa1598c159ec4b7cffec41d6e17f26e14e1bc167b39aded925fd0b83f0229259eedaa7c6e7d97919bbf096ac193b7b898dac1579df446b1fe0c18f9d118f78420dc4e5ca646e009b21b457a058d15b4222ecac9c8d035290fe1ef8ba3054959d737f4ee93d763b0941b9033c886103085e378598969e5dc05580c4e6ef78", 0xe1) 11:37:20 executing program 0: munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) 11:37:21 executing program 1: r0 = semget(0x0, 0x0, 0x0) semctl$SETVAL(r0, 0x0, 0x3, 0x0) 11:37:21 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)=':', 0x1}, {0x0}, {&(0x7f0000000200)="88", 0x1}], 0x3}, 0x0) 11:37:21 executing program 5: mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x27be519ea7503dd6, 0xffffffffffffffff, 0x0) 11:37:21 executing program 3: nanosleep(&(0x7f0000000040)={0x0, 0xc000000000000000}, 0x0) 11:37:21 executing program 0: r0 = semget(0x0, 0x0, 0x0) semctl$SETVAL(r0, 0x0, 0x8, &(0x7f0000000000)=0xc600) 11:37:21 executing program 4: syz_open_pts(0xffffffffffffffff, 0x0) select(0x40, &(0x7f0000000000), &(0x7f0000000080)={0x20}, 0x0, 0x0) 11:37:21 executing program 1: madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3) 11:37:22 executing program 2: mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) semctl$SETALL(0x0, 0x0, 0x9, &(0x7f0000000000)) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) 11:37:22 executing program 5: syz_emit_ethernet(0x2a, &(0x7f0000000080)={@random="67b3674d00ee", @random="38aa4c00", @val, {@ipv4}}, 0x0) 11:37:22 executing program 0: syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @remote, @val, {@ipv6}}, 0x0) 11:37:22 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_int(r0, 0xffff, 0x1007, 0x0, 0x0) 11:37:22 executing program 4: sendmsg$unix(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000700)=@abs, 0x8, 0x0, 0xfeee, &(0x7f00000000c0), 0x20}, 0x0) 11:37:22 executing program 1: r0 = socket$inet6(0x18, 0x2, 0x0) getsockname(r0, 0x0, &(0x7f0000000040)) 11:37:22 executing program 2: mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) 11:37:23 executing program 0: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r0, 0x0, 0x0) 11:37:23 executing program 3: syz_emit_ethernet(0x1fbf, &(0x7f00000001c0)={@random="91ecb70ab966", @local, @val, {@ipv6}}, 0x0) 11:37:23 executing program 5: mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1000, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8) 11:37:23 executing program 1: mprotect(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) 11:37:23 executing program 4: mprotect(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0) 11:37:23 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 11:37:23 executing program 5: syz_emit_ethernet(0x23bf, &(0x7f0000001580)={@local, @remote, @val, {@ipv6}}, 0x0) 11:37:23 executing program 0: mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) 11:37:23 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @local, @val, {@ipv4}}, 0x0) 11:37:23 executing program 1: mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 11:37:23 executing program 4: poll(0x0, 0xfffffed3, 0x0) 11:37:24 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="3a221480f7f38894bdbe3b5caba9e5ce2fa8a7fb7cad2b4afc9e5fb1aacba36f74f39b71b01ce540d33b95626c68d63003718bf094be834dfc4d7850d6867557a28db626aa93c377b29dc3e790afc96a02c3f087b24fa7f261604e1d13f7", 0x5e}, {&(0x7f0000000180)="e2333102801f862181e07b1068c85207aa80f59fbe7639a645e5db4003829fb88fa9a6b0a33b1f50b9a544652f030f1a87f7f8e2dccc5db6bbc4c42dae7121ac7dcaa16838ae111f6ecb53acc2a0036223adae3f20eac9bb15e74d3f1bba0c7b4730fcb9b56cade7e15e1cab5cbcb9c129ca0a4e", 0x74}, {&(0x7f0000000200)="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", 0xde7}], 0x3, &(0x7f0000001440)=[@cred, @rights, @cred, @cred, @rights, @cred, @cred, @cred, @rights], 0x148}, 0x0) 11:37:24 executing program 2: syz_emit_ethernet(0xe, &(0x7f0000000100)={@local, @remote, @val, {@ipv6}}, 0x0) 11:37:24 executing program 3: r0 = socket$inet6(0x18, 0x2, 0x0) sendmsg(r0, &(0x7f00000005c0)={&(0x7f0000000080)=@in={0x2, 0x3}, 0xc, 0x0, 0x0, &(0x7f0000000180)=[{0x10}], 0x10}, 0xf) 11:37:24 executing program 4: mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1000, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file0\x00', 0x0, 0x0) 11:37:24 executing program 1: r0 = socket$unix(0x1, 0x5, 0x0) sendmsg(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000002680)=[{0x0, 0xffffffffffffff50}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) 11:37:24 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) shutdown(r0, 0x1) 11:37:25 executing program 5: munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 11:37:25 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x200, 0x0) r0 = getuid() lchown(&(0x7f0000000000)='./file0\x00', r0, 0x0) 11:37:25 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x200, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 11:37:25 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[{0xb0, 0x1, 0x0, "cd0d971f4397904e5ec1c540f911911eb15eda9bbecd284d23590530c0ee1103d48727745af8c2b90cb85c7c3b926f36a6ff9f121fdd9a36d5b5bae44612853a959d3ddc9e246b47238c13656a32c71459db689d7323c91b5189d6123ce9cb6911d7fffe86f3106091b0261ba303d7c738beea4bdfc8f09ab8a7bab2c471ba632664bc23a87032714cda4eab779d18ef9183f3975a053fa7a5"}, {0xd8, 0x0, 0x0, "504326fcaa7c7c8cd7b98371fd66961834c2cfc43f35db9a5a427b0f4ba7f3358376d958188be522f187453e42fb3c114f1e56f8814324221d017e29d8317a0ff2712b49a309c493b589255ca7500b7935909ca72716973b36eaeb213f32e9178fe414700cf18d6774e57541b80685d7fa9ffadd68e6725bbb8381d1b4d1c7cd6213bf65a2808a3fe213040858d764649492b60a9bad4e61dc755a87e47f613cb08b8a64d0dcd72e96568fa35b1c2ca9e3e104885e7331d825c0acfd183a72213b"}, {0x88, 0x0, 0x0, "8375278835e203791b6e462377affd25bbba0cc5d8fc0d84a9552766a834a5236227cfc33eb7da6b359f27ae51581cfafe064241748a00dd2fd30207c60bcc1646f439a0f48cfacb1e2348224791a4c897e03e00072c84c3f7daf193152c0d0a2b9bed3ad429648036d396352e2d8b6668"}], 0x210}, 0x934a872e1a42c0fe) 11:37:25 executing program 0: mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f0000ff8000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x4) 11:37:25 executing program 3: setrlimit(0x8, &(0x7f0000000080)) socket$unix(0x1, 0x5, 0x0) 11:37:25 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1002, &(0x7f0000000300), 0x4) 11:37:25 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x200, 0x0) chown(&(0x7f0000000200)='./file0\x00', 0xffffffffffffffff, 0x0) 11:37:26 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) recvfrom(r0, 0x0, 0x0, 0x841, 0x0, 0x0) 11:37:26 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) pwritev(r0, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) 11:37:26 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r0, &(0x7f0000000400)={&(0x7f0000000080)=@abs={0x0, 0x0, 0x2}, 0x8, &(0x7f0000000340)=[{&(0x7f0000001000)="3b8fd52a1a7a075896307d12e486ec88885c3c576729891591ef90b490fa2549c4071884b7aa999d0160dd6e9731b7e11b78748ec6a6ad15d2e1e58dfcc1fa48a8ae8b56417b5adb3ea2ff1636584b72e197a6caccb68b5107ed315557a036f6eb26056c4166f8d31626912962bf5bcbbd4512d0e4f08d20da35f20e1b2cbead7dd52a2a32efdbd01e6bd81db7fbd2d19d842448ce19c1962283f222020a4554e635dcbe774d2f524dd652b3f88f5fb867961d3da4cec72a090833b7ad4fb18ceec49ed3ba889c085aefee3a49f2fc39f4af1a29245b2180b9bcaa73f4c974e63c095d14410656589ea63f9ab02bcf610fd3a33fb6d93f02ddcf77bdafe937500e08c8fee559a43d18e287f6d604f4c8cb2ccf89ef3e9141246af6be76739c0b83e1153c7583b50baa18678495b0defc3f83dd963179315050a01f687a286df187da012e0d823c16446369983c9f409a124e4b7c7a2f63cfcbe8406f33ce23415b2c09085bab2a20c1622b9ffd7622f0631c465df4774756a70b7bc1b6c999dac97ab3ff5a5cfad7940da22e4d526ca9be0b418dca45b474ae70d45f234ed771df51a82ce4e49f66bb1c4c336a6ff2130f64cf6f1d53005fae3a7dd41f72835109b13e79fdd312f937fd7b6e84cd99175855e50c32a221ed5e5088e5d44ed8255ca05bbf55efeb9ca89fb90f9b0577eecc60e033bd77473d21bb9bc2d7a4b42390d7ec6554ef8b13c66f661e2d418c355d2fc9e136ee8555ff00bc6f4bb938644dd79aa06b6ab43d57da5e5b587556c7f65e07cce4fa0ed7cc19cb22ea464ec92c867f492b68e2a35e8aa7f1ef9f8c081eb48c1ed15fead27152a5c2f78f137b2ae77966f68288f90048fb25f52057ac9d97837032e4c1bc0f5117bb9a22bfe6f77ca0fe088e1548b7847913f36daab4533d087aa50772cdb8799a9eef479b1557496282092521f216ae870ab86ec0b809861b74e37035a754ec71a3d4a065de3a14d010d5162716864063e0947b3d40961c82236a8af4ec2e2a0c969b437a16ed828017fc0d733f59366d3fe1a71f76aa80e929d916850e1f9bc2bc19e0595e24a91f5880ecca9514736f9351365d1bbaae1590331b19941bf927136edfce7bfafc03846ad2f7df45ed3b066147f32c136701bffc8deb6df9024e5325cc5b92d1547249d33a52ac7d0bb37c4dbaa85d9cd0c635226a6abf72d64757db27ef9a11e6b27277769c02b5f9497bc6eb58dea8fa7069a488c3ac63f6067298912bdb8db2d3f8f4e7ef6bd576d6ac6b781fff6ad512d27739de65e8d7edf33c615e318f546b15fce21eb6302212d73e2fe1ae63a3c5dcb26cf5ecdb571dbad9dcaf1be4128f77200d90f70a7f8c6e1af690c9fa8072c5881c6dce22010119a92d5506ba4a1bdc7f646188fad05859e908ed38222e104b5db08122b02d96918db819ffc753adce0e797d412a6ccf2d2b0cf369c2f3183cab814c78d092478f05d58867cdf9271263451551929767ace007f726d1df0835268bbf5530cdd30f543a6d4fcd6f2756afe82a940db312e9589cbb28f3b18730c01b78736819cd8b2102dd383588361a24ae7e312fd9f47598685c4dcadbc8e960fccb9c0371689435ff4fa5b6439bdcd358c61b86c2525ee7ee592239957fb7f202bfbb85a099c0f3ba414c86e91e3e3a5add3def90c8dc92c86a7de51c723d74e7b58f09d5e4096651ab0c95dc09bc5e3b65f534d67c13db30884db36883c25be2caa048213a2691dadc88459b7e7a539d6424539b15f58753e1a944c3c4c0e4f1311902946f48a0851d458184b119717ea398d038374e004e702285e3c7903e4420d22e9b10a3cd91ea2e7e9304ed52d298d3b83472db0a43161e834f1c919c5832437b9e2d03f05a1de5a951f705429acb198c9d0cb4b774b017d0b799016d34f64930d06f2bc9b2fae0d1120a071d8bb18ce7d7ad1fc27f1d97e64b1969363d43992a57ec625567e35749cd5f32bb58dc10893e78cadc282c630db8029869bfc6bf1ed415772b43812a76acde52f245af3dc7391de77b9b18de1d4c1e41a9a51a501337e7a30382637b64988eeab311e96a895351abf5be3053060645ae4422e7c9ec3b4915a4060b15ff876077a94b4d9f171fcea69eb1da465d586df6b432034dfb408e5157e58571fdb0d8c1a302a8623c146cad78823380e847616485676b7fefeef3112ab06a5535155be89ecf3b2a51ba0a2a995e5be4aef0588c0abfa1bad5ba4e1c08604ad1689e2b9bf6fee02c14d4f8170bdd933f14b99c54b5c4bc7c46222f9a6cd174786a7d85a77aeb7620b6fffd9b37bd1cbdd3e94eb5896903811f2f66b2f54ae6eb910e5d7daf4b8fd5309204cd6a4d8db437520286be7bad0cdd5c4ecc054978fad2350eb1809354d37330be6e14e76b74dcfddc9e6e6bb9175695c43fe959d44e67536642f027d64a2908ac800b60cf2d562d81eee77eadecdcf2e786ab4564e797a2e219060a3d6e8b3e993004fe2945aa7e3f53796907d340b0e0c161e0fe602f7c97a850916ff3ddc31d2119c1636b8d6fed4da85891b138201ed2ff238ec95df203c09fea5c9f556c01ce41b3fd1dbeb8d7b6ca686f844b8ce19c0575e6a1802d6aac296ee4f555eab0d570ea098e942d5f108d2818e3c1831c989d282214c4c6d30ed3595c8cb47e7130e8dcf3fa5c320dc4eb9bbda4bcc6a2cb2d21eb9a50d8d7a188213cbcb5910a71f60b69693aada0fad5e28e0a745e95f428883236062e57452089943aaaea100641b66048b16b377ce676dd84a4e25c87210fc73d86e605f92a1ff7a0ee03b587be07f1bb9980bc9c8033c001a1156b02e7efb719fbb55f3d46c38e372b54bdc4aed7a8729f993a4bd9ccca5c43a1b5c57485289ff1", 0x801}], 0x1}, 0x0) 11:37:26 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1004, 0x0, 0x54) 11:37:26 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r0, 0x0, 0x0) 11:37:26 executing program 0: syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @remote, @val, {@ipv6}}, 0x0) 11:37:26 executing program 3: recvmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xfffffffffffffdd7}, 0x0) 11:37:26 executing program 2: mprotect(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0) munmap(&(0x7f0000ff7000/0x3000)=nil, 0x3000) mprotect(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0) 11:37:26 executing program 4: semget(0x0, 0x1, 0x283) 11:37:26 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_timeval(r0, 0xffff, 0x1005, &(0x7f0000000000)={0x0, 0x80000001}, 0x10) 11:37:27 executing program 5: syz_emit_ethernet(0x15e, &(0x7f0000000080)={@random="71c929ec5075", @random="38aa4c00", @val, {@ipv6}}, 0x0) 11:37:27 executing program 0: syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @broadcast, @val, {@ipv6}}, 0x0) 11:37:27 executing program 3: pipe(&(0x7f0000001500)) mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) 11:37:27 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) sendmsg(r0, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x110, 0x0, 0x0, "4911db84da99357803804a82ae8b1d66ab356c7bb82ccef2f48cacf74c7d4c92b5a82705f0032ec339e3c0ff49bfe1e2c6a8ffec38739b48c08551693681e67fcdc650b93d75b35fafedb4d4674bf8c696a447ae01307e8ee86f21d88c1fdb2797efd892b9f7fef6eb2a5e27ce25fe4ca0fc444d11628bc4593fcdd96f3ba13077cf5c85096c92768b3a3cfa39032c363b139720959947adc880100c33ddff8f28d61f0cc0d0c63309ab0549631883afd4303356b776359df9893adba146d69a2e1544d0f18bd4a8a923f37f52dafa1add01b77d6fd97616a33369a00a2a3576286e7cc3ce83e3cae51f3454d6d98b282b9fd1fc43ba5d122b"}, {0x28, 0x0, 0x0, "c78a0e592b68caec9e7740aa493a36640b"}, {0x6d0, 0x0, 0x0, "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"}], 0x808}, 0x0) 11:37:27 executing program 4: r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCCONS(r0, 0x80047462) 11:37:27 executing program 1: mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) 11:37:27 executing program 5: mlock(&(0x7f0000ff8000/0x2000)=nil, 0x2000) mprotect(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0) 11:37:28 executing program 0: mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 11:37:28 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1002, 0x0, 0x0) 11:37:28 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r0, 0x2) 11:37:28 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendto(r0, &(0x7f0000000140)="81", 0x1, 0x0, 0x0, 0x0) 11:37:28 executing program 4: semctl$SETVAL(0x0, 0x0, 0x6, 0x0) 11:37:28 executing program 5: r0 = socket$unix(0x1, 0x5, 0x0) setsockopt$sock_int(r0, 0xffff, 0x8, &(0x7f0000000000), 0x4) 11:37:28 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x200, 0x0) chown(&(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, 0xffffffffffffffff) 11:37:28 executing program 3: syz_emit_ethernet(0x3e, &(0x7f0000000100)={@local, @broadcast, @val, {@ipv6}}, 0x0) 11:37:28 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000001c0)={&(0x7f00000000c0)=@abs={0x0, 0x0, 0x1}, 0x8, &(0x7f0000000180)=[{0x0}, {&(0x7f0000000280)="dde2215f575e901a03a42ad8d0aab6e735c32db76e7aa0c99abf8e9f53a0963d0c7867cb9e5c1fb7f8db0b0da06d92a6e3f4e7cefe1af91d8ecb1bd04167c609189528034ea709331a724cc512f6833c81707f727db65b796cca2053eebc6b1d6d0a80c715a4ec048c109e08a1d6e8f7813fad81c8e4afe6884e542231a665070daaf6845b4e7dd27b1e8beaf4052b2e00", 0x91}, {&(0x7f0000000140)="f2", 0x1}], 0x3}, 0x40a) 11:37:28 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="3a221480f7f38894bdbe3b5caba9e5ce2fa8a7fb7cad2b4afc9e5fb1aacba36f74f39b71b01ce540d33b95626c68d63003718bf094be834dfc4d7850d6867557a28db626aa93c377b29dc3e790afc96a02c3f087b24fa7f261604e1d13f7", 0x5e}, {&(0x7f0000000180)="e2333102801f862181e07b1068c85207aa80f59fbe7639a645e5db4003829fb88fa9a6b0a33b1f50b9a544652f030f1a87f7f8e2dccc5db6bbc4c42dae7121ac7dcaa16838ae111f6ecb53acc2a0036223adae3f20eac9bb15e74d3f1bba0c7b4730fcb9b56cade7e15e1cab5cbcb9c129ca0a4e", 0x74}, {&(0x7f0000000200)="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", 0x72f}], 0x3}, 0x0) 11:37:28 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_linger(r0, 0xffff, 0x80, &(0x7f0000000180), 0x8) 11:37:29 executing program 2: mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x6) 11:37:29 executing program 5: writev(0xffffffffffffff9c, 0x0, 0x0) 11:37:29 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_int(r0, 0xffff, 0x0, 0x0, 0x0) 11:37:29 executing program 1: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7ffffffff000}}, 0x0) 11:37:29 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = getuid() chown(&(0x7f00000011c0)='./file0\x00', r0, 0x0) 11:37:29 executing program 4: syz_emit_ethernet(0x4f, &(0x7f0000000040)={@local, @broadcast, @val, {@ipv4}}, 0x0) 11:37:30 executing program 2: socketpair(0x1, 0x3, 0x1, 0x0) 11:37:30 executing program 5: shmctl$IPC_SET(0x0, 0x1, &(0x7f0000001180)={{0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff}) 11:37:30 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000140)={&(0x7f0000000040)=@abs={0x0, 0x0, 0x2}, 0x8, 0x0}, 0x0) 11:37:30 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x200, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') 11:37:30 executing program 1: syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @local, @val, {@ipv4}}, 0x0) 11:37:30 executing program 4: mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x200, 0x0) 11:37:30 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x20, &(0x7f00000005c0), 0x4) 11:37:30 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x200, 0x0) shutdown(r0, 0x0) 11:37:30 executing program 5: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@random="71c929ec5075", @random="38aa4c00", @val, {@ipv6}}, 0x0) 11:37:30 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x7, &(0x7f0000000100)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @func, @initr0]}, &(0x7f0000000080)='syzkaller\x00', 0x2, 0x91, &(0x7f0000000180)=""/145, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 11:37:31 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) sendmsg$unix(r0, &(0x7f0000000fc0)={&(0x7f0000000700)=@abs, 0xfffffffffffffe77, 0x0, 0x0, &(0x7f0000000f00)=[@cred], 0x20}, 0x0) 11:37:31 executing program 5: syz_emit_ethernet(0xcd5, &(0x7f0000001300)={@random="71c929ec5075", @random="38aa4c00", @val, {@ipv6}}, 0x0) 11:37:31 executing program 0: r0 = socket$inet6(0x18, 0x1, 0x0) getsockopt$sock_int(r0, 0xffff, 0x800, 0x0, 0x0) 11:37:31 executing program 1: pipe(&(0x7f0000000180)={0xffffffffffffffff}) lseek(r0, 0x0, 0x0) 11:37:31 executing program 2: syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @random="38aa4c00", @val, {@ipv4}}, 0x0) 11:37:32 executing program 3: perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12068, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:37:32 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="cb", 0x1}], 0x1}, 0x0) recvmsg(r1, &(0x7f000000f800)={&(0x7f000000f680)=@can, 0x80, &(0x7f000000f7c0)=[{&(0x7f000000f700)=""/133, 0x85}], 0x1}, 0x0) 11:37:32 executing program 4: r0 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r0, &(0x7f00000007c0)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000080)="f2", 0x1}], 0x1}, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, &(0x7f0000000380), 0x9b02) 11:37:32 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000007c0)=ANY=[@ANYBLOB="b702000031000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000002000109500000000000000e3a333a0daf2f73451c0e17a606fe530cb7d7f933e997015c0d814886d2a40392dda02ba18ad181867514fe6007790123d3ee7cf43548ee858e085fbdfd43307c529a4ce6be614c2e31789e70233bf19190ac7769a77f183a9449582dbe0d8115efd90c809000000fc83cedf82b3ec7e1e79df7e42065dda00000000cf8db95f5b068a9e0000000000e5000000d1301200000000007f83cecb1100000000000000000000000000000018287b87d8807c2877cc420ffca65f5deb269dff9198560276c69e4403266b0300000000000000b4b8eece9e0a49b72dfcf359d16b1e153e7a5c9df18367809c71dc79c2b2832d167bb643ad70ee491268e584e464fb521a0b5a61b8770824212b72fe39f28cea1c96cb879a61f8f10051495538606b97394cf218000000000000872b7a73d91c95f501460642f3f482f334366c1f23367fb30d8fbcfde1114429bcf86f1e8b838fea8342dcf3dccc5383ae84e562c00608196cdff76a43bd5db9de77760955586134ecdeaf3f174f181d97878b5dba8ce6d159b984a0ddf0550b859feec3c77775c9c0680757aea3a3d3f7eab4d5524ef1739c780fc6c7932b88fc73d8e824cc704a6d47bf2e58d7c82f01e2edaba3e0a9a692193a162948f6db0aec456cdb65bf024ae4047da676ff7f58ad40405061c1e507bd30d534a524576442a6f530aa98d07a9c5f7741daab4bd7ac3e4fae5b219e8992537e4fa0643b9930c909dad8f8add52f7f0fc67933bc76bc9e2f0d4bc6f9bb693618d5b2789fb13df43e242ce6591f43caa012de44934f66da1607cbac747160080a1dcfc87c6061e5c92e241f60e49385733d708e84a5fd52dbe08b016baa92a38b855e1c1b63b21735fa7b32533c02a41437c4a1e74cf4524376edf96a04a034a987f64ccfd411b18e8f23a4126bf74fd12ad2fa9710b8377b2f9670afd37244c8b89237031f9a8f07869bf0c94fe660"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3d}, 0x48) perf_event_open(&(0x7f0000000840)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r0, 0x4000a0, 0x12, 0x5ac484bb51fa106a, &(0x7f0000000040)="4d50b441e692763513ef874565020007000112bbf3469fd0880f892fd398e4020a00001375bc847d142d1523389037a1d4f5631813cf7037fd584b4af7507a849ce80deea1a57733a5e3730fbef42ab9bedd390775bf809fbcf2a71f32d41a1f7ff3b5483107766a8bd0033d44e6ef7b526c8c67aa9847e283c6cdccbd627ad1094342b1840b506814cb319132533f6d740d9643d0c6dc8481d0c9643dd3e0aa6e1be581aca3ea9377136ce8dd480207fba7af225672c63802beb9647a5fbe90781e147e92eae8d9d79d0d", 0x0, 0x23, 0x0, 0x22d, 0x1000000}, 0x28) 11:37:32 executing program 0: r0 = perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) 11:37:32 executing program 2: unlink(0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001080)={0x0, 0x1, &(0x7f0000000ec0)=@raw=[@exit], &(0x7f0000000f40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 11:37:32 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002440)={0x18, 0x6, &(0x7f00000000c0)=@framed={{}, [@alu={0x7, 0x1}, @jmp={0x5, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffe}, @jmp={0x4, 0x0, 0x5}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 707.123690][T15162] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 707.130358][T15162] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 707.206917][T15162] ===================================================== [ 707.213943][T15162] BUG: KMSAN: uninit-value in hsr_get_node+0x45d/0xba0 [ 707.220824][T15162] CPU: 1 PID: 15162 Comm: syz-executor.5 Not tainted 5.10.0-rc4-syzkaller #0 [ 707.229601][T15162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 707.239671][T15162] Call Trace: [ 707.243016][T15162] dump_stack+0x21c/0x280 [ 707.247364][T15162] kmsan_report+0xf7/0x1e0 [ 707.253162][T15162] __msan_warning+0x5f/0xa0 [ 707.258037][T15162] hsr_get_node+0x45d/0xba0 [ 707.262581][T15162] hsr_forward_skb+0x9d9/0x2630 [ 707.267540][T15162] hsr_dev_xmit+0x133/0x230 [ 707.272063][T15162] ? is_hsr_master+0xb0/0xb0 [ 707.276665][T15162] xmit_one+0x2b9/0x770 [ 707.280835][T15162] __dev_queue_xmit+0x33f2/0x4520 [ 707.285881][T15162] dev_queue_xmit+0x4b/0x60 [ 707.290398][T15162] __bpf_redirect+0x1455/0x1690 [ 707.299184][T15162] bpf_clone_redirect+0x498/0x650 11:37:33 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000153c0)={&(0x7f0000015280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xd}, {0xf}, {0x0, 0x1}]}]}}, &(0x7f0000015300)=""/167, 0x3e, 0xa7, 0x1}, 0x20) [ 707.304241][T15162] ___bpf_prog_run+0x4256/0x93c0 [ 707.309199][T15162] ? bpf_csum_level+0x780/0x780 [ 707.314067][T15162] __bpf_prog_run512+0x12e/0x190 [ 707.319036][T15162] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 707.324855][T15162] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 707.333321][T15162] ? __perf_event_task_sched_in+0xf5c/0xfd0 [ 707.339254][T15162] ? kmsan_get_metadata+0x116/0x180 [ 707.344470][T15162] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 707.350292][T15162] ? kmsan_get_metadata+0x116/0x180 [ 707.355508][T15162] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 707.361332][T15162] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 707.367447][T15162] ? ktime_get+0x390/0x480 [ 707.373662][T15162] ? kmsan_get_metadata+0x4f/0x180 [ 707.378794][T15162] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 707.384613][T15162] ? __bpf_prog_run480+0x190/0x190 [ 707.389736][T15162] bpf_test_run+0x54c/0xe30 [ 707.394257][T15162] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 707.400072][T15162] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 707.405914][T15162] bpf_prog_test_run_skb+0x190e/0x3500 [ 707.411416][T15162] ? __bpf_prog_test_run_raw_tp+0x410/0x410 [ 707.417329][T15162] __do_sys_bpf+0xbebe/0x1ad80 [ 707.422125][T15162] ? kmsan_get_metadata+0x116/0x180 [ 707.427349][T15162] ? kmsan_internal_set_origin+0x85/0xc0 [ 707.433015][T15162] ? kmsan_get_metadata+0x116/0x180 [ 707.438222][T15162] ? kmsan_get_metadata+0x116/0x180 [ 707.443437][T15162] ? kmsan_internal_check_memory+0xb1/0x520 [ 707.449338][T15162] ? kmsan_internal_set_origin+0x85/0xc0 [ 707.454988][T15162] ? kmsan_get_metadata+0x116/0x180 [ 707.460212][T15162] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 707.466023][T15162] ? kmsan_get_metadata+0x116/0x180 [ 707.471226][T15162] ? kmsan_get_metadata+0x116/0x180 [ 707.476450][T15162] __se_sys_bpf+0x8e/0xa0 [ 707.480787][T15162] __ia32_sys_bpf+0x4a/0x70 [ 707.485306][T15162] __do_fast_syscall_32+0x102/0x160 [ 707.490514][T15162] do_fast_syscall_32+0x6a/0xc0 [ 707.495372][T15162] do_SYSENTER_32+0x73/0x90 [ 707.499888][T15162] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 707.506216][T15162] RIP: 0023:0xf7f80549 [ 707.510315][T15162] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 707.530298][T15162] RSP: 002b:00000000f55590cc EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 707.538734][T15162] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000740 [ 707.546760][T15162] RDX: 0000000000000028 RSI: 0000000000000000 RDI: 0000000000000000 [ 707.554751][T15162] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 707.562735][T15162] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 707.570718][T15162] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 707.578703][T15162] [ 707.581028][T15162] Uninit was created at: [ 707.585299][T15162] kmsan_internal_poison_shadow+0x5c/0xf0 [ 707.591019][T15162] kmsan_slab_alloc+0x8d/0xe0 [ 707.595705][T15162] __kmalloc_node_track_caller+0xc61/0x15f0 [ 707.601605][T15162] pskb_expand_head+0x25f/0x1df0 [ 707.606548][T15162] skb_ensure_writable+0x4d1/0x590 [ 707.611662][T15162] bpf_clone_redirect+0x26c/0x650 [ 707.616693][T15162] ___bpf_prog_run+0x4256/0x93c0 [ 707.621647][T15162] __bpf_prog_run512+0x12e/0x190 [ 707.626594][T15162] bpf_test_run+0x54c/0xe30 [ 707.631099][T15162] bpf_prog_test_run_skb+0x190e/0x3500 [ 707.636560][T15162] __do_sys_bpf+0xbebe/0x1ad80 [ 707.641328][T15162] __se_sys_bpf+0x8e/0xa0 [ 707.645662][T15162] __ia32_sys_bpf+0x4a/0x70 [ 707.650188][T15162] __do_fast_syscall_32+0x102/0x160 [ 707.655478][T15162] do_fast_syscall_32+0x6a/0xc0 [ 707.660330][T15162] do_SYSENTER_32+0x73/0x90 [ 707.664837][T15162] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 707.671164][T15162] ===================================================== [ 707.678101][T15162] Disabling lock debugging due to kernel taint [ 707.684250][T15162] Kernel panic - not syncing: panic_on_warn set ... [ 707.690845][T15162] CPU: 1 PID: 15162 Comm: syz-executor.5 Tainted: G B 5.10.0-rc4-syzkaller #0 [ 707.701003][T15162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 707.711149][T15162] Call Trace: [ 707.714465][T15162] dump_stack+0x21c/0x280 [ 707.718810][T15162] panic+0x4c8/0xea7 [ 707.722735][T15162] ? add_taint+0x17c/0x210 [ 707.727161][T15162] kmsan_report+0x1da/0x1e0 [ 707.731693][T15162] __msan_warning+0x5f/0xa0 [ 707.736223][T15162] hsr_get_node+0x45d/0xba0 [ 707.740765][T15162] hsr_forward_skb+0x9d9/0x2630 [ 707.745634][T15162] hsr_dev_xmit+0x133/0x230 [ 707.750167][T15162] ? is_hsr_master+0xb0/0xb0 [ 707.754771][T15162] xmit_one+0x2b9/0x770 [ 707.758950][T15162] __dev_queue_xmit+0x33f2/0x4520 [ 707.763991][T15162] dev_queue_xmit+0x4b/0x60 [ 707.768495][T15162] __bpf_redirect+0x1455/0x1690 [ 707.773352][T15162] bpf_clone_redirect+0x498/0x650 [ 707.778382][T15162] ___bpf_prog_run+0x4256/0x93c0 [ 707.783324][T15162] ? bpf_csum_level+0x780/0x780 [ 707.788186][T15162] __bpf_prog_run512+0x12e/0x190 [ 707.793133][T15162] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 707.798956][T15162] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 707.805028][T15162] ? __perf_event_task_sched_in+0xf5c/0xfd0 [ 707.810927][T15162] ? kmsan_get_metadata+0x116/0x180 [ 707.816125][T15162] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 707.821947][T15162] ? kmsan_get_metadata+0x116/0x180 [ 707.827149][T15162] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 707.832959][T15162] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 707.839119][T15162] ? ktime_get+0x390/0x480 [ 707.843569][T15162] ? kmsan_get_metadata+0x4f/0x180 [ 707.848684][T15162] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 707.854494][T15162] ? __bpf_prog_run480+0x190/0x190 [ 707.859610][T15162] bpf_test_run+0x54c/0xe30 [ 707.866122][T15162] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 707.871957][T15162] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 707.877776][T15162] bpf_prog_test_run_skb+0x190e/0x3500 [ 707.883263][T15162] ? __bpf_prog_test_run_raw_tp+0x410/0x410 [ 707.889164][T15162] __do_sys_bpf+0xbebe/0x1ad80 [ 707.893951][T15162] ? kmsan_get_metadata+0x116/0x180 [ 707.899172][T15162] ? kmsan_internal_set_origin+0x85/0xc0 [ 707.904810][T15162] ? kmsan_get_metadata+0x116/0x180 [ 707.910100][T15162] ? kmsan_get_metadata+0x116/0x180 [ 707.915308][T15162] ? kmsan_internal_check_memory+0xb1/0x520 [ 707.921206][T15162] ? kmsan_internal_set_origin+0x85/0xc0 [ 707.926848][T15162] ? kmsan_get_metadata+0x116/0x180 [ 707.932052][T15162] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 707.937873][T15162] ? kmsan_get_metadata+0x116/0x180 [ 707.943073][T15162] ? kmsan_get_metadata+0x116/0x180 [ 707.948277][T15162] __se_sys_bpf+0x8e/0xa0 [ 707.952642][T15162] __ia32_sys_bpf+0x4a/0x70 [ 707.957155][T15162] __do_fast_syscall_32+0x102/0x160 [ 707.962372][T15162] do_fast_syscall_32+0x6a/0xc0 [ 707.967230][T15162] do_SYSENTER_32+0x73/0x90 [ 707.971759][T15162] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 707.978105][T15162] RIP: 0023:0xf7f80549 [ 707.982177][T15162] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 708.001910][T15162] RSP: 002b:00000000f55590cc EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 708.010338][T15162] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000740 [ 708.018313][T15162] RDX: 0000000000000028 RSI: 0000000000000000 RDI: 0000000000000000 [ 708.026292][T15162] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 708.034265][T15162] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 708.042325][T15162] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 708.050429][T15162] Kernel Offset: disabled [ 708.054757][T15162] Rebooting in 86400 seconds..