5205432d8a62e3d0b26ad094bbe75af97b92f5e67eda0c72ff91f19089cd4e5c895f04536e31e68a51ff1b6d26b03ad709e312df244349f4fa090906312da5e0b730f72b2917454fdb6c351f7c35eadf9ae03adecafff29c7c9dc554bdeacdd64450a40df679a0a6d7d6ee3fb00523b473fe2620d845cf4be6909cd3fde2356b1201b5bc7964a4053586d8296ca3c1c4ff17c00ed794e3351d2102daab7b7d7e44c8e6cf717d724fdff4487694e3e1ec813f14d1f9302752e7b8be368d5a26440274526a6248cc4ffb471e4262d7cb85f0bd505bbd409827573db3ada9052f814821a492979c93f0ce6c197fca00e2b95d3f5100e7564634849fea8ec9637053cb5ef726e0358cab727a2052ee2c3f727a296bd5bf30a7678deda748982206c6bf7fb7240c0131ce90b7b0ea150afb642fe57982165964ab1df4b4d8d5f8182d847e2704592d24424da2a687a9c67bb6bc330bf444a2aeac822e18dc03ce5cfcd6d937f63b41bf920bd2ff75ff7f7b29315967b89c3d3901de2395b0333c34087aeb0b7c7277bb9627dfd7d77621f0e0b3a6777920ec78784ea2e02d225c9708db335b0a595ea0ef9cad90dccc638b90d31dfa0db97ac477115e605c32549f203f8cc338552d6c1e1400314ab45b2e4478cd6762b932524e57b9a60e137e5168a9df06d68850eadac80498335ff1592b9ee2f08533b0e26a3949d30e96a0b163f26b7e0320547fda55fd2e4768d4737c7a054a224a94b251df5d6404a2a3147c20c888f3b64f95652f5db3200ae5bc9c4b67ec4bfc4662517008f92f4b138a0e482767f3588e2266a58a8f8cf1c87e1328a4a0ba5eea8f8a2d8da42860904dcdbb006196572873601653c3d3c45dc7d88ecbbfb6d048b4bf23fc6388434ddc048836acd6e983c88b00fa90bc606e133dec8ccb2fc0bc6cb59f30e609051c02a811abd1a190653c54e583c25c620c3c32e8151225094bfa1d8d61014dc79a3acfe0782af1865a209b4dff9e10625509121f66ac9b7e247952aeb0d32e2ceac640452d8ae0c65d3887d42fe312b1d543507f69edde6a6c8507fbcbde43afdd6f9df485b16203a6ffc15e81c067f1778c33a2063c773448a767931434bba18e1976f0cc6fac6a16e4ae98fea0c6db6d290439702446344e77eda3e30b5c26396705bef0fa84e88f3730be8a88c3302dcce84e9a274e499fc2a605901859ef611c497120ca81efeb9502054ddf9355a003c7f727d620c7fe90014ebd9b5cf5cb24865745f0ccb701164477d4e778933fb20be902b9c32f4d2ee67fb5d266b5789b98bb1391245ce5ffb95845b88fcf80d2bedc1c9f16433e12be83fd60c62abf08130c200b4e66c9dd05ef8cd700cd42c36b284830c72fc05bfebee3afd24c965e83fd2ae31f1339baa03286884a501dcb7ae7bda6aacc3fd6862ab45c056f49dd1e84da74463c0b5b22b48ba7aba73a6e43bbee936adcc71d1120bfdef2bc9198cbbf663f92a5a066bb67c45ee917cfd39144572f28dfbd643b673e0cb4452dd6d2e34046ac961e293ff13b176a4e7f6505e7ae752e35caf9707a92981e63e291bf53cd9e48a3c87918a434d7812d63de974fbc431516a23c756069518236691c2390801b8d6f5c64c05e01dea641b26770ee4491ec131953864d7004328b1e4efb3251f5115151b4d4700f41c42f338bc33d5cceef0fec6f2c47fc6e191f1c4e8ebf3db3f63fb79f281246d12423f19797deccd6dc971b89010252151a4ea9464ca2d51e1a4af74b5cf84f9f0f4060d44a10c959a3db7fef5ad1188f8d6652c5dc25b95e37100993bc0aec11bf11ab7cc63397007d923628e984b6d96e45e10a4fbbe6df19c4fd636b10bed04048c6a3b7326c02bdb61ef3146c3af38bd3dd1019bfce38f5861744396b4a51be89887e563bd11eb1181c26240ad07fc648bd1d598b981079d4348c58f13bfa8a95f01534c59044d2904a2f0d2cd8ef781046d9ce63be69ad2cfa50d47400302df05f6e5693b4c64fdce64907a3695e04dfa8b72560e8c8797c4a4a1210d534346058069c965aa03fb014f8b964896931264b7dfde408ddbedaa4ef757a2690c3b922e345b6965d7af5cfb8eee5aea3c7ef4878efddcf998dddad5f00d6e9cba95a01b5304f5b994d6879ddcb11cbb65488dbf98f5ea1edb688db39", 0x1000}, {&(0x7f000000ab80)="a85f0d3911a2f9c4cfa27622c817b96ab23c7e1abe88e63fe56747703c17755cb6a7b0094d3397ecad0eda20fc214ebf911cd7a749a1e1158b15f670be259bf48544a89e57f7d6667905355c9e6feec850c00767a60231af185bbc743fdbb0b27b2601b601d8471e03ed40f146ac17cf2eb61b2dbcd59a0422e973f70596d18bc10748e3d81e2692e6", 0x89}, {&(0x7f000000ac40)="36b81380b4755ac6325296da615d6d05263b42bad4ac8344ae9ed4d616fd4475bac4a4a9f39816f1185a6a34a343072a2c9cee3b0a979504e2ccb9271df461171a4fdecca9c62dd64674c5d123cdd7598f17efc354e47957b866336ebbaca73134ac70da1c57c7a8fde882446ceb9f1c4d4ddb5390e587149f36ec2d90fca2f80880440ea2c77b5bc7d1dfacbb0e59154b", 0x91}], 0x3}}, {{0x0, 0x0, &(0x7f000000bd80)=[{&(0x7f000000ad40)="b19d54bd1b7c82d0723e6a8b770551f755ef08b506f7", 0x16}, {&(0x7f000000ad80)="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", 0x1000}], 0x2}}, {{0x0, 0x0, &(0x7f000000bfc0)=[{&(0x7f000000bdc0)="1b2af14fee07b4ef03139034acf83030f3b269ba54519da0d52f824618e6279d7b67caa2a60506daec73168d092e0031cca12ee404bdb105d07e7313d736a552e8763989b7c13f6f250845a9f2526412318344612138ae58a0391fbcd9c6d7382ec4b3e75216", 0x66}, {&(0x7f000000be40)="135b6dc1be6e71aa7d61b2be1a68572e4dc5fca20b3676f4053568848d3c6ddad35679c7aaffd933862d3db7e1825e4e1a3fbd6ceb39c548741ef8989dce0339ba0d2fd0cbffafc338f11534e3f44a72f4967c931f51c73bb0969564748a556d5cb57bf6a471c6ce87adc1d0c366f5cf395d4f28bdbe5457023ba3bc12da2f0c0b5e0cd4519ecc323ec477e1f09a47ed5571a5d361d02b23326bc406a5c732d85c01e94fb2232ceee6dd48fb7ed7467f278d7345c39a254efbe81f9d", 0xbc}, {&(0x7f000000bf00)="3d1fb6154003dac264e607c6e82321df0830e863e80af5cfc2c546420e243f698d837bbe1842590d8daf4ee65e7f082e5858f44aa4567eac22954af4670999c902018bb92bcd906e20fb8882fa846d071a52bc58e46f7cc57ca6f55c4b2d3c562b1b18080e16d67a073cf119dcf78ac26dec83946968bb46c8555a7ad319f1c9b3bf986096a2b842982eb43d55f439c83e44ef731e2f4f63889f42e30f0e", 0x9e}], 0x3}}], 0xa, 0x840) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) close(r2) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000005840)={0x2, 0x10001}, 0x2) openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000780)) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000180)) 15:10:25 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc0285628, &(0x7f0000000000)={0x800000000000003, {0x1}}) r1 = open(&(0x7f0000000040)='./file0\x00', 0x4001, 0x10) ioctl$RTC_PIE_OFF(r1, 0x7006) 15:10:25 executing program 2: r0 = epoll_create1(0xfffffffffffffffc) r1 = epoll_create1(0x0) close(r0) r2 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x80000001, 0x0) ioctl$SIOCAX25CTLCON(r2, 0x89e8, &(0x7f0000000080)={@default, @bcast, @null, 0x7, 0x0, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast]}) fcntl$getown(r0, 0x9) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x40000, 0x0) 15:10:25 executing program 1: setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x2) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) 15:10:25 executing program 3: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xfff, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r1, 0x1, 0x0, 0x369e5d84) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280), 0x12) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x4, 0x5, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 15:10:25 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x4, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f0000000200)={{0x7fffffff, 0x7}, 'port1\x00', 0x8, 0x40000, 0x9, 0x4, 0x7, 0x7ff, 0x7fff, 0x0, 0x2, 0x7}) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x995, 0x100) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000001c0)={0x80000}) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc008551a, &(0x7f0000000140)={0x0, 0xc, [0xad5f, 0xffffffff, 0x5]}) connect$bt_sco(r2, &(0x7f0000000000)={0x1f, {0x1d42, 0x0, 0x9, 0x1000, 0x6, 0xfffffffffffffffb}}, 0x8) syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0xa000) 15:10:25 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f0000000040)='syz0\x00') [ 268.347013] audit: type=1804 audit(1565190625.329:91): pid=14538 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir525748567/syzkaller.UwknhR/172/file0/file0" dev="loop3" ino=218 res=1 15:10:25 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc0285628, &(0x7f0000000000)={0x800000000000003, {0x1}}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x40000, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000080)={0x9, 0x20a, 0x9, 0x800, 0x0}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000140)={r2, 0x1}, 0x8) 15:10:25 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x2, 0x2) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000080)=0x4) dup3(r1, r2, 0x80000) dup(r0) setsockopt$CAIFSO_REQ_PARAM(r2, 0x116, 0x80, &(0x7f0000000100)="0978645240cf81ca572e2d606787e8505cb948f3a72ed6c37662b4efa65ed38f9b0f01ab6899f37652c61bd3a1c2f8d61694bca3b2229392abeef685cf0a3869e6273494b6effe99ef9be2a86cfcc42a244bdc6ab68c4c468735bb5d58735977deee8c60", 0x64) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f0000000240)) socket$caif_stream(0x25, 0x1, 0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r1, &(0x7f0000000180)={0x30002002}) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f00000000c0)={0x9, 0x800, 0x80, 0x5}, 0x10) 15:10:25 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000000040)={0x0, 0x9, 0x19}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) 15:10:25 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f00000007c0)=""/4096) close(r0) r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) signalfd4(r2, &(0x7f0000000040)={0x2}, 0x8, 0x800) 15:10:25 executing program 4: r0 = epoll_create1(0x4000000) r1 = epoll_create1(0x0) close(r1) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) 15:10:25 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0xa, 0x20000000000000) ioctl$VIDIOC_G_CROP(r0, 0xc0285628, &(0x7f0000000000)={0x800000000000003, {0x1}}) 15:10:25 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) 15:10:25 executing program 4: r0 = epoll_create1(0x4) r1 = epoll_create1(0x0) close(r0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x200, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) 15:10:25 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockname$netlink(r2, &(0x7f00000000c0), &(0x7f0000000180)=0xc) pipe(0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="5500000018007f5501fe01b2a4a280930a06000000a84599910000002900090008000c00010000001900150006000000000067c01338d54400009ba1136ef75a9251b77226483113e92f13", 0x4b}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet(0x2, 0x100000000805, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r4, 0x84, 0x13, &(0x7f0000745ffc), &(0x7f0000b96000)=0x35b) r5 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x3, &(0x7f0000000100)}], 0x492492492492805, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) [ 268.643917] audit: type=1804 audit(1565190625.629:92): pid=14604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir525748567/syzkaller.UwknhR/173/file0/file0" dev="sda1" ino=17228 res=1 15:10:25 executing program 3: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xfff, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r1, 0x1, 0x0, 0x369e5d84) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280), 0x12) execve(&(0x7f0000000100)='./file1\x00', &(0x7f0000000500)=[&(0x7f00000001c0)='/dev/input/mouse#\x00', &(0x7f0000000200)='vfat\x00', &(0x7f0000000240)='vfat\x00', &(0x7f00000002c0)='vfat\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='lo\x00', &(0x7f0000000400)='\x00', &(0x7f0000000440)='\x00', &(0x7f0000000480)='\x00', &(0x7f00000004c0)='keyring&\x00'], &(0x7f00000006c0)=[&(0x7f0000000580)='\x00', &(0x7f00000005c0)='vfat\x00', &(0x7f0000000600)='#$^\x00', &(0x7f0000000640)='ppp0\x00', &(0x7f0000000680)='/dev/input/mouse#\x00']) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file1\x00', 0x0) 15:10:25 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f00000000c0)={0x9, 0x2, 0x4, 0x60008, {r3, r4/1000+30000}, {0x4, 0xe, 0x9, 0x2, 0x3, 0x8, "7d19215c"}, 0x9, 0x7, @planes=&(0x7f0000000080)={0x6, 0x0, @mem_offset=0x8, 0x80000001}, 0x4}) 15:10:25 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0xd, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e21, 0x10001, @remote, 0x9}}, 0xfffffffffffff123, 0xff0bbd1}, &(0x7f0000000140)=0x90) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000180)={r2, 0xffff}, 0x8) ioctl$VIDIOC_G_CROP(r0, 0xc0285628, &(0x7f0000000000)={0x800000000000003, {0x4}}) 15:10:25 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x412, 0x402000) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000080)) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) close(r0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000780)) 15:10:25 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x0, 0x0) setsockopt$CAIFSO_LINK_SELECT(r2, 0x116, 0x7f, &(0x7f0000000000)=0x100000001, 0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) 15:10:25 executing program 0: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x420200, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x1000000}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000240)={r1, 0x1c00, 0x5}, 0x8) r2 = request_key(&(0x7f00000000c0)='syzkaller\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000180)='\x00', 0xfffffffffffffffa) keyctl$revoke(0x3, r2) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc0285628, &(0x7f0000000000)={0x800000000000003, {0x1}}) poll(&(0x7f00000002c0)=[{r0, 0x14}, {r0, 0x1000}, {r0, 0x100}, {r0, 0x1}], 0x4, 0x6) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f0000000080)='y\x00', 0x2, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000280)={0x8001008, 0x9, 0x3}) [ 268.782252] Unknown ioctl 19585 [ 268.787727] Unknown ioctl 19585 15:10:25 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000000040)={0x8000001c}) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 15:10:25 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x6}) close(r0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000080)={0x9, 0x6, 0x3}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) 15:10:25 executing program 2: r0 = epoll_create1(0x0) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="73797a31e2754a351f004865e86f26a62942b963447f069c845419a4be4017f86bfcdaeeca3c2069859731f242cd2d924405ad19c14367201e3e448b01bf32e56ff1575929eaa1d4933471c2a1159710ad1ca7a11c5b84b04358e97e2b8e0dcc1b1b090c9dec523058ccbf9b179dd1b6f825f4ce1be3044be80cf6a4141c7be1fae1dd53f8631de13afe7e8b26750ae1694f"], 0x92) r1 = epoll_create1(0x0) close(r0) r2 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x5, 0x101000) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r2, 0x80845663, &(0x7f0000000080)) readlinkat(r2, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=""/159, 0x9f) setsockopt$inet_opts(r2, 0x0, 0x9, &(0x7f0000000300)="c074e55ec0634bf642292a1b9c96a2ee573cb014c8be7a5424856939dcdc07a694fff78ca63f73655837c97e152d90166865b19c60058670d11e9be65dd757db56f5077189ee3dfee00ee567cbf7e0d947f517f8c72bc70da222fb4665012720d37a12da01da25550e0dcc6b5ea767221e8b0d7cd7c4a6b52bb30a6f48c5dfc9d10d02f2719ceb050611523c22cfb062b9cd672a893d6f0b9b0a998b7c27b41074543cf121bcc0b2241e3e4fd5", 0xad) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) name_to_handle_at(r2, &(0x7f00000003c0)='./file0\x00', &(0x7f00000007c0)={0x1008, 0x0, "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"}, &(0x7f0000000400), 0x1400) 15:10:25 executing program 1: r0 = epoll_create1(0x80000) r1 = epoll_create1(0x0) close(r0) semget$private(0x0, 0x1, 0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) 15:10:26 executing program 4: r0 = epoll_create1(0x80000) r1 = epoll_create1(0x0) close(r0) r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) ioctl$TIOCGISO7816(r2, 0x80285442, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000000180)={0x1}) 15:10:26 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x6, 0xfffffffffffffffd) ioctl$VIDIOC_G_CROP(r0, 0xc0285628, &(0x7f0000000000)={0x800000000000003, {0x1}}) r1 = dup2(r0, r0) ioctl$VIDIOC_G_PRIORITY(r1, 0x80045643, 0x0) recvfrom$netrom(r1, &(0x7f0000000180)=""/72, 0x48, 0x40000000, &(0x7f0000000200)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x8400, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f00000000c0), &(0x7f0000000140)=0x4) syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x7fff, 0x2) [ 269.074614] audit: type=1804 audit(1565190626.059:93): pid=14657 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir525748567/syzkaller.UwknhR/174/file0/file0" dev="sda1" ino=16881 res=1 15:10:26 executing program 3: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xfff, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r1, 0x1, 0x0, 0x369e5d84) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280), 0x12) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file1\x00', 0x0) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x142) 15:10:26 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$setperm(0x5, r2, 0x20000) 15:10:26 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc0285628, &(0x7f0000000000)={0x0, {0xfffffffffffffffd, 0xfffffffffffffffe, 0x0, 0x7ff}}) 15:10:26 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x381040, 0x0) sendmsg$nl_netfilter(r2, &(0x7f00000005c0)={&(0x7f0000000140), 0xc, &(0x7f0000000580)={&(0x7f0000000180)={0x3c8, 0x9, 0x0, 0xb26, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x4}, [@typed={0x8, 0x2c, @fd=r0}, @generic="0c90c6d34baf7ee20d6be2fbef7fda1200d12a9a3ea57a65bdedd385f12082f3aacbff2e84da4ce77e5c53e3041db946909a31f63bfb31acb39a31", @nested={0x370, 0x80, [@typed={0xc, 0x1c, @u64=0x4}, @typed={0x78, 0x17, @binary="a716f13c02d2e6486ccd19f2f6361875d8163a8b604b6726a20737f92607e6dd95d0817dd41c4680484d230067e14a41f70d77e61ca2c7b80a1542e8e4bcc3ce22b8842fd40bd01731b2dc37293d772fee162bc54822b3523e88015eadd88d66932736c796c7ab35ebdee826b7a28c06d291"}, @generic="f8f7a17d6309e253d4668a47cabd5416ea0e46535498af19ae1d1f909e55c4276cbee4b707716f14e13c5bdeef0ed167ac2a6361b69bde5903c30ba100f8097e33d9532d69d087486418f5ea77c63dbca56e0a9d90299fc60bd0b72e9cf5938681f136894e6f45d2d67a4a40799924cc68eb49b750eba71d23566ed5470191290070fb96d9d6a700dd52f428ddda86df6673d37953fb6aa4abcd7e", @typed={0x88, 0x43, @binary="4c99d1dd3165d2cafd4614ef61ed3461dea0f9c7356aa130bf23784da11fa1fe1104c97c5e6ee8a2ec4e3133ead20d2b0765eaebbbb36865e9bccc31566b0549af0c5a578bd1582cc6f90c97537202ea8c8cb7a16e8b9ab63dc107a3f7acc76709cf4398502986309a72d6896cbbeac54aee1794f8f0c454db29af492f75cc8be7076fd2"}, @generic="d15560f3cf2e1f3996f686780db3b14184ee8bb8fddab79c10674e234b6585f2d3a8cf38c011b5e130e0ba27ec997c42c9bc5da6d20452a913ce3395c34ddf3d9574a27a46355dbf937e0c6226688e5daafa72d390cb7a03a598d1b56aaae2d7c86575b0eedea344b9a3ef5c2d0628ae04211e0bee393640cff095cc5072f854e08e8e5132c82453fb6850b68a23c1ff03c03941469c1588653847553197219e6ac1d0dcb091c9a934f6d4d6cecfdd82a87a0ef0ad0a3f266754bcd791", @generic="6a38cf0538fe6f5dfb7fc782326ec55cb9772d20af9e8b6b28f2726a4d72f0096fd3834250f01aac2e4953113ba6c70fa3d2622ae09faea4cf810dbc394d7c1f985fac40e0fb0cacf5c85e365de807fc05f309b232582f7de76f83ec0b34ea79d74b99c0a3dcc3de53b3f454f6dc93548ecca071b5231a97340447456eb757d059b3caa3f9279d01c3c1eb522561a2a365023386314da6ccd474bb674115765fc55624d5344667585da85bdd566aa2eb55fb3fc8dd58ae2b8d1ebbe447a4cd656aaa8f28a87e62d606dac04dfaec688cdb6280c4db81386a26d2e29bf704bce6cb6cac82f99688bca5898fb52b7898", @typed={0xc, 0x65, @u64=0x6}, @typed={0xc, 0x1e, @u64=0x2}]}]}, 0x3c8}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) rename(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='./file0\x00') r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x101000, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x6) close(r0) r4 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x0) ioctl$KVM_X86_SETUP_MCE(r4, 0x4008ae9c, &(0x7f0000000680)={0x6, 0x1, 0x2c955c65}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) 15:10:26 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000080)) 15:10:26 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x8, 0x2001) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) 15:10:26 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) 15:10:26 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc0285628, &(0x7f0000000000)={0x800000000000003, {0x1}}) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f00000000c0)={0x0, 0x1000, 0x4, &(0x7f0000000080)=0x10001}) 15:10:26 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x430800, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000000000000e90a0040000000000400000000000000f70a0000009b00000400000000000000b8020000000000000000000001000000470900000000000004000000000000000c0b0000"]) 15:10:26 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) fgetxattr(r0, &(0x7f0000000040)=@known='trusted.overlay.nlink\x00', &(0x7f0000000080)=""/44, 0x2c) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) 15:10:26 executing program 2: r0 = epoll_create1(0x10080000) r1 = epoll_create1(0x0) close(r0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) 15:10:26 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x0, 0x0) r3 = userfaultfd(0x0) mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x3000021, 0x40000000000031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000009fe8)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) r4 = fcntl$getown(r1, 0x9) ptrace(0x4208, r4) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) [ 269.647220] audit: type=1804 audit(1565190626.629:94): pid=14731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir525748567/syzkaller.UwknhR/175/file0/file0" dev="loop3" ino=220 res=1 15:10:26 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc0285628, &(0x7f0000000000)={0x800000000000003, {0x1}}) getitimer(0x1, &(0x7f0000000040)) 15:10:26 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r1) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) 15:10:26 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x80000) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000200)='/proc/capi/capi20\x00', 0x8100, 0x0) close(r0) r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="8800020028dd7f140c58c2430fe01be9f148018fa6365a24660178285be4ceefac4647f8feb4c814a0e712b2b5d7c9362bb300c283d630eb423496e923f42b6ee3528db45fd594484aed6b", @ANYRES16=r3, @ANYBLOB="090427bd7000fbdbdf2515000000100007000c00040003000000000000000c0000070000020004000200580007000c00030001000080000000000c00040001000000ab16cf2213986e76d0275aaf840100000008000100fbffffff080002008000000008000100080000000c000300be000000000000000c00040002000000000000000c000400ea53c2c3d8a060b75288335179d083a25cfa4cdcc9749744519342d3b997253925901e820c1dd1c1567fe29a6ffc63ac19c710930ae1a04d2b37e40ae1b1a055d9142f680cfdfa25dc1f1ad85b65dc06a9fcd524855524888cfbacf01f"], 0x88}, 0x1, 0x0, 0x0, 0x80}, 0x4) syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x80000001, 0x20000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) 15:10:26 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00000005c0)=""/96, &(0x7f0000000640)=0x60) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) close(r1) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000780)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000180)) getsockopt$bt_BT_SNDMTU(r3, 0x112, 0xc, &(0x7f0000000040)=0x20, &(0x7f0000000080)=0x2) 15:10:26 executing program 3: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xfff, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r1, 0x1, 0x0, 0x369e5d84) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280), 0x12) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f00000003c0)='./file1\x00', 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000680)=@assoc_value={0x0, 0xdf}, &(0x7f00000006c0)=0x8) sendmsg$inet_sctp(r0, &(0x7f0000000780)={&(0x7f0000000100)=@in6={0xa, 0x4e24, 0x5, @mcast2, 0xa0}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000001c0)="34e03246e2ef7378f90813fa1ed44f9a1a85281bb94a10fcca3ceb07525cc51dadfc1cca41dcb9f77d0ba962b394285f99f2d66c0212c9822d7a4af7fb410b1e2777cd2aae2a0f1427a11791e418d187bf0944caf9fbf6e6ea1489085657e35813106b9b6d79ecac97a4516b13698bf391e12588b8527f15d463c031aaf6721a48cec883162d2222d05c6abe9a05", 0x8e}, {&(0x7f0000000340)="e10b57c4881cb23b65f2b30ac2d165940aabd24311d509380ef3b040fd157a20709186b94d533f99e4f21fd77ae67ee59a247ec3d9c481ef9ac5a86c94d4dbcd367301387c14b4730cd5e26b84f252469c1c35197a7e93e140fb4f7b3e1c95d2fc690716f64cfd91c06e28627c33b08e16d8de55e80d4c0fc3f5", 0x7a}, {&(0x7f00000002c0)="8cdd5228f70d5486419350965d45778aaf20b2b88e777fede2539336bc", 0x1d}, {&(0x7f0000000400)="8985994a6f4d4d50a489d01de7cbf6f4d558eb9630f2567999a943f80686a9c4a2b472bc98b3d535ea8860997e0763278d0775eb8b999fe2cd8699655ad059e62f848e7fdab852365da1af4be309013a1a65b1bdd80087e06a94e6d9de2e5301645c821a039b947dfbdcba5d6a58c93159f62be99fb2293f1c1c7b44a13fd1ef98877665bdc0da5180a6a633913235f442fc0ab79a12c0099cbcb36689507705e3613b919f4911501b03241bd50ed274dae01852dbf2653169b2ef32d4282ba3c27fc17f4583", 0xc6}, {&(0x7f0000000500)="e74d88caa47b7975ff9c0612b5b82ea13f5b414af13bd2effcc6eabc905be565c2b24de6a5f36c804f9b0995d640e582363d6f5ae413e4ea1c7afa80f15256e42fa9669a5f14c77d61e5520ff91f886e4c51c92c4cc7cbdc8bdf6666fe80449cb52c26f381c3e053d794a5037ba349ade49174949cdbb2c1a78c9d0745e4afdf97c3856dad2d1e04dc81aa4a1c950c2ddaad58ad969d299ab458882ada125062970e30d0d96f5e208cd35044b1c6a391237ed1ef4e719ab919006fb498ae20260730044df897b447ab97e1002b39c7fd184bf79ea59bc1e8d4de303f5365401e711f73973446ea202b3003", 0xeb}], 0x5, &(0x7f0000000700)=[@sndrcv={0x30, 0x84, 0x1, {0x6, 0x101, 0x200, 0x5, 0xffffffffffffa21b, 0x9, 0x1ff, 0xff, r3}}, @dstaddrv4={0x18, 0x84, 0x7, @broadcast}, @dstaddrv6={0x20, 0x84, 0x8, @rand_addr="c7474d860e0bcd535499f6421352c569"}], 0x68}, 0x4040010) 15:10:26 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(r2, 0x40305652, &(0x7f0000000040)={0x3, 0x5, 0x1, 0x3ff, 0xfffffffffffffffd, 0xffffffff, 0x8}) close(r0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000000c0)={0x1, 0x6, 0x4, 0x800, 0x800, 0xbd3, 0x1, 0x0, 0x0}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f00000001c0)={r3, @in6={{0xa, 0x4e24, 0x240000000, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xf861}}, 0x1, 0x140, 0x6, 0x1, 0x51dd}, &(0x7f0000000140)=0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) 15:10:26 executing program 1: r0 = epoll_create1(0x0) r1 = socket(0x1e, 0x5, 0x0) bind(r1, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) connect$tipc(r1, &(0x7f0000000000)=@name, 0x10) r2 = epoll_create1(0x0) close(r0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000780)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r0, &(0x7f0000000180)) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000040)=0x3, 0x4) [ 269.817407] QAT: Invalid ioctl [ 269.844683] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 269.857130] QAT: Invalid ioctl 15:10:26 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc0285628, &(0x7f0000000080)={0x800000000000003, {0x1}}) 15:10:26 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x8, 0x2000) ioctl$UI_SET_KEYBIT(r2, 0x40045565, 0x2f1) close(r0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xfffffd1e, 0x0, 0x229}}], 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/rt6_stats\x00') preadv(r3, &(0x7f00000017c0), 0x333, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) 15:10:26 executing program 2: r0 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x2, 0x800) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x6, @rand_addr="7d7647b05badda6016a94a261c4c0fd2", 0xdc22}, 0x1c) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) close(r1) ioctl$RTC_UIE_OFF(r0, 0x7004) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000780)) 15:10:26 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x80100, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000007c0)={0x0, 0x1000, "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"}, &(0x7f0000000040)=0x1008) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000000c0)={r1, 0x7, 0x2}, &(0x7f0000000100)=0x8) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) close(r2) openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x0, 0x0) fsync(r0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000780)) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000180)) [ 269.868114] FAT-fs (loop3): Filesystem has been set read-only 15:10:27 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x0) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000040)={0x0, 0x100000000}, 0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) 15:10:27 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x100, 0x10800) ioctl$VIDIOC_G_CROP(r0, 0xc0285628, &(0x7f0000000000)={0x800000000000003, {0x1}}) 15:10:27 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x40000, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f00000000c0)=0x9, 0xffffff26) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) ioctl$KVM_DIRTY_TLB(r2, 0x4010aeaa, &(0x7f0000000080)={0xab04, 0x97}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) 15:10:27 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="5600000001dea59eb67c8f99071c205b45495aa8c5e185d47870fed51afd8a3a95f80502f10860708228a3131db67e9c192af4fad8c115da938622f7a31effcf1963798643ae4046f001f54695ebd495568c319a000000000000"], &(0x7f00000000c0)=0x5e) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000100)={r3, 0xca1}, 0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) ioctl$VIDIOC_G_STD(r2, 0x80085617, &(0x7f00000001c0)=0x0) ioctl$VIDIOC_S_STD(r2, 0x40085618, &(0x7f0000000200)=r4) write$FUSE_INTERRUPT(r2, &(0x7f0000000140)={0x10, 0x0, 0x8}, 0x10) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) 15:10:27 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) timerfd_create(0xf, 0x80800) close(r0) r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000180)) [ 270.365996] audit: type=1804 audit(1565190627.349:95): pid=14800 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir525748567/syzkaller.UwknhR/176/file0/file0" dev="loop3" ino=222 res=1 15:10:27 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000040)={0xf0d, 0x7f, 0x1, 0x0, 0x0, [{r2, 0x0, 0x3}]}) 15:10:27 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc0285628, &(0x7f0000000000)={0x800000000000003, {0x1}}) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r2, 0x0, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x4044851) 15:10:27 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000000c0)=0x8000) close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000080)={0x1, 0x100000000, 0x9, 0x9, 0x8, 0x6, 0x2}, 0xc) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r0, &(0x7f0000000180)) 15:10:27 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f0000000040)={0x0, 0x1000}) 15:10:27 executing program 3: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xfff, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000340)={&(0x7f0000000100), 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x54, r2, 0x601, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_DST={0x14, 0x1, @mcast1}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x4}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x1, 0x343f, 0x7, 0x200]}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x8881}, 0x40) fallocate(r1, 0x1, 0x0, 0x369e5d84) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280), 0x12) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file1\x00', 0x0) 15:10:27 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x3, 0x400000) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000100)=0x5, 0x4) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r3, 0x40086408, &(0x7f0000000040)={0x81, 0x8}) openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) 15:10:27 executing program 2: r0 = epoll_create1(0x2006) r1 = epoll_create1(0x0) close(r0) r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x23, 0x0) socket$pppoe(0x18, 0x1, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rfkill\x00', 0x801fd, 0x0) ioctl$NBD_DO_IT(r2, 0xab03) utime(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x3}) ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000040)) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x8002, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) 15:10:27 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0xa93107ddc8fcee7c) close(r0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) 15:10:27 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000000240), 0x1) r1 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0xd, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x10000, 0x0) setsockopt$RDS_FREE_MR(r2, 0x114, 0x3, &(0x7f0000000180)={{0x8, 0x3}}, 0x10) ioctl$VIDIOC_G_CROP(r1, 0xc0285628, &(0x7f0000000000)={0x800000000000003, {0x1}}) ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x8905, &(0x7f00000001c0)) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x50000, 0x0) accept4$tipc(r3, &(0x7f0000000080), &(0x7f0000000200)=0x10, 0x0) [ 270.569490] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF 15:10:27 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) fcntl$getownex(r2, 0x10, &(0x7f0000000040)={0x0, 0x0}) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f00000000c0)={'HL\x00'}, &(0x7f0000000100)=0x1e) sched_getaffinity(r3, 0x8, &(0x7f0000000080)) 15:10:27 executing program 5: r0 = epoll_create1(0x0) ioctl$int_out(r0, 0x2, &(0x7f0000000000)) r1 = epoll_create1(0x0) close(r0) openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000780)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) 15:10:27 executing program 2: r0 = epoll_create1(0x0) epoll_create1(0x80000) close(r0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x200000, 0x0) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x7ff) r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000040)={0x100000000}) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000080)) [ 270.649086] FAT-fs (loop3): Filesystem has been set read-only 15:10:27 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000000080), &(0x7f00000000c0)=0x30) close(r0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) 15:10:27 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x80000) close(r0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000000040)={0xfffffffffffffffd}) socket$inet6(0xa, 0x803, 0x6be) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) 15:10:27 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0xd, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000600)=ANY=[], 0xfec8) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$TCSETXW(0xffffffffffffffff, 0x5435, 0x0) recvmmsg(r2, &(0x7f0000007e00)=[{{&(0x7f0000001240)=@alg, 0x80, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xa7}, {&(0x7f00000023c0)=""/49, 0x31}], 0x2, &(0x7f0000004780)=""/245, 0xf5}}], 0x1, 0x0, &(0x7f0000008000)={0x0, 0x989680}) ioctl$VIDIOC_G_CROP(r0, 0xc0285628, &(0x7f0000000000)={0x800000000000003, {0x1}}) 15:10:27 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) [ 271.109240] audit: type=1804 audit(1565190628.089:96): pid=14870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir525748567/syzkaller.UwknhR/177/file0/file0" dev="loop3" ino=224 res=1 15:10:28 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000040)={0x0, 0x5ea4, 0x6, 0x4, 0x3c2a7a2b, 0x46, 0x6, 0x40, {0x0, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xff, 0x8, 0xd78b, 0x81, 0x4}}, &(0x7f0000000100)=0xb0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f00000001c0)={r3, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x25}}}, [0x6, 0x10000, 0x101, 0x9, 0x400, 0x7fff, 0x636e, 0x5, 0x5, 0x8, 0x4, 0x1, 0xfb5, 0x5, 0x3bc9]}, &(0x7f0000000140)=0x100) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) 15:10:28 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) syz_open_dev$rtc(&(0x7f0000000040)='/dev/rtc#\x00', 0x7f, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) ioctl$UI_END_FF_UPLOAD(r2, 0x406855c9, &(0x7f0000000100)={0xc, 0xc9, {0x55, 0x40, 0x80000001, {0x6}, {0x8000, 0x3f}, @cond=[{0x800, 0xfffffffffffffffb, 0x3, 0x2, 0x8}, {0x7fffffff, 0x8, 0x3, 0x10001, 0x1, 0x6}]}, {0x56, 0x2, 0x6, {0x1d40, 0x3}, {0x2, 0x4}, @period={0x5a, 0x2, 0x1, 0x26a8, 0x8, {0x7d51, 0x0, 0x1, 0xba}, 0x7, &(0x7f00000000c0)=[0x3, 0x7cb, 0x100, 0x4, 0x0, 0x1, 0xac11]}}}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000000000)={0x1}) 15:10:28 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000200)={0x3, r1}) io_setup(0x8, &(0x7f0000000100)=0x0) io_destroy(r2) r3 = epoll_create1(0x80000) r4 = epoll_create1(0x0) close(r4) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000780)) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f00000000c0)={0x80000000}) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={0x0, 0x100000001}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000140)={r6, 0x7, 0x0, 0x2}, 0x10) 15:10:28 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) r4 = getpgrp(0x0) r5 = syz_open_procfs(r4, &(0x7f0000000180)='net/ip6_tables{names\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[]}, 0x0) preadv(r5, &(0x7f00000017c0), 0x1fe, 0x400000000000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) 15:10:28 executing program 3: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xfff, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r1, 0x1, 0x0, 0x369e5d84) ioctl$VIDIOC_S_FBUF(r0, 0x4030560b, &(0x7f00000001c0)={0x4, 0x8, &(0x7f0000000100), {0x8, 0x400, 0x77727757, 0x1, 0x5, 0xcf8, 0x0, 0x7}}) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280), 0x12) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x200000000000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0x0, r0, 0x0) creat(&(0x7f00000003c0)='./file1\x00', 0x0) 15:10:28 executing program 0: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000140)=0x14, 0x800) r2 = shmget(0x2, 0x2000, 0xf41ad89eb398f7b8, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_INFO(r2, 0x3, &(0x7f0000000240)=""/130) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xc000009}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@ipv6_deladdr={0x40, 0x15, 0x0, 0x70bd2b, 0x25dfdbfc, {0xa, 0x0, 0x68, 0x0, r1}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr="2cd05a504467cddc67a35ce08f30d347"}, @IFA_ADDRESS={0x14, 0x1, @rand_addr="910e8415ba6d4c0b96b4409f0b046f5c"}]}, 0x40}, 0x1, 0x0, 0x0, 0x841}, 0x1) r3 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_G_CROP(r3, 0xc0285628, &(0x7f0000000000)={0x800000000000003, {0x1}}) 15:10:28 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = add_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f00000000c0)="4093dc265f8e7afd48656ec2e22a1a3682d9bf", 0x13, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000140)='cifs.idmap\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)='/dev/audio\x00', 0xfffffffffffffff8) keyctl$instantiate(0xc, r2, &(0x7f0000000240)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643a2f6465762f617564696f00203030303030303030303030303030090030303036207300a0bf49cc78f0171eb44170e38170df42f524ba841eb1c63a4a188a2863043429e7c52664e736030475d940517074ee7720ce3d5303bbc1609a0e6c97ded4f7c52e60093f69d140dbc38a8edf47908efe75b88c1be834b577ddf6a4a2ad47093e93c046f95362f954886433e8c6a14457dc20b25352373acf16a29cebe16917cef6ae64803045c873fb"], 0x39, r3) close(r0) openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) 15:10:28 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0xd, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000080)=""/121) ioctl$VIDIOC_G_CROP(r0, 0xc0285628, &(0x7f0000000000)={0x800000000000003, {0x1}}) 15:10:28 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000080)={0x0, 0x1, 0xfffffffffffffffc, 0x101, 0x3}) close(r0) r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x0) read$FUSE(r2, &(0x7f00000007c0), 0xffffffffffffff8c) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000040)=0x10001) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) 15:10:28 executing program 4: r0 = epoll_create1(0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x40, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) r2 = epoll_create1(0x0) close(r0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000780)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r0, &(0x7f0000000180)) [ 271.317056] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF 15:10:28 executing program 1: r0 = epoll_create1(0x0) fcntl$notify(r0, 0x402, 0x20) r1 = epoll_create1(0x0) close(r0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) 15:10:28 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) msgget$private(0x0, 0x90) close(r0) openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x0, 0x0) r2 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f00000000c0)="49ed92ab5a95b028f594f73278deee48f6ea8681b6ea85966a39f45434b723c600680729f7823cd01e356c6434c1bd14ea92b67c9809931a05123363859a8502b495fede1fa4df0a376a5d5b0377407c0086cc4f4b40", 0x56, 0xfffffffffffffffc) r3 = add_key(&(0x7f0000000140)='id_resolver\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)="61ae664e37443322bf74e2bc9dd292e8e04403c48b58dccbc62bdcd04728cc27bd71cf1215371a98dbb4", 0x2a, 0xfffffffffffffffd) r4 = request_key(&(0x7f0000000240)='asymmetric\x00', &(0x7f0000000500)={'syz', 0x0}, &(0x7f00000002c0)='/dev/audio\x00', 0xfffffffffffffff8) keyctl$dh_compute(0x17, &(0x7f0000000300)={r2, r3, r4}, &(0x7f0000000340)=""/7, 0x7, &(0x7f00000004c0)={&(0x7f0000000380)={'sha1-avx2\x00'}, &(0x7f00000003c0)="84ca7b2d655ab5a30c9e503383ba5184e0f8565eb786355cb339e6c8a8310aa854f4b587a1cfeec3f71641c206b4e2adef6f98b264fd3e1db56aeee95655ed3fd4f4ab7117ced00c80c1ff2533932e44a81c84cc2b6acbefe4b2e0ca9441b6f1a4afeb54da4650b09eacd5395e9b11978af7765aa2e44923526ef1f8f8eb0afe157e2c217d52b358d5f2755f05d1c38bee876b90265236ec8ef2e4f62323862a040a9054bba1926e440a1da25f15474d94a58d83e776094c4e711e544c117da808ae49ff4d1547bfdf196328a343f0cd3c1d009c748243c55751ed7730e88a2e16f478272fe82c10ba2b2a40ea7477790d", 0xf1}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) [ 271.394530] FAT-fs (loop3): Filesystem has been set read-only 15:10:28 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0xd, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x80000001, 0x80001) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4008af14, &(0x7f0000000080)={0x3, 0x1}) ioctl$VIDIOC_G_CROP(r0, 0xc0285628, &(0x7f0000000000)={0x800000000000003, {0x1}}) 15:10:28 executing program 1: r0 = epoll_create1(0x0) fstatfs(r0, &(0x7f0000000040)=""/72) r1 = epoll_create1(0x0) close(r0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) 15:10:28 executing program 2: r0 = epoll_create1(0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x2, 0x422000) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000080)=[0x9, 0x5]) ioctl$KVM_GET_CPUID2(r1, 0xc008ae91, &(0x7f0000000140)) r2 = epoll_create1(0x0) close(r0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000780)) 15:10:28 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) close(r1) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000780)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000180)) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000080)) 15:10:28 executing program 3: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xfff, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r1, 0x1, 0x0, 0x369e5d84) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000016c0)='./file0\x00', &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ntfs(&(0x7f0000000100)='ntfs\x00', &(0x7f00000001c0)='./file2\x00', 0x1, 0x5, &(0x7f00000015c0)=[{&(0x7f0000000400)="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", 0x1000, 0x7f}, {&(0x7f0000001400)="731d915ff0c7bfa167a4e9520f9b8c98cd0b0b133d783c16fe994106a94f48d05f517d72fed361caf4ef3f07c5ac14b3bb51904190fc9f7dbd96f387dc6d18d485a07dbdf4683a13931e02398e6043b94bf4c6f9f9b56e0b51b21b260a18b4a07388fdde57bdccec31c452884e1fa5d84674c8afb7d4b42a25897e9ddd93497baf8394e105509926308b33d165deeb5ba55c44bdc1f0db9ffa80abf3e7ac47cae767749f69d4299c0a035033d3738d21591b66057dce683930007a1e310ca5a88f7a7bd03ac7bcb9700e4b19f1b792e1e866317318f3a44b30b59eb441e51e", 0xdf, 0xfff}, {&(0x7f0000000200)="0b6b994e1609a90003136cb0b91049e94258dcd011fa791736457a0d84bf832692280b46371e9030969578c2dbf3e0b6b6e1db5e0865839ed6989d9899dec3782c3c565312c2", 0x46, 0x4}, {&(0x7f0000001500)="558bae1a863bcf92cd221362001cd98d611b1d73b2a75b6c7ca0f7e94a7614011ee6bc0b7e318a2a9063f82573818d63fc5828a524e4875cb0410d7b9331497e9cf558c0af910e2ab7130ef6844d3b576f7243f24b550bbbcb2b66e62816c16a9d1372b0f342cee00b201b8ba43a5cd082c8415fe2768f545bb9211372644653e3f2479bcf424343bbbcf7005c28ebabdfa8af13e4e498fe50f8b8b1ed34daa7a23d00a72b2c6b05a836ac151c06f80595a4d5ea5d2c6e626a", 0xb9, 0xdf8e}, {&(0x7f0000000340)="30be8ecfb486bfbe84e752d168a6277ab54aa9bc47495981e7120c698c1d84459e63fc72cb746f70b4eb406578ee054166d2073187e20110346a6559efe496a147fcb1e288ccdb45bf2f7d2541989dce48ef06b9c1ca34aa390c32fea49368561c71cd4f6a5b14147b", 0x69, 0x8}], 0x40, &(0x7f0000001780)={[{@errors_recover='errors=recover'}, {@gid={'gid', 0x3d, r2}}, {@umask={'umask', 0x3d, 0xffffffff7fffffff}}, {@dmask={'dmask', 0x3d, 0x7f}}, {@show_sys_files_no='show_sys_files=no'}, {@show_sys_files_no='show_sys_files=no'}, {@show_sys_files_no='show_sys_files=no'}, {@dmask={'dmask', 0x3d, 0x567}}], [{@fowner_gt={'fowner>', r3}}, {@context={'context', 0x3d, 'user_u'}}]}) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280), 0x12) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file1\x00', 0x0) 15:10:28 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0) close(r0) close(r1) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000040)) ioctl$TIOCNXCL(r1, 0x540d) write$cgroup_type(r1, &(0x7f0000000080)='threaded\x00', 0xfffffc61) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x2000012e}], 0x1, 0x0, 0xd01}, 0x3f00) close(r1) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000280)={0xffffffffffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f0000000300)={0xf, 0x8, 0xfa00, {r2, 0x8}}, 0x10) r3 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x1, 0xffffffffbff7fffd) ioctl$VIDIOC_G_CROP(r3, 0xc0285628, &(0x7f0000000000)={0x800000000000003, {0x1}}) 15:10:28 executing program 4: r0 = epoll_create1(0x80000) r1 = epoll_create1(0x0) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x3ca01, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='cubic\x00', 0x6) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000000c0)={0x0, r0, 0x3, 0x9, 0x7, 0x4}) close(r0) r3 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x0) r4 = socket$inet(0x2, 0x3, 0x1) getsockopt(r4, 0xff, 0x1, 0x0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f00000001c0)={{0xa, 0x4e23, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x400}, {0xa, 0x4e20, 0x8, @rand_addr="a303d0d9449bf68f228907fd3eed65ee", 0x8000}, 0x7fff, [0x7, 0x8, 0xffffffff, 0x2, 0x3, 0xff, 0x4, 0x9]}, 0x5c) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) r5 = inotify_init() accept4$alg(r5, 0x0, 0x0, 0x800) 15:10:28 executing program 2: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000080)=0x400000009, 0x4) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) close(r1) r3 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x4, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000280)=ANY=[@ANYRES32=0x0, @ANYBLOB="680000006351138abb7c9df7343034e83be5cc56589b9f67322302e5c69534221d79d479eefe6e39fec15ac6cfde7f20554c51f92d7ab8de5c6b4b7d184dec489d04ef5b7b59b53960f86a583f5682cad9daf77b804946c109c19a9f22d6d3afa7c6b01acdfe50b2524f052b9d38ae7c92a52495fbec362d8bd98be0e5776979c42547099de7b02f07d622e058b63f428e5d"], &(0x7f0000000100)=0x70) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000240)={r4, 0x80000000}, 0x8) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000140)={0xfff, 0x3, 0x1, r3}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000780)) ioctl$TIOCGDEV(r3, 0x80045432, &(0x7f00000000c0)) ioctl$KDGKBSENT(r3, 0x4b48, &(0x7f0000000000)={0x80000000, 0x9, 0x8}) 15:10:28 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x20000001}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000040)={0x0, 0x80000, r2}) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000140)={0x8, &(0x7f0000000100)=[{0x0}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f00000001c0)={r4, &(0x7f0000000180)=""/5}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200)={0x40000000}) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000080)={r3}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f00000000c0)={0x2018}) 15:10:28 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x800, 0x0) close(r1) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000000)) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f00000000c0)=0x296b, 0x8) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)={0xfffffffffffffffc}) [ 271.831011] audit: type=1804 audit(1565190628.809:97): pid=14939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir525748567/syzkaller.UwknhR/178/file0/file0" dev="loop3" ino=226 res=1 15:10:28 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_mount_image$bfs(&(0x7f0000000040)='bfs\x00', &(0x7f0000000080)='./file0\x00', 0x401, 0x7, &(0x7f0000000540)=[{&(0x7f00000000c0)="be76b3445b1dc3389a5959c70fe289785ec70d856454d3f5e31c28d8837dec7dbb299f2ccaa6b022154d311fa3c123604a9794804710157e8d2d07452c51f11d33824e1e8b2be354583fb0aaa659912f41ed401333a0590674eb48ebf0e34a5d911781e1020ced1aee4f9aed90bea41eaa5621997e892584cb87ea00edf076850a0d8980d897", 0x86, 0x81}, {&(0x7f00000001c0)="c88a36ce6fe856822eb896b9ff900bb1fa449c5cb5bcd9c89de59088db4d59960bd7605c70ff3cec1f26882e72c0a0c583d9151d2c88ba0345fd489886d19456dacda2ac560570fab3de3c9dbd1ca69764ac3cda3b9595a203aa840a4e0f850a3d21786bfd8049e17d53bbd3ae485b28f7a26fe57e3c48c80d8b0cb53d1811f9ede1bde08d3b675c20a108540fec1f758f8e739e0771818ae89998cf439d98856cd6", 0xa2, 0x9}, {&(0x7f0000000280)="66c9e1ebb007343797bd1f096c520a382470e8559c728d1818dcdebf05d0e74c9c73ed3e81314d90bffcee13114a79acf2ec2e72b736", 0x36, 0x80}, {&(0x7f0000000600)="ca686763da86e8d84e914d991198a555205aabb52c817546d0ed15cf7196b5b26af18ae93ed93fb40a661878574b968794dd821534f54d0a629ca575098c0459a001740a41f0797db5886f7c1f2b2e6ab1476c94b132f6a9a4ff2a62a1eb6e7500578bf7539e311a760dbae93a3469f43615b67b82c6fe952cfcc593154419b1fb83d8a1b71d65e0f63d5e4e2852876634ef766e6224e771082b83a6103f718312b056015b54ef6990fddc4f3e2a1a2b5825a2a32d1b174f451ade795c0f28c22858e6e49066", 0xc6, 0xfffffffffffffffa}, {&(0x7f00000003c0)="723bf592c403364b6d90fa31f3a2b2c576648f55d51d237299f94b8fcc203adcc90982a6f63afd210aaaac57cc825368e43f5dc91bc5b1efa3b3d63bcaee10a4dcc3db189a87069baa4823e626cde021ae23e34d61f1e27d73927a533b345a9d79090baaa23590986a6ff5f8a62cacf7a49cfc80256d05173fab9b791e877716791e47ef9b629a009598280baa08fba950b33639326d81a2a97cb4b289aa3b38e3b3d10df16b814041f9a5addb29d291b798adcccfb50b8d77f9d9c9587b50ef0cb6968c0bb3ef11b371b75799cf4d653fa78cbc1ee92e03ea6a4b1d48", 0xdd, 0x7ba3}, {&(0x7f00000004c0), 0x0, 0x4d}, {&(0x7f00000004c0)="cd0994c260bfd3b37cfc82f4190ef1b22c6dad6334f416719e83d87050475abef08fb16572", 0x25, 0x473b}], 0x400, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000340)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) 15:10:28 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x2001, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r2, 0x10f, 0x84, &(0x7f00000000c0), &(0x7f0000000100)=0x4) close(r0) r3 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000000780)) fremovexattr(r3, &(0x7f0000000040)=@random={'btrfs.', '/dev/midi#\x00'}) 15:10:28 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x20000, 0x0) ioctl$RTC_RD_TIME(r2, 0x80247009, &(0x7f0000000100)) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000000040)={0x3, 0x1, 0x0, 0x9, 0x3721fb3e, 0x4}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, &(0x7f0000000000)=0x1b50, 0x4) 15:10:28 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x0, r0) close(r0) r3 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000000)={0x7fffffff, 0x0, 0x3, 0x9}) ioctl$DRM_IOCTL_AGP_UNBIND(r3, 0x40106437, &(0x7f0000000080)={r4, 0x6}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) 15:10:29 executing program 2: r0 = epoll_create1(0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x400, 0x0) timerfd_gettime(r1, &(0x7f0000000080)) r2 = epoll_create1(0x0) close(r0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000780)) [ 272.127731] BFS-fs: bfs_fill_super(): No BFS filesystem on loop1 (magic=00000000) 15:10:29 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) ioctl$VIDIOC_G_EDID(r2, 0xc0285628, &(0x7f0000000080)={0x0, 0x3f, 0x1000000000, [], &(0x7f0000000040)=0x4}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) 15:10:29 executing program 3: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xfff, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="bf5f0acd399181c12b48cca73c46cf3a2a41c86e8bdafc9149f004db0959dac7e8e0359f559550141baa343f2a89c2a3e50baa2b47b96391015cd6e0da258a65203aa1d628f5d47bb661efd9d3fdb74cd325458e9290b755b405ac5cd6a22803330ac41ebae01b14ec4f2b7c6bb45b52a00736f0023b9613ba8b88cfefb270e98d6e2adaf5aa19010133d90179254790f282ca25916162a9ece09af2a98d3d855abc7776303c53d9a5a955ffc9a1c8219dc8193f93173a3d50c870079c1308bf85a88e817084cf4924dc52cdcf7d60543f541460e281413fae19cb8afb7d78", 0xdf, 0x0, &(0x7f00000002c0)={0xa, 0x4e20, 0x7, @ipv4={[], [], @broadcast}, 0xffffffffffffff27}, 0x1c) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r2, 0x1, 0x0, 0x369e5d84) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(r1, &(0x7f0000000100)='systemcpusetwlan0\x00', 0x2) creat(&(0x7f00000003c0)='./file1\x00', 0x0) 15:10:29 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) 15:10:29 executing program 2: r0 = epoll_create1(0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x800000013f}}, 0x20) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000240)={0x3, 0x8, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast1, 0x800000000}, r2, 0x8000}}, 0x48) r3 = epoll_create1(0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x400801, 0x0) ioctl$KDGKBDIACR(r4, 0x4b4a, &(0x7f0000000100)=""/26) close(r0) r5 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000780)) getsockopt$IP6T_SO_GET_REVISION_TARGET(r5, 0x29, 0x45, &(0x7f0000000040)={'ipvs\x00'}, &(0x7f0000000080)=0x1e) 15:10:29 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video35\x00', 0x2, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0xc0, 0x3) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) 15:10:29 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = getpgrp(0x0) r3 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x7f, 0x7, 0x8, 0x1f, 0x0, 0x100000000, 0x2000, 0x8, 0x3, 0x4, 0x8, 0x2, 0x1ff, 0x23a, 0x2, 0x0, 0xfffffffffffffffe, 0x3, 0x101, 0xfffffffffffffffc, 0x2, 0xffffffffffffffff, 0x5, 0x7f, 0x9, 0x8001, 0xffff, 0x1, 0x55, 0x0, 0x7, 0x6cb5, 0x1, 0x4, 0x8, 0x10001, 0x0, 0x66, 0x7, @perf_config_ext={0x1}, 0x2200, 0x3b3dc95f, 0xffff, 0x7, 0x100000000, 0x5, 0x7}, r2, 0xb, r3, 0x2) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x5, 0xffffffffffffbff8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) 15:10:29 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0xd, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000140)='/dev/midi#\x00', 0x7, 0x9c000) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000180)={&(0x7f00000000c0)='./file0\x00', r1}, 0x10) ioctl$VIDIOC_G_CROP(r0, 0xc0285628, &(0x7f0000000000)={0x800000000000003, {0x1}}) ioctl$NBD_DISCONNECT(r1, 0xab08) recvmsg(r1, &(0x7f0000000340)={&(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000240)=""/137, 0x89}], 0x1}, 0x100) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000380)=0x95c, 0x4) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuset.effective_mems\x00', 0x0, 0x0) ioctl$PPPIOCGIDLE(r3, 0x8010743f, &(0x7f0000000080)) [ 272.580276] audit: type=1804 audit(1565190629.559:98): pid=14969 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir525748567/syzkaller.UwknhR/179/file0/file0" dev="loop3" ino=228 res=1 15:10:29 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r1) r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x2813ad9026858af7}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f00000000c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), r3, 0x2}}, 0x18) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) close(r1) 15:10:29 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc0285628, &(0x7f0000000000)={0x800000000000003, {0x1}}) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) ioctl$VIDIOC_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f0000000140)={0x0, @reserved}) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x4000010, r1, 0x0) 15:10:29 executing program 5: r0 = epoll_create1(0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000040)={0x0, r1}) r2 = epoll_create1(0x0) close(r0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x100, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r3, 0x5382, &(0x7f0000000100)) openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000780)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r0, &(0x7f0000000180)) 15:10:29 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) ioctl$TIOCMBIC(r2, 0x5417, &(0x7f0000000040)=0x3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) ioctl$SG_GET_TIMEOUT(r2, 0x2202, 0x0) 15:10:29 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r1) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x800, 0x0) fchmodat(r2, &(0x7f0000000080)='./file0\x00', 0x1) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x10000000}) [ 272.792901] QAT: Invalid ioctl 15:10:29 executing program 2: r0 = epoll_create1(0x0) fsetxattr$security_evm(r0, 0xffffffffffffffff, &(0x7f00000000c0)=@v2={0x5, 0x0, 0xd, 0xfffffffffffffff8, 0x98, "f401176640949694b1843db15f0ea974be8d15a81a825e20e52b601d40e9534f58bd23a912a30a89442556c649ab762fd5236998d188973a2b6afc7ad5a5b90f5845bd9b1c115fc38d343e9ad3eea90a5089539fc7893695ee0b0a40de105b6cfcddb6a6fd9acbce6c3292e5180a835bdae42a92ae89f1a630c769ed97799943c9944d6bbbd72a37a2c59673f0eeea0103ad67f2152ca380"}, 0xa2, 0x3) r1 = epoll_create1(0x0) r2 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x2, 0x2000) setsockopt$RXRPC_SECURITY_KEYRING(r2, 0x110, 0x2, &(0x7f0000000080)='vboxnet0\x00', 0x9) close(r0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) [ 272.934213] audit: type=1804 audit(1565190629.919:99): pid=15040 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir525748567/syzkaller.UwknhR/180/file0/file0" dev="sda1" ino=17025 res=1 15:10:30 executing program 3: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xfff, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/create\x00', 0x2, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r1, 0x1, 0x0, 0x369e5d84) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280), 0x12) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file1\x00', 0x0) 15:10:30 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0xd, 0x3) r1 = open(&(0x7f0000000740)='./file0\x00', 0x222800, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000780)=@sack_info={0x0, 0x100000001}, &(0x7f00000007c0)=0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000800)={r2, @in6={{0xa, 0x4e24, 0x3, @empty, 0x6}}, 0xc2a, 0x6, 0xc78, 0x7, 0x4}, 0x98) ioctl$VIDIOC_G_CROP(r0, 0xc0285628, &(0x7f0000000000)={0x800000000000003, {0x1}}) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0xc4) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000540)={0x4, 0x0, [{0x2000, 0x9f, &(0x7f0000000300)=""/159}, {0x5000, 0xa2, &(0x7f00000003c0)=""/162}, {0x3000, 0x70, &(0x7f0000000480)=""/112}, {0x2, 0x3d, &(0x7f0000000500)=""/61}]}) r4 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x0, 0x400000) r5 = socket$pptp(0x18, 0x1, 0x2) r6 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x20, 0x80000) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000240)={r5, r6, 0x3, 0xfc, &(0x7f0000000140)="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", 0x3, 0x0, 0x3, 0xfdb, 0x9, 0x3, 0x0, 'syz1\x00'}) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000640)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(r4, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r7, 0x102, 0x70bd2b, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40810}, 0x4000000) 15:10:30 executing program 5: r0 = epoll_create1(0x80000) r1 = epoll_create1(0x0) close(r0) openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) 15:10:30 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f0000000040)=0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) 15:10:30 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, &(0x7f0000000040)=0xb1) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) 15:10:30 executing program 2: r0 = epoll_create1(0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f00000000c0), &(0x7f0000000140)=0x68) r2 = epoll_create1(0x0) prctl$PR_SET_ENDIAN(0x14, 0x2) close(r0) r3 = syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0x8000000008001, 0x4) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000780)) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r3, 0x114, 0xa, &(0x7f0000000040)={0x1, "ea"}, 0x2) creat(&(0x7f0000000080)='./file0\x00', 0x120) [ 272.988553] audit: type=1400 audit(1565190629.959:100): avc: denied { module_load } for pid=15030 comm="syz-executor.3" path="/root/syzkaller-testdir525748567/syzkaller.UwknhR/180/file0/file0" dev="sda1" ino=17025 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=system permissive=1 15:10:30 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x1000, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/icmp\x00') preadv(r4, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000000)=0x0) ptrace$peek(0x1, r5, &(0x7f0000000040)) 15:10:30 executing program 2: r0 = epoll_create1(0x0) close(r0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000780)) getsockopt$inet_buf(r1, 0x0, 0x2f, &(0x7f00000000c0)=""/69, &(0x7f0000000140)=0x45) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000040)=0x8, &(0x7f0000000080)=0x4) 15:10:30 executing program 1: r0 = epoll_create1(0x200000000) r1 = epoll_create1(0x0) close(r0) r2 = socket$kcm(0x2, 0x2, 0x73) bind(r2, &(0x7f0000000180)=@in={0x2, 0x0, @remote}, 0x80) r3 = dup(r2) ioctl$sock_rose_SIOCDELRT(r3, 0x890c, &(0x7f0000000640)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @null]}) r4 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @rand_addr=0x2}, 0x10) io_setup(0xfffffffffffffffe, &(0x7f0000000040)=0x0) r6 = syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x0, 0x2) r7 = syz_open_dev$dspn(&(0x7f0000000380)='/dev/dsp#\x00', 0x2, 0xa0200) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/autofs\x00', 0x2200, 0x0) r9 = syz_open_dev$audion(&(0x7f0000000500)='/dev/audio#\x00', 0x4, 0x381002) r10 = syz_open_dev$media(&(0x7f0000000580)='/dev/media#\x00', 0x10001, 0x80000) io_submit(r5, 0x6, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb, 0x8, r1, &(0x7f0000000080)="ab5997", 0x3, 0xec, 0x0, 0x2}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7, 0x2, r0, &(0x7f0000000100)="d01c24ac8e6a7680e99c9c40430f0c529c7b040a22d7f01ce467bea35be3bf0f4426be69df78c2160a5d27a2aeb0454e1b525af667dce22698a3cec0f3df061fc89632037c91b61026b1507d9f34469d", 0x50, 0x8e97, 0x0, 0x1, r6}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x6, r4, &(0x7f0000000280)="c4acd515dcc2427772f2dca5eea82fd1a59ecb13d383b9f5b098bb3c1e71592a274f571b77776bd70334076c9cba9503c16b9153fb753a222136ce1aabae6087c9ee098ba04bd0c08fdcb85c2137591292cbfcca504285dc4fc4e2be6fd3d1dc618963cda4fddc98baf9f7f7479186c8af30eb4405ead229190615cc9b9de71aea053353b307b5798173919c546c304d3901b874a32ecf624b2f062a2167d273c5a16041f321bb227f4f11510177d3ddbcfdafcfb21aee751f575127b2751bd29db743a8d03e", 0xc6, 0x100000000, 0x0, 0x1, r7}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x1, r0, &(0x7f00000007c0)="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", 0x1000, 0x1, 0x0, 0x3, r8}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x3, 0x9, r1, &(0x7f0000000480)="3c9377dbaf515725405854e12f1de476d8538a536e8a226af27547f210bf0516339679252b54456a5e494fde22283ea1055d8e90d163a39d1dab5b94f9554f7dad2b9791e4fcab7725fc2c11a1eccb2b0da4a472be", 0x55, 0xfc72, 0x0, 0x2, r9}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0xffff, r0, &(0x7f00000017c0)="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", 0x1000, 0x401, 0x0, 0x1, r10}]) ioctl$SNDRV_TIMER_IOCTL_TREAD(r4, 0x40045402, &(0x7f00000006c0)=0x1) creat(&(0x7f0000000700)='./file0\x00', 0x109) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x400000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) 15:10:30 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x628, 0x70bd28, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40000) close(r0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) 15:10:30 executing program 0: r0 = dup(0xffffffffffffffff) openat$cgroup_ro(r0, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r1 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_G_CROP(r1, 0xc0285628, &(0x7f0000000000)={0x800000000000003, {0x1}}) 15:10:30 executing program 2: r0 = epoll_create1(0x0) epoll_create1(0x0) close(r0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000180)={0xa0000006}) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f0000000040)) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r1, 0xc0045520, &(0x7f0000000080)=0x7) ioctl$VT_RELDISP(r1, 0x5605) 15:10:30 executing program 3: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xfff, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x81) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r1, 0x1, 0x0, 0x369e5d84) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280), 0x12) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file1\x00', 0x0) 15:10:30 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0xc0000, 0x0) close(r0) openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x10900, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f00000000c0)={0x40000000}) 15:10:30 executing program 4: r0 = epoll_create1(0x0) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, &(0x7f0000000200)) r2 = epoll_create1(0x0) close(r0) r3 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000040)={0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x2c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000000c0)={r4, @in6={{0xa, 0x4e24, 0x6, @ipv4={[], [], @loopback}, 0x4}}, 0x6, 0x7ff, 0x9, 0x0, 0x40}, 0x98) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000780)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r0, &(0x7f0000000180)) 15:10:30 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x10800, 0x0) setsockopt$inet6_int(r2, 0x29, 0x13, &(0x7f0000000080)=0x7, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) 15:10:30 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc0285628, &(0x7f0000000000)={0x800000000000003, {0x1}}) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x9, 0x40000) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xf8, r2, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x401}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e23}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x87ab}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6erspan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fffffff}, @IPVS_CMD_ATTR_SERVICE={0x70, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x14}}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1ff}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x7e}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4004}, 0x800) 15:10:30 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000080)=0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f00000000c0)=r3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) openat$cgroup_ro(r2, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) pkey_alloc(0x0, 0x0) 15:10:30 executing program 1: r0 = epoll_create1(0x800) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x200, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f00000000c0)={'veth1_to_bridge\x00', {0x2, 0x4e24, @remote}}) r2 = epoll_create1(0x0) close(r0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000780)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r0, &(0x7f0000000180)) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000040)) 15:10:30 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x0, 0x0) read(r0, &(0x7f00000001c0)=""/249, 0xf9) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) 15:10:30 executing program 0: ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc0285628, &(0x7f0000000000)={0x800000000000003}) [ 273.558116] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 273.587624] FAT-fs (loop3): Filesystem has been set read-only 15:10:30 executing program 2: r0 = epoll_create1(0x100000000080000) pipe(&(0x7f0000000040)={0xffffffffffffffff}) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f00000000c0)=0xa, 0x4) r2 = epoll_create1(0x800) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000080)={0x3, 0x1, 0x0, 0x0, 0x3e}) close(r0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000780)) 15:10:30 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x208000, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f00000001c0)={0x6f7eb7c69f14af7b, 0x0, [], @bt={0x0, 0x81, 0x0, 0x1, 0x3, 0x4, 0x4}}) r1 = epoll_create1(0x80000) r2 = epoll_create1(0x0) close(r1) r3 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x0) fadvise64(r0, 0x0, 0x5, 0x5) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000780)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000180)) sendto$inet6(r3, &(0x7f0000000040)="b37637003b509b61564f79a53954bc", 0xf, 0x800, &(0x7f0000000080)={0xa, 0x4e23, 0x9, @remote, 0x7}, 0x1c) syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00') 15:10:30 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x3, 0x10000) ioctl$VIDIOC_G_CROP(r0, 0xc0285628, &(0x7f0000000000)={0x800000000000003, {0x1}}) [ 273.961035] audit: type=1804 audit(1565190630.949:101): pid=15158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir525748567/syzkaller.UwknhR/182/file0/file0" dev="loop3" ino=232 res=1 15:10:31 executing program 3: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x1001, 0x1) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r2, 0x1, 0x0, 0x369e5d84) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280), 0x12) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = creat(&(0x7f00000003c0)='./file1\x00', 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r3, &(0x7f00000000c0)={0x10}) 15:10:31 executing program 1: r0 = epoll_create1(0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) ioctl$PPPIOCCONNECT(r1, 0x4004743a, &(0x7f00000000c0)=0x2) r2 = epoll_create1(0x0) close(r0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f00000001c0)=0x10000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000780)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r0, &(0x7f0000000180)) mq_timedreceive(r3, &(0x7f00000007c0)=""/4096, 0x1000, 0x6, &(0x7f0000000040)) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r4, 0x300, 0x70bd2c, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r1, 0x10f, 0x84, &(0x7f0000000140), &(0x7f0000000340)=0x4) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) 15:10:31 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000040)={0x0, 0x5ea4, 0x6, 0x4, 0x3c2a7a2b, 0x46, 0x6, 0x40, {0x0, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xff, 0x8, 0xd78b, 0x81, 0x4}}, &(0x7f0000000100)=0xb0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f00000001c0)={r3, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x25}}}, [0x6, 0x10000, 0x101, 0x9, 0x400, 0x7fff, 0x636e, 0x5, 0x5, 0x8, 0x4, 0x1, 0xfb5, 0x5, 0x3bc9]}, &(0x7f0000000140)=0x100) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) 15:10:31 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) r4 = getpgrp(0x0) r5 = syz_open_procfs(r4, &(0x7f0000000180)='net/ip6_tables{names\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[]}, 0x0) preadv(r5, &(0x7f00000017c0), 0x1fe, 0x400000000000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) 15:10:31 executing program 4: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x40, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000080)={0x0, 0x1, {0xc, 0x21, 0x15, 0x13, 0x7, 0x8, 0x4, 0x102}}) r1 = epoll_create1(0x0) r2 = epoll_create1(0x80000) close(r1) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000780)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000180)) 15:10:31 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0xd, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000600)=ANY=[], 0xfec8) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$TCSETXW(0xffffffffffffffff, 0x5435, 0x0) recvmmsg(r2, &(0x7f0000007e00)=[{{&(0x7f0000001240)=@alg, 0x80, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xa7}, {&(0x7f00000023c0)=""/49, 0x31}], 0x2, &(0x7f0000004780)=""/245, 0xf5}}], 0x1, 0x0, &(0x7f0000008000)={0x0, 0x989680}) ioctl$VIDIOC_G_CROP(r0, 0xc0285628, &(0x7f0000000000)={0x800000000000003, {0x1}}) 15:10:31 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0xd, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000600)=ANY=[], 0xfec8) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$TCSETXW(0xffffffffffffffff, 0x5435, 0x0) recvmmsg(r2, &(0x7f0000007e00)=[{{&(0x7f0000001240)=@alg, 0x80, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xa7}, {&(0x7f00000023c0)=""/49, 0x31}], 0x2, &(0x7f0000004780)=""/245, 0xf5}}], 0x1, 0x0, &(0x7f0000008000)={0x0, 0x989680}) ioctl$VIDIOC_G_CROP(r0, 0xc0285628, &(0x7f0000000000)={0x800000000000003, {0x1}}) [ 274.187528] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF 15:10:31 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0x40a85323, &(0x7f00000000c0)={{0x10000, 0xef4}, 'port1\x00', 0x4, 0x20000, 0x6, 0x3, 0x80, 0x3, 0x4, 0x0, 0x3, 0x3ff}) openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) 15:10:31 executing program 4: r0 = epoll_create1(0x80000) r1 = epoll_create1(0xfffffffffffffffe) close(r0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) 15:10:31 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) ioctl$SG_GET_KEEP_ORPHAN(r2, 0x2288, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) [ 274.229493] FAT-fs (loop3): Filesystem has been set read-only 15:10:31 executing program 0: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xfff, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r1, 0x1, 0x0, 0x369e5d84) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280), 0x12) execve(&(0x7f0000000100)='./file1\x00', &(0x7f0000000500)=[&(0x7f00000001c0)='/dev/input/mouse#\x00', &(0x7f0000000200)='vfat\x00', &(0x7f0000000240)='vfat\x00', &(0x7f00000002c0)='vfat\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='lo\x00', &(0x7f0000000400)='\x00', &(0x7f0000000440)='\x00', &(0x7f0000000480)='\x00', &(0x7f00000004c0)='keyring&\x00'], &(0x7f00000006c0)=[&(0x7f0000000580)='\x00', &(0x7f00000005c0)='vfat\x00', &(0x7f0000000600)='#$^\x00', &(0x7f0000000640)='ppp0\x00', &(0x7f0000000680)='/dev/input/mouse#\x00']) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file1\x00', 0x0) 15:10:31 executing program 1: r0 = epoll_create1(0x0) close(0xffffffffffffffff) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x2000)=nil, 0x9, 0x5, 0x4f, &(0x7f0000ffc000/0x4000)=nil, 0x2}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000780)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, 0xffffffffffffffff, &(0x7f0000000180)) [ 274.778228] audit: type=1804 audit(1565190631.759:102): pid=15211 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir525748567/syzkaller.UwknhR/183/file0/file0" dev="loop3" ino=234 res=1 15:10:31 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000000040)={0x0, 0x9, 0x19}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) 15:10:31 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, &(0x7f0000000040)=0x80000000) 15:10:31 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x40000, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x8) close(r0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x0, 0x0) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x80, 0x0) setsockopt$inet_dccp_int(r4, 0x21, 0x1f, &(0x7f0000000040)=0x4e35, 0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f00000001c0)={0x0, 0xf2, "5db614d88c058131b138634bd815764aed1e2a6bd4cbaa577fddd10053a905b36b7b5a8d0284d30dfe40111fe9cf22935cdc4f37351a07b33417dc11df70f1c6956617873e61380d23925152a527b1f39abde8976273fb1309cef60b59d374bdc58444c9cb82c1e01e09778c299ce8bbb0d667c9f85956a11a1fd849f37e7194acf222b1c94520c8aafcc4a1cdb88c3081de1e4ec1971b041d4d796c7fee841582dc9a7e5999d3ab8237376a3924c2ed4391fa82ef0e5cb50fcebddb92d8df261f13a977d4bbbc45f27c0c01d9f92418143939c4c1d59d8756bdaf76016d92855b806decca1bf0662fd1896ddd9aa6af9dd4"}, &(0x7f00000002c0)=0xfa) setsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000300)=@assoc_value={r5, 0xdb}, 0x8) 15:10:31 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x3fffd, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x80000013}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)={0x10000000000001d}) 15:10:31 executing program 3: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1, 0x4b, &(0x7f0000000140), 0x8000, 0x0) r0 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xfff, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400002}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x30, r3, 0x18, 0x70bd25, 0x25dfdbff, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x9, 0x10001, 0x8, 0x6}}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x40000) fallocate(r2, 0x10, 0x0, 0x369e5d84) setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='trusted.overlay.opaque\x00', &(0x7f0000000400)='y\x00', 0x2, 0x1) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280), 0x12) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, 0x0, 0xb2) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PPPIOCCONNECT(r1, 0x4004743a, &(0x7f0000000100)=0x2) creat(&(0x7f00000003c0)='./file1\x00', 0x0) 15:10:31 executing program 0: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xfff, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r1, 0x1, 0x0, 0x369e5d84) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280), 0x12) execve(&(0x7f0000000100)='./file1\x00', &(0x7f0000000500)=[&(0x7f00000001c0)='/dev/input/mouse#\x00', &(0x7f0000000200)='vfat\x00', &(0x7f0000000240)='vfat\x00', &(0x7f00000002c0)='vfat\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='lo\x00', &(0x7f0000000400)='\x00', &(0x7f0000000440)='\x00', &(0x7f0000000480)='\x00', &(0x7f00000004c0)='keyring&\x00'], &(0x7f00000006c0)=[&(0x7f0000000580)='\x00', &(0x7f00000005c0)='vfat\x00', &(0x7f0000000600)='#$^\x00', &(0x7f0000000640)='ppp0\x00', &(0x7f0000000680)='/dev/input/mouse#\x00']) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file1\x00', 0x0) [ 274.874791] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 274.895164] FAT-fs (loop0): Filesystem has been set read-only 15:10:31 executing program 1: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x1001, 0x1) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r2, 0x1, 0x0, 0x369e5d84) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280), 0x12) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = creat(&(0x7f00000003c0)='./file1\x00', 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r3, &(0x7f00000000c0)={0x10}) 15:10:32 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0xd, 0x40) r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x8, 0xc4400) accept$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) getresgid(&(0x7f0000000140)=0x0, &(0x7f0000000180), &(0x7f00000001c0)) r3 = getgid() getgroups(0x2, &(0x7f0000000200)=[r2, r3]) ioctl$VIDIOC_G_CROP(r0, 0xc0285628, &(0x7f0000000000)={0x800000000000003, {0x1}}) 15:10:32 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x0, 0x0) close(r1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000000)={0x0, 0xb997, 0x20}, &(0x7f0000000040)=0xc) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f00000001c0)={r3, @in={{0x2, 0x4e24, @local}}, [0x6, 0x6, 0x6, 0x5, 0x1, 0x80000001, 0x0, 0xf8ad, 0x81, 0xfffffffffffffff9, 0x4, 0x79dcf4f, 0x3, 0x9, 0x8c]}, &(0x7f00000000c0)=0x100) [ 274.988865] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 275.049236] FAT-fs (loop3): Filesystem has been set read-only 15:10:32 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000040)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r2, 0xc1105518, &(0x7f00000001c0)={{0x9, 0x6, 0x1, 0x9, 'syz0\x00'}, 0x3, 0x40, 0x2, r3, 0x2, 0xffffffffffffffff, 'syz0\x00', &(0x7f0000000080)=['/dev/midi#\x00', 'trustedcgroup-\x00'], 0x1a, [], [0x7, 0x10000, 0x3ff, 0x4]}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) 15:10:32 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r1) openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) socket$pptp(0x18, 0x1, 0x2) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) 15:10:32 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0xd, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x100, 0x2000) getpeername$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f00000001c0)={@mcast2, @mcast2, @mcast2, 0x6, 0x5, 0x2, 0x400, 0x7fffffff, 0x280020, r3}) connect$nfc_llcp(r1, &(0x7f0000000040)={0x27, 0x1, 0x1, 0x3, 0x8000, 0x7, "75caffcfc0b63e85f540393451b09be4365785955bd5715f4484c3a09d83c848415da089a99334639dbd43c1392b892a6f7cae0bd3bddee524d38a26077339", 0x12}, 0x60) ioctl$VIDIOC_G_CROP(r0, 0xc0285628, &(0x7f0000000000)={0x800000000000003, {0x1}}) 15:10:32 executing program 4: r0 = epoll_create1(0x80000) r1 = epoll_create1(0x0) close(r0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000040)={{{@in=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@multicast1}}, &(0x7f0000000140)=0xe8) getresgid(&(0x7f00000001c0)=0x0, &(0x7f0000000200), &(0x7f0000000240)) write$FUSE_ATTR(r1, &(0x7f0000000280)={0x78, 0xfffffffffffffff5, 0x6, {0x3, 0x0, 0x0, {0x3, 0x9, 0x5, 0x1, 0x4, 0x84a, 0x3, 0x1, 0x9, 0x1, 0xfffffffffffffff9, r2, r3, 0x7f, 0x4}}}, 0x78) r4 = syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x2, 0x3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) setrlimit(0xd, &(0x7f0000000180)={0x0, 0x100000001}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r4, &(0x7f0000000000)={0x80002004}) 15:10:32 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0xfffffffffffffffd}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) 15:10:32 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='memory.events\x00', 0x26e1, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000240)={0x2, 0x70, 0x9, 0x0, 0x1000, 0x5, 0x0, 0xfffffffffffffffd, 0x544, 0x0, 0x5, 0x7fff, 0x0, 0x0, 0x0, 0x8, 0x6, 0x0, 0xcad, 0x4, 0x0, 0x0, 0x7, 0x0, 0x7a, 0x4, 0x0, 0x0, 0x8, 0x0, 0x2, 0x8, 0x7, 0x0, 0xfffffffffffffff9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x5, 0x3, 0x0, 0xa92, 0x1ff}, 0xffffffffffffffff, 0x0, r0, 0x8) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000c00), 0x91) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0xfffffffffffffe46) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) getsockname$ax25(r0, &(0x7f0000000300)={{0x3, @rose}, [@bcast, @netrom, @rose, @rose, @default, @rose, @remote, @null]}, &(0x7f0000000080)=0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000002c0)='{nodev+em0ppp0trustedbdeveth0\x00') write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000000100)=""/20, &(0x7f0000000380)=0x14) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000000), 0x10000000d) perf_event_open(&(0x7f00000003c0)={0x0, 0x70, 0x6ec, 0x0, 0x6, 0x0, 0x0, 0xffffffffffffff7f, 0x0, 0x9, 0x0, 0x5, 0x4, 0x0, 0x0, 0x4, 0xfffffffffffff801, 0x7, 0x8a, 0x0, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0xbd1, 0x2, 0xe6, 0x3, 0x7, 0x0, 0x401, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8001, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x1) ioctl$TUNSETFILTEREBPF(r1, 0x6609, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x2f4) write$rfkill(r1, &(0x7f0000000440)={0x7, 0x7, 0x2, 0x0, 0x1}, 0x8) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="000000000000ecce2edcc49c05000000000000000000000000000000b0951be10800001000"/49]}) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xfff, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r3, 0x1, 0x0, 0x369e5d84) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280), 0x12) 15:10:32 executing program 3: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xfff, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f00000001c0)={0x76, 0x3, 'client0\x00', 0xffffffff80000000, "af6b027457024bd3", "5e32531a5f90e0c0c09f49e1d0944f9624463cceb91b985656e7954201a0b77f", 0x5, 0x5}) fallocate(r1, 0x1, 0x0, 0x369e5d84) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280), 0x12) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file1\x00', 0x0) 15:10:32 executing program 5: r0 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x1, 0x20c00) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000000c0)=r0, 0x4) epoll_create1(0x80000) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) close(r2) openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000780)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000000)={0x40000004}) 15:10:32 executing program 0: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xfff, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r1, 0x1, 0x0, 0x369e5d84) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280), 0x12) execve(&(0x7f0000000100)='./file1\x00', &(0x7f0000000500)=[&(0x7f00000001c0)='/dev/input/mouse#\x00', &(0x7f0000000200)='vfat\x00', &(0x7f0000000240)='vfat\x00', &(0x7f00000002c0)='vfat\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='lo\x00', &(0x7f0000000400)='\x00', &(0x7f0000000440)='\x00', &(0x7f0000000480)='\x00', &(0x7f00000004c0)='keyring&\x00'], &(0x7f00000006c0)=[&(0x7f0000000580)='\x00', &(0x7f00000005c0)='vfat\x00', &(0x7f0000000600)='#$^\x00', &(0x7f0000000640)='ppp0\x00', &(0x7f0000000680)='/dev/input/mouse#\x00']) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file1\x00', 0x0) 15:10:33 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='memory.events\x00', 0x26e1, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000240)={0x2, 0x70, 0x9, 0x0, 0x1000, 0x5, 0x0, 0xfffffffffffffffd, 0x544, 0x0, 0x5, 0x7fff, 0x0, 0x0, 0x0, 0x8, 0x6, 0x0, 0xcad, 0x4, 0x0, 0x0, 0x7, 0x0, 0x7a, 0x4, 0x0, 0x0, 0x8, 0x0, 0x2, 0x8, 0x7, 0x0, 0xfffffffffffffff9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x5, 0x3, 0x0, 0xa92, 0x1ff}, 0xffffffffffffffff, 0x0, r0, 0x8) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000c00), 0x91) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0xfffffffffffffe46) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) getsockname$ax25(r0, &(0x7f0000000300)={{0x3, @rose}, [@bcast, @netrom, @rose, @rose, @default, @rose, @remote, @null]}, &(0x7f0000000080)=0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000002c0)='{nodev+em0ppp0trustedbdeveth0\x00') write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000000100)=""/20, &(0x7f0000000380)=0x14) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000000), 0x10000000d) perf_event_open(&(0x7f00000003c0)={0x0, 0x70, 0x6ec, 0x0, 0x6, 0x0, 0x0, 0xffffffffffffff7f, 0x0, 0x9, 0x0, 0x5, 0x4, 0x0, 0x0, 0x4, 0xfffffffffffff801, 0x7, 0x8a, 0x0, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0xbd1, 0x2, 0xe6, 0x3, 0x7, 0x0, 0x401, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8001, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x1) ioctl$TUNSETFILTEREBPF(r1, 0x6609, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x2f4) write$rfkill(r1, &(0x7f0000000440)={0x7, 0x7, 0x2, 0x0, 0x1}, 0x8) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="000000000000ecce2edcc49c05000000000000000000000000000000b0951be10800001000"/49]}) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xfff, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r3, 0x1, 0x0, 0x369e5d84) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280), 0x12) 15:10:33 executing program 4: r0 = epoll_create1(0x80000) r1 = epoll_create1(0x0) close(r0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000040)={{{@in=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@multicast1}}, &(0x7f0000000140)=0xe8) getresgid(&(0x7f00000001c0)=0x0, &(0x7f0000000200), &(0x7f0000000240)) write$FUSE_ATTR(r1, &(0x7f0000000280)={0x78, 0xfffffffffffffff5, 0x6, {0x3, 0x0, 0x0, {0x3, 0x9, 0x5, 0x1, 0x4, 0x84a, 0x3, 0x1, 0x9, 0x1, 0xfffffffffffffff9, r2, r3, 0x7f, 0x4}}}, 0x78) r4 = syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x2, 0x3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) setrlimit(0xd, &(0x7f0000000180)={0x0, 0x100000001}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r4, &(0x7f0000000000)={0x80002004}) 15:10:33 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create1(0x80000) close(r0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) getsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000000)={0x1, 0x0, 0x10002, 0x78d}) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, &(0x7f0000000040)={0x4, r3, 0x10000, 0x6}) fsetxattr$security_smack_transmute(r1, &(0x7f0000000140)='security.SMACK64TRANSMUTE\x00', &(0x7f00000001c0)='TRUE', 0x4, 0x2) [ 276.053017] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 276.084518] FAT-fs (loop0): Filesystem has been set read-only [ 276.116124] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 276.133186] FAT-fs (loop1): Filesystem has been set read-only 15:10:33 executing program 4: r0 = epoll_create1(0x80000) r1 = epoll_create1(0x0) close(r0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000040)={{{@in=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@multicast1}}, &(0x7f0000000140)=0xe8) getresgid(&(0x7f00000001c0)=0x0, &(0x7f0000000200), &(0x7f0000000240)) write$FUSE_ATTR(r1, &(0x7f0000000280)={0x78, 0xfffffffffffffff5, 0x6, {0x3, 0x0, 0x0, {0x3, 0x9, 0x5, 0x1, 0x4, 0x84a, 0x3, 0x1, 0x9, 0x1, 0xfffffffffffffff9, r2, r3, 0x7f, 0x4}}}, 0x78) r4 = syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x2, 0x3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) setrlimit(0xd, &(0x7f0000000180)={0x0, 0x100000001}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r4, &(0x7f0000000000)={0x80002004}) 15:10:33 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create1(0x7fffd) close(r0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r2, 0xc008551c, &(0x7f0000000080)={0x80000001, 0x14, [0xcd, 0x80000001, 0x3f, 0x4, 0x5]}) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000100)='trusted.overlay.origin\x00', &(0x7f0000000140)='y\x00', 0x2, 0x1) getpeername$ax25(r2, &(0x7f0000000000)={{0x3, @null}, [@netrom, @netrom, @bcast, @rose, @rose, @remote, @default, @netrom]}, &(0x7f00000000c0)=0x48) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) ioctl$KIOCSOUND(r2, 0x4b2f, 0xfff) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x113240, 0x0) perf_event_open(&(0x7f0000000280)={0x4, 0x70, 0x8, 0x80000001, 0x80, 0x7, 0x0, 0xfffffffffffff500, 0x10008, 0xa, 0x7e, 0x4, 0x9, 0x4942, 0x7f, 0x1, 0xffffffffffffffc0, 0x200, 0x3, 0x5, 0x6, 0x8000, 0x3, 0x400, 0xffffffffffffffdf, 0x81, 0xfffffffffffffffe, 0x3, 0x6, 0x5, 0x3, 0x6, 0x100000000, 0x7d4, 0x9, 0x2, 0x3f, 0x714, 0x0, 0x1000, 0x7, @perf_bp={&(0x7f0000000200), 0x4}, 0x100a0, 0xfd1, 0xe49e, 0x5, 0x8, 0xf7c93a5, 0x3}, 0x0, 0x7, r0, 0xa) 15:10:33 executing program 5: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r1 = epoll_create1(0x0) epoll_create1(0x80000) r2 = epoll_create1(0x0) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x44, r3, 0x408, 0x70bd26, 0x25dfdbfc, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @FOU_ATTR_AF={0x8, 0x2, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) close(r1) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000780)) write$P9_RLERROR(r4, &(0x7f0000000040)={0x9, 0x7, 0x1}, 0x9) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000180)) 15:10:33 executing program 4: r0 = epoll_create1(0x80000) r1 = epoll_create1(0x0) close(r0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000040)={{{@in=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@multicast1}}, &(0x7f0000000140)=0xe8) getresgid(&(0x7f00000001c0)=0x0, &(0x7f0000000200), &(0x7f0000000240)) write$FUSE_ATTR(r1, &(0x7f0000000280)={0x78, 0xfffffffffffffff5, 0x6, {0x3, 0x0, 0x0, {0x3, 0x9, 0x5, 0x1, 0x4, 0x84a, 0x3, 0x1, 0x9, 0x1, 0xfffffffffffffff9, r2, r3, 0x7f, 0x4}}}, 0x78) r4 = syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x2, 0x3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) setrlimit(0xd, &(0x7f0000000180)={0x0, 0x100000001}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r4, &(0x7f0000000000)={0x80002004}) [ 276.480351] audit: type=1804 audit(1565190633.459:103): pid=15302 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir525748567/syzkaller.UwknhR/185/file0/file0" dev="loop3" ino=242 res=1 15:10:33 executing program 5: r0 = epoll_create1(0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r1 = epoll_create1(0x0) close(r0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0xfffffffffffffffe}) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e24, @remote}}, [0x101, 0x94d8, 0x800, 0xde, 0xe83, 0x3, 0x0, 0x2000, 0x9, 0x20, 0x5ca, 0x4ca, 0x3ff, 0xdf91, 0x6]}, &(0x7f0000000000)=0x100) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x400001, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000040)={r3, 0x1, 0x9}, &(0x7f00000000c0)=0x8) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) [ 276.574092] audit: type=1804 audit(1565190633.459:104): pid=15310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir525748567/syzkaller.UwknhR/185/file0/file0" dev="loop3" ino=242 res=1 15:10:33 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='memory.events\x00', 0x26e1, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000240)={0x2, 0x70, 0x9, 0x0, 0x1000, 0x5, 0x0, 0xfffffffffffffffd, 0x544, 0x0, 0x5, 0x7fff, 0x0, 0x0, 0x0, 0x8, 0x6, 0x0, 0xcad, 0x4, 0x0, 0x0, 0x7, 0x0, 0x7a, 0x4, 0x0, 0x0, 0x8, 0x0, 0x2, 0x8, 0x7, 0x0, 0xfffffffffffffff9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x5, 0x3, 0x0, 0xa92, 0x1ff}, 0xffffffffffffffff, 0x0, r0, 0x8) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000c00), 0x91) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0xfffffffffffffe46) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) getsockname$ax25(r0, &(0x7f0000000300)={{0x3, @rose}, [@bcast, @netrom, @rose, @rose, @default, @rose, @remote, @null]}, &(0x7f0000000080)=0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000002c0)='{nodev+em0ppp0trustedbdeveth0\x00') write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000000100)=""/20, &(0x7f0000000380)=0x14) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000000), 0x10000000d) perf_event_open(&(0x7f00000003c0)={0x0, 0x70, 0x6ec, 0x0, 0x6, 0x0, 0x0, 0xffffffffffffff7f, 0x0, 0x9, 0x0, 0x5, 0x4, 0x0, 0x0, 0x4, 0xfffffffffffff801, 0x7, 0x8a, 0x0, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0xbd1, 0x2, 0xe6, 0x3, 0x7, 0x0, 0x401, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8001, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x1) ioctl$TUNSETFILTEREBPF(r1, 0x6609, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x2f4) write$rfkill(r1, &(0x7f0000000440)={0x7, 0x7, 0x2, 0x0, 0x1}, 0x8) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="000000000000ecce2edcc49c05000000000000000000000000000000b0951be10800001000"/49]}) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xfff, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r3, 0x1, 0x0, 0x369e5d84) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280), 0x12) 15:10:33 executing program 3: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fef8", 0xfffffffffffffe92}], 0x0, 0x0) syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xfff, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r1, 0x1, 0x0, 0x369e5d84) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280), 0x12) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file1\x00', 0x0) 15:10:33 executing program 4: r0 = epoll_create1(0x80000) r1 = epoll_create1(0x0) close(r0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000040)={{{@in=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@multicast1}}, &(0x7f0000000140)=0xe8) getresgid(&(0x7f00000001c0)=0x0, &(0x7f0000000200), &(0x7f0000000240)) write$FUSE_ATTR(r1, &(0x7f0000000280)={0x78, 0xfffffffffffffff5, 0x6, {0x3, 0x0, 0x0, {0x3, 0x9, 0x5, 0x1, 0x4, 0x84a, 0x3, 0x1, 0x9, 0x1, 0xfffffffffffffff9, r2, r3, 0x7f, 0x4}}}, 0x78) syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x2, 0x3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) setrlimit(0xd, &(0x7f0000000180)={0x0, 0x100000001}) [ 276.721359] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 276.791910] FAT-fs (loop2): Filesystem has been set read-only 15:10:34 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) 15:10:34 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x40100, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) 15:10:34 executing program 4: r0 = epoll_create1(0x80000) r1 = epoll_create1(0x0) close(r0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000040)={{{@in=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@multicast1}}, &(0x7f0000000140)=0xe8) getresgid(&(0x7f00000001c0)=0x0, &(0x7f0000000200), &(0x7f0000000240)) write$FUSE_ATTR(r1, &(0x7f0000000280)={0x78, 0xfffffffffffffff5, 0x6, {0x3, 0x0, 0x0, {0x3, 0x9, 0x5, 0x1, 0x4, 0x84a, 0x3, 0x1, 0x9, 0x1, 0xfffffffffffffff9, r2, r3, 0x7f, 0x4}}}, 0x78) syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x2, 0x3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) 15:10:34 executing program 1: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x0, &(0x7f0000000140), 0x0, 0x0) syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xfff, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r1, 0x1, 0x0, 0x369e5d84) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280), 0x12) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file1\x00', 0x0) [ 277.157851] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF 15:10:34 executing program 5: r0 = epoll_create1(0x400000080002) r1 = epoll_create1(0x0) close(r0) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x8200, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) 15:10:34 executing program 4: r0 = epoll_create1(0x80000) r1 = epoll_create1(0x0) close(r0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000040)={{{@in=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@multicast1}}, &(0x7f0000000140)=0xe8) getresgid(&(0x7f00000001c0)=0x0, &(0x7f0000000200), &(0x7f0000000240)) write$FUSE_ATTR(r1, &(0x7f0000000280)={0x78, 0xfffffffffffffff5, 0x6, {0x3, 0x0, 0x0, {0x3, 0x9, 0x5, 0x1, 0x4, 0x84a, 0x3, 0x1, 0x9, 0x1, 0xfffffffffffffff9, r2, r3, 0x7f, 0x4}}}, 0x78) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) [ 277.208126] FAT-fs (loop1): bogus number of reserved sectors [ 277.283920] FAT-fs (loop0): Filesystem has been set read-only [ 277.305614] FAT-fs (loop1): Can't find a valid FAT filesystem 15:10:34 executing program 5: r0 = epoll_create1(0x80000) r1 = epoll_create1(0x0) close(r0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000001c0)={{{@in6=@ipv4={[], [], @broadcast}, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@local}}, &(0x7f0000000000)=0xe8) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmsg$can_bcm(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x1d, r3}, 0x10, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="06000000000000001f00000000000000713e0294b79e3228b7caf355b4a538371ed4377c8ba47203a304b05e2c155ed4f323085ce271bc5d758d8b125149efdd913479fd462e97995abb985b8016550412eec0a69d047ff191a5469e69855c8f2f57fda1c88b30c1a774ce91bf6ca6675679d3de56b8b48fe1f53fea86ccca70fda239c48a7cbf3b9636d0536fb271eab89f2388b96df5c198f83e1a59033b2517d24ac55b3f954b0ccf738651", @ANYRES64=r4, @ANYRES64=r5/1000+30000, @ANYRES64=0x0, @ANYRES64=0x7530, @ANYBLOB="0000000001000000020000c007030000512a47e41cae37aa89f9e1041e6fc87f9bafe0a81567f67faa1b9c6ba2df764938bd5df5a0b53ac7c79f0db4bd43bfafd30b0743f6146d0a7f266a13fc73dcf4"], 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) 15:10:34 executing program 4: r0 = epoll_create1(0x80000) r1 = epoll_create1(0x0) close(r0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000040)={{{@in=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@multicast1}}, &(0x7f0000000140)=0xe8) getresgid(&(0x7f00000001c0)=0x0, &(0x7f0000000200), &(0x7f0000000240)) write$FUSE_ATTR(r1, &(0x7f0000000280)={0x78, 0xfffffffffffffff5, 0x6, {0x3, 0x0, 0x0, {0x3, 0x9, 0x5, 0x1, 0x4, 0x84a, 0x3, 0x1, 0x9, 0x1, 0xfffffffffffffff9, r2, r3, 0x7f, 0x4}}}, 0x78) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) [ 277.406644] audit: type=1804 audit(1565190634.389:105): pid=15373 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir525748567/syzkaller.UwknhR/186/file0" dev="sda1" ino=17293 res=1 15:10:34 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) clone(0x4002102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$overlay(0x400000, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='overlay\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66686c65312c776f726b6469723d2e2f66696c65312eaab3bf859bf16a29d9f333170c72fecd24dd0ee46cd8f059647140a4fafb2d45f54c674b823d7b104550986b2881978553b3a1460f4b4e60567454eddd1131cbc39ecfa39aaf5837c91c121ecc27e538c7a714a1e54d4cecfff2b95e41f7cadfd15f5f65a447e6234418ce1d975cd89f06eb183b7c1237fb6cc89f6cce42e780ad345b847d2e3ce8fd5b9983b7b98a1f516e7aac312498020e6bce1306609221f215d6c89a66dc8d1611f75b1ee7635878469e9c4eb5ac70b0a189bf0354766103c69ad86d50467597d97280692e1c729dc65a18447dd7bf868791eb8d98a7917b2821e107187cc7800e3cddaae88ce7ee53927955f540dd4cd1c67968786c1032244db3841055a94560240e2289fff1b669030003ad56a36fc54295b1"]) statfs(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=""/177) [ 277.636647] overlayfs: failed to resolve './file1.ª³¿…›ñj)Ùó3 rþÍ$ÝälØðYdq@¤úû-EõLgK‚={EP˜k(—…S³¡FKN`VtTíÝ1ËÞϣš¯X7ÉÌ'å8ǧ¡åMLìÿò¹^A÷ÊßÑ__e¤Gæ#DΗ؟ë;|7ûlÈŸlÎB瀭4[„}.<èý[™ƒ·¹ŠQnz¬1$˜kÎ`’!òÖÈšfÜ÷[çcXxFžœNµ¬p°¡‰¿TvaÆšØmPFu—Ùr€i.rÆZD}׿†‡‘똧‘{(!á|Ç€<ݪèŒçîS’yUõ@ÝLÑÆyhxl2$M³„U©E`$"‰ÿñ¶i': -36 15:10:34 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='memory.events\x00', 0x26e1, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000240)={0x2, 0x70, 0x9, 0x0, 0x1000, 0x5, 0x0, 0xfffffffffffffffd, 0x544, 0x0, 0x5, 0x7fff, 0x0, 0x0, 0x0, 0x8, 0x6, 0x0, 0xcad, 0x4, 0x0, 0x0, 0x7, 0x0, 0x7a, 0x4, 0x0, 0x0, 0x8, 0x0, 0x2, 0x8, 0x7, 0x0, 0xfffffffffffffff9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x5, 0x3, 0x0, 0xa92, 0x1ff}, 0xffffffffffffffff, 0x0, r0, 0x8) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000c00), 0x91) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0xfffffffffffffe46) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) getsockname$ax25(r0, &(0x7f0000000300)={{0x3, @rose}, [@bcast, @netrom, @rose, @rose, @default, @rose, @remote, @null]}, &(0x7f0000000080)=0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000002c0)='{nodev+em0ppp0trustedbdeveth0\x00') write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000000100)=""/20, &(0x7f0000000380)=0x14) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000000), 0x10000000d) perf_event_open(&(0x7f00000003c0)={0x0, 0x70, 0x6ec, 0x0, 0x6, 0x0, 0x0, 0xffffffffffffff7f, 0x0, 0x9, 0x0, 0x5, 0x4, 0x0, 0x0, 0x4, 0xfffffffffffff801, 0x7, 0x8a, 0x0, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0xbd1, 0x2, 0xe6, 0x3, 0x7, 0x0, 0x401, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8001, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x1) ioctl$TUNSETFILTEREBPF(r1, 0x6609, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x2f4) write$rfkill(r1, &(0x7f0000000440)={0x7, 0x7, 0x2, 0x0, 0x1}, 0x8) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="000000000000ecce2edcc49c05000000000000000000000000000000b0951be10800001000"/49]}) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xfff, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r3, 0x1, 0x0, 0x369e5d84) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280), 0x12) 15:10:34 executing program 3: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xfff, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r1, 0x1, 0x0, 0x369e5d84) fsetxattr$security_smack_entry(r0, &(0x7f0000000100)='security.SMACK64IPOUT\x00', &(0x7f00000001c0)='system,[\x00', 0x9, 0x1) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280), 0x12) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file1\x00', 0x0) 15:10:34 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x103, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f00000000c0)=0x7f, 0x4) close(r0) r3 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x8001, 0x44401) ioctl$RTC_IRQP_SET(r3, 0x4008700c, 0x1e0b) openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) 15:10:34 executing program 4: r0 = epoll_create1(0x80000) r1 = epoll_create1(0x0) close(r0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000040)={{{@in=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@multicast1}}, &(0x7f0000000140)=0xe8) getresgid(&(0x7f00000001c0)=0x0, &(0x7f0000000200), &(0x7f0000000240)) write$FUSE_ATTR(r1, &(0x7f0000000280)={0x78, 0xfffffffffffffff5, 0x6, {0x3, 0x0, 0x0, {0x3, 0x9, 0x5, 0x1, 0x4, 0x84a, 0x3, 0x1, 0x9, 0x1, 0xfffffffffffffff9, r2, r3, 0x7f, 0x4}}}, 0x78) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) 15:10:34 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000200)='./file0\x00', 0x16c) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = fanotify_init(0x0, 0x0) bind$vsock_dgram(r2, &(0x7f0000000040), 0x10) fanotify_mark(r4, 0x11, 0x2, r3, 0x0) fanotify_mark(r4, 0x52, 0x40000022, r3, 0x0) write$FUSE_NOTIFY_POLL(r3, &(0x7f0000000000)={0x18, 0x1, 0x0, {0x5}}, 0x18) 15:10:34 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x345, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @ip6ip6={{0xc, 0x1, 'ip6tnl\x00'}, {0x8, 0x2, [@tunl6_policy=[@tunl_policy=[@IFLA_IPTUN_COLLECT_METADATA={0x4}]]]}}}]}, 0xffffffffffffff85}, 0x1, 0x0, 0x0, 0x40}, 0x10) [ 277.820357] overlayfs: failed to resolve './file1.ª³¿…›ñj)Ùó3 rþÍ$ÝälØðYdq@¤úû-EõLgK‚={EP˜k(—…S³¡FKN`VtTíÝ1ËÞϣš¯X7ÉÌ'å8ǧ¡åMLìÿò¹^A÷ÊßÑ__e¤Gæ#DΗ؟ë;|7ûlÈŸlÎB瀭4[„}.<èý[™ƒ·¹ŠQnz¬1$˜kÎ`’!òÖÈšfÜ÷[çcXxFžœNµ¬p°¡‰¿TvaÆšØmPFu—Ùr€i.rÆZD}׿†‡‘똧‘{(!á|Ç€<ݪèŒçîS’yUõ@ÝLÑÆyhxl2$M³„U©E`$"‰ÿñ¶i': -36 15:10:34 executing program 4: r0 = epoll_create1(0x80000) r1 = epoll_create1(0x0) close(r0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000040)={{{@in=@remote, @in=@loopback}}, {{}, 0x0, @in=@multicast1}}, &(0x7f0000000140)=0xe8) getresgid(&(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x2, 0x3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) [ 277.964500] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF 15:10:35 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create1(0x80000) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x1, 0x10001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='vmnet0vmnet0posix_acl_accessvboxnet0\x00', r2}, 0x10) close(r0) openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) setxattr$security_smack_entry(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='security.SMACK64IPIN\x00', &(0x7f00000001c0)='vmnet0vmnet0posix_acl_accessvboxnet0\x00', 0x25, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) 15:10:35 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000040)=@ipx, 0xfffffffffffffce7, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_tables_targets\x00') ioctl$SIOCRSACCEPT(r0, 0x89e3) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x199, 0x0) 15:10:35 executing program 0: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x100) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={0x0, 0x80, 0x5502efcc}, &(0x7f0000000100)=0xc) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@sack_info={r1, 0x100000000000000, 0x7}, 0xc) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={r1, 0x6}, 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000280)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0}, &(0x7f0000000300)=0xc) setreuid(r2, r3) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x80, 0x0) fcntl$setlease(r4, 0x400, 0x2) [ 278.011979] FAT-fs (loop2): Filesystem has been set read-only 15:10:35 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0xfffffffffffffe00, 0x10040) ioctl$DRM_IOCTL_MODESET_CTL(r2, 0x40086408, &(0x7f00000000c0)={0x5, 0x3}) close(r0) openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0x1) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) 15:10:35 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x5, &(0x7f0000000000)={0x0, 0x19, 0x5}, &(0x7f00000000c0)=0x0) timer_delete(r0) r1 = syz_open_dev$mouse(&(0x7f0000000540)='/dev/input/mouse#\x00', 0xc6, 0x200) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) sendmmsg$inet(r1, &(0x7f0000001e80)=[{{&(0x7f0000000580)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10, &(0x7f00000018c0)=[{&(0x7f00000005c0)="8a5e0d8d1d33ae57592ea62079318ffda6dfbab79836e54a427a907831eb1cdfaa69563ddc706d15d00d8473ea174d50ff087c4dece4f346a81cc68e1152bd8afc88195ed61df4a21e4941572ce353550445dc4ced2cc5e88c041de17761b989b6712690c20e8ef4ad4cd4486d0fa16d892c9098bf1fa38a0535907c46cd20a60314e78abd13e61e5e52017e32460ab880e049f96d2ef127d600dc892f3158776b39070c666820757c8ebfbc8b7743a43362fdd8cac70ebc8b4d61a84699bc79e45724f89ca18bc362279b47caf4a9e68d85f9587fb25e7ae2f999c7c0a8b996cdc8", 0xe2}, {&(0x7f00000006c0)="b2be3b040849def75c73fce96f30b517a16559778853d847e5b3272aa260433797681b5f615c19d55172805f306bc6ff1cd5525a333ef6cf55575f6dbfa975cd21dc6fa06f661fed0ce30dd381a1dc39f32d4ba394a868837a70cf9258bc2c4921dcf1281803a7e93e555a4f8424f19ce63e5808b8e1c12c106043005ead91eef59a3e", 0x83}, {&(0x7f0000000780)="ae581460957706c384619cf99f9c9fc4889a86ab3dab1328cb3335b7404979df8ba5a7e760a8dd2192daa6596454351a52aa7d5ae8d780e8431143d086bee704d7ba71f5d34ca44fc501413e7801ee9070c3ad330bf5c93628b5508de04294fff610c7098f2fdaf8eb1fb4dfbfef91e0c939850f549192ef353b6119d104a33e7a85855462d73e6d1c90ebc120bf922c91da6a73925b75d843b73d6afbe9111ab15e", 0xa2}, {&(0x7f0000000840)="26da3afadd5be6cd211c96b046c48f5725a56d5a56c1b7e1bc67251755bf2f1440d044f5c638a0c2d7426d1a26cb5f470ff97b2615ba1b40d375b9685bb693ca428a1c74dc48032a917a4d2d1cf621dfb85d1241244a3e9886aed95af3bb0e0623ba1646c7d340ddb83462d49a74f40bfece449ff5ceb2caac2013af9fe8d7", 0x7f}, {&(0x7f00000008c0)="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", 0x1000}], 0x5, &(0x7f0000001b40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @local, @multicast1}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_retopts={{0x40, 0x0, 0x7, {[@lsrr={0x83, 0x27, 0x3ff, [@multicast1, @dev={0xac, 0x14, 0x14, 0x19}, @dev={0xac, 0x14, 0x14, 0xb}, @empty, @broadcast, @loopback, @loopback, @remote, @loopback]}, @ra={0x94, 0x6, 0x8000}, @generic={0x87, 0x2}]}}}], 0x78}}, {{&(0x7f0000001bc0)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000001e40)=[{&(0x7f0000001c00)="2c1413ee3c5b191e4c5f1859f36f049ac9657ec9eba7f956ec647fc5bec354888f10e776bc0b209ddf3dcc31e6fc20c83c930e7d7631996286770aaac3c65fe1481da1bc466671fc724148c2e1dce8041aebba00fa0efceda4fe36cf8834e7ac50424a3c4b668903a24360fab924620375153182b40c36c4137276b0bc6653b2a0e09f8761e45e412fffcc40f9148614d135a7b1dbe0eaeb29445d495e59feedf3646785ed62f8d098102e", 0xab}, {&(0x7f0000001cc0)="6f2901cdd3f146c3952929863df7fae8bae63c7a11d9ce687fd814734b4383917de48a5098ee87afd9314fce2b6bb954587aced536fa8226f8cdffcfb56b22b852a94939279a880e43d5a3240586421dacfba115ba772797885796851bfc685f5f6b18fa56e79e828ea9", 0x6a}, {&(0x7f0000001d40)="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", 0xfb}], 0x3}}], 0x2, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000500)='tls\x00', 0x4) r4 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f0000000140), &(0x7f0000000180)=0x4) r5 = socket$inet6(0xa, 0x5, 0x0) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f00000003c0)={0x4, 0x86b7, 0x1, {0xe, @win={{0x7, 0x1, 0x100000000000000, 0x80000000}, 0xb, 0x1, &(0x7f0000000240)={{0x3f, 0x1f67, 0x7e, 0x24c98d29}, &(0x7f0000000200)={{0x1474, 0x1, 0x8, 0x6a9}, &(0x7f00000001c0)={{0x4, 0x2, 0x80}}}}, 0x100000001, &(0x7f00000002c0)="8e75daf8f1f3d63785fb17bdde8dc49be4108f59814159b4b0fb35f7fde26fe7e05b2d029dc5879bd73d102163659a9780d5e47cf0aa5a67b4a1086d78bb5d9e91769dfedbee4f515ed0d9eb10a8f277b451199b9b3d89fb3b9a76979dbe73aafa28611a4002da0dab4fe9467e35d7c7502c4b13dd1fff08fa17d6a294961104fa3141c37ad43815bef4dad6588b7102b10621bbc75195d32adc85c5d28509b295688070d3b6f5a1c627173d342c2fb82df2ba1aabaa05693be2e266728ac045e1bdc4aba84071a59d94680e61838d2347fc72161f5e8b69130226c996909a915d865ecacbffb0989a99234e", 0x5}}}) setsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000280), 0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000001940)={0x0, @in6={{0xa, 0x4e20, 0x7fffffff, @loopback, 0x10}}}, &(0x7f0000001a00)=0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000001a40)={r6, 0x8}, 0x8) [ 278.496227] audit: type=1804 audit(1565190635.469:106): pid=15452 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir525748567/syzkaller.UwknhR/187/file0/file0" dev="loop3" ino=248 res=1 15:10:36 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r1, 0x89e8) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x2, &(0x7f0000000380)=[r3, r4]) ioctl$TIOCGPTPEER(r1, 0x5441, 0x9c44) connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 15:10:36 executing program 4: r0 = epoll_create1(0x80000) r1 = epoll_create1(0x0) close(r0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000040)={{{@in=@remote, @in=@loopback}}, {{}, 0x0, @in=@multicast1}}, &(0x7f0000000140)=0xe8) syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x2, 0x3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) 15:10:36 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0xfffffffffffffffc, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x7}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000340)={r3}, 0x8) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c010000", @ANYRES16=r4, @ANYBLOB="00042dbd7000fbdbdf25050000002000020004000400080002000200000004000400040004040014000700080001000900000008000100030000004c000700080001000500000008000100ff00000008000200040000000c00030020000000000000000c00040020000000000000000c00040008000000000000000c00030000000000010000002400020008000100ffffffff0400040008000100010000000400040008000100030000004000060008000100ff00000008000100d7d19affbfcf45eb22001000000800010000800000080001000000000008000100fdffffff00040002002400090008000200ff030000080002006e0c000008000200b20900"/271], 0x11c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040000) 15:10:36 executing program 2: syz_genetlink_get_family_id$tipc2(0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x5, @dev={[], 0x1c}, 'bridge0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x33b, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x105000, 0x0) ioctl$VIDIOC_S_MODULATOR(r1, 0x40445637, &(0x7f0000000080)={0x8, "c8278a8c35426fc0256b9e0aabae0a7b2da5f329e270adca92d5d94f1633fd65", 0x40, 0x12e, 0x1ff, 0x4, 0x2}) 15:10:36 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000040)=0x1f, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000359fd5)={@link_local, @empty=[0x1c008848, 0x0, 0x14, 0x0, 0x0, 0x8847000000000608], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x14, &(0x7f0000000080)=0x6, 0x4) 15:10:36 executing program 3: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xfff, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r1, 0x1, 0x0, 0x369e5d84) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280), 0x12) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) creat(&(0x7f00000003c0)='./file1\x00', 0x0) 15:10:36 executing program 1: r0 = syz_open_dev$rtc(0x0, 0x0, 0x0) ioctl$TIOCGICOUNT(r0, 0x545d, 0x0) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, &(0x7f0000000000)={'ipvs\x00'}, &(0x7f0000000080)=0x1e) socket(0x840000000002, 0x3, 0x6) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) sendmmsg(r2, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 15:10:36 executing program 4: r0 = epoll_create1(0x80000) r1 = epoll_create1(0x0) close(r0) syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x2, 0x3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) [ 279.082832] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 279.109703] FAT-fs (loop2): Filesystem has been set read-only 15:10:36 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x3}, 0x4) pipe2(&(0x7f0000000300), 0x84800) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000002c0)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0xfffffffffffffd35) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) socket$inet_udplite(0x2, 0x2, 0x88) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2180, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf88, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x200000, 0x0) r4 = syz_open_dev$vcsa(0x0, 0x5, 0x7f) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents(r5, &(0x7f0000001580)=""/4096, 0x3da663e6) setsockopt$inet_dccp_buf(r4, 0x21, 0x0, &(0x7f0000000200)="0cc23d66f266d88ef7612421f59b4f262d9901737a17f2", 0x17) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000180)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000080)=ANY=[@ANYRESDEC=r3], 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/btrfs-control\x00', 0x80000, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') getsockopt$inet_udp_int(r2, 0x11, 0xa, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$SG_GET_KEEP_ORPHAN(r2, 0x2288, &(0x7f0000000000)) 15:10:36 executing program 4: r0 = epoll_create1(0x80000) r1 = epoll_create1(0x0) syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x2, 0x3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) [ 279.270159] protocol 88fb is buggy, dev hsr_slave_0 [ 279.277401] protocol 88fb is buggy, dev hsr_slave_1 15:10:36 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r2 = socket$inet_udp(0x2, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0xfffffffffffffffe, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) mknod$loop(&(0x7f0000000380)='./file0\x00', 0xa001, 0x1) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r4, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f0000000040)) sendmmsg(r4, &(0x7f0000005fc0), 0x80000000000006a, 0x0) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) mknod(&(0x7f0000000100)='./file0\x00', 0x8000, 0xfffffff7) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f00000002c0)={0x3}, 0x4) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0xc028ae92, &(0x7f0000000000)={0x1d}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000340)='trusted.overlay.nlink\x00', &(0x7f0000000400)={'U-', 0x4}, 0x28, 0x2) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'syz_tun\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000004b0014eeaa820000000000000000000000000000040000000084e5932cbaa0da72324887b4df8401b1677be77fe93ba3be7f0d02ed2296550296b31f65fe00c779700c5a1abf068b6fc1103386f926b0bf27b804e7521cbdd1d16f3f7d18b89f4079227e23d33fbb8205b28ab4c88fbde6d1000000000000000012e551fde4f7156078e2ee03ee8584a4bc"]}) 15:10:36 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = geteuid() mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x1000000000, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_u='version=9p2000.u'}], [{@appraise='appraise'}, {@euid_gt={'euid>', r2}}, {@fsname={'fsname', 0x3d, 'rfdno'}}, {@euid_eq={'euid', 0x3d, r2}}, {@uid_lt={'uid<', r2}}]}}) 15:10:36 executing program 4: r0 = epoll_create1(0x80000) r1 = epoll_create1(0x0) syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x2, 0x3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) [ 279.510675] protocol 88fb is buggy, dev hsr_slave_0 [ 279.517065] protocol 88fb is buggy, dev hsr_slave_1 15:10:36 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000600)='}:/em0\x00', 0x0) pwrite64(r2, &(0x7f000003bfff)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r2, 0x0) lseek(r1, 0x0, 0x1) sendfile(r2, r2, &(0x7f0000000440), 0x20) sendfile(r2, r2, &(0x7f0000000100), 0x7f8) pivot_root(&(0x7f0000000140)='./file0/file0/file0\x00', &(0x7f00000003c0)='./file0/file0/file0\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') write$UHID_CREATE2(r3, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x1) fcntl$setown(r3, 0x8, 0x0) sendfile(r4, r5, 0x0, 0x8000) prctl$PR_SVE_SET_VL(0x32, 0x30a6c) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000780)='TIPC\x00') ioctl$sock_SIOCDELDLCI(r4, 0x8981, 0x0) mount$bpf(0x20000000, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x588b, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x1910824, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) r6 = fcntl$getown(r0, 0x9) syz_open_procfs(r6, &(0x7f0000000180)='personality\x00') 15:10:36 executing program 4: r0 = epoll_create1(0x80000) r1 = epoll_create1(0x0) syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x2, 0x3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) 15:10:36 executing program 4: r0 = epoll_create1(0x80000) close(r0) syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x2, 0x3) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000780)) [ 280.070174] protocol 88fb is buggy, dev hsr_slave_0 [ 280.075653] protocol 88fb is buggy, dev hsr_slave_1 [ 280.080402] protocol 88fb is buggy, dev hsr_slave_0 [ 280.086797] protocol 88fb is buggy, dev hsr_slave_1 15:10:37 executing program 4: r0 = epoll_create1(0x80000) close(r0) syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x2, 0x3) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000780)) [ 280.219960] audit: type=1804 audit(1565190637.199:107): pid=15512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir525748567/syzkaller.UwknhR/188/file0/file0" dev="loop3" ino=251 res=1 [ 280.258369] audit: type=1804 audit(1565190637.209:108): pid=15515 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir525748567/syzkaller.UwknhR/188/file0/file0" dev="loop3" ino=251 res=1 15:10:37 executing program 3: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xfff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x50) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fallocate(r1, 0x1, 0x0, 0x369e5d84) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280), 0x12) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file1\x00', 0x0) 15:10:37 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) 15:10:37 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/packet\x00') preadv(r0, &(0x7f0000000000), 0x0, 0x7ffffffff000) 15:10:37 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) io_setup(0x1, &(0x7f0000000a80)=0x0) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0x150}]) 15:10:37 executing program 1: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x20003, 0x4) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x40000, 0x0) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f0000000140)) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x0, @empty}}, 0x0, 0x2, 0x0, "a44ea34bf5d548cc0bca9e9c6070ce437913a62495e1f231af3905d77d1ddc334ef0435b41851ec00aa0c453389dacb56601a9762771c400f1644dc1de4ba3995246611554001203d1b487da24f8733b"}, 0xd8) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x20, 0x0) ioctl$VHOST_GET_FEATURES(r2, 0x8008af00, &(0x7f0000000080)) 15:10:37 executing program 4: r0 = epoll_create1(0x80000) close(r0) syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x2, 0x3) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000780)) 15:10:37 executing program 5: r0 = epoll_create1(0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x80, 0x0) r1 = epoll_create1(0x0) close(r0) openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) 15:10:37 executing program 3: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xfff, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r2, 0x1, 0x0, 0x369e5d84) r3 = fcntl$getown(r2, 0x9) write$cgroup_pid(r2, &(0x7f0000000100)=r3, 0xfffffffffffffddc) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$nfc_llcp(r0, 0x118, 0x0, &(0x7f0000000400)=""/225, 0xe1) creat(&(0x7f00000003c0)='./file1\x00', 0x0) [ 280.664397] EXT4-fs (sda1): re-mounted. Opts: (null) 15:10:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e21, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x8000000055}, 0x98) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000016000/0x18000)=nil, 0x0, 0x0, 0x48, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl(r5, 0x800000000008982, &(0x7f0000000080)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) dup2(r0, r1) 15:10:37 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f00000000c0)={0x9, &(0x7f0000000000)=[{}, {}, {}, {0x0}, {}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r2, 0x40086424, &(0x7f0000000100)={r3, 0x3}) accept4$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000200)=0x14, 0x80800) sendmsg$nl_route(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20608004}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@ipv4_getaddr={0x48, 0x16, 0x308, 0x70bd25, 0x25dfdbfc, {0x2, 0x38, 0x0, 0xfe, r4}, [@IFA_FLAGS={0x8, 0x8, 0x82}, @IFA_FLAGS={0x8, 0x8, 0x94}, @IFA_FLAGS={0x8, 0x8, 0x202}, @IFA_BROADCAST={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x28}}, @IFA_FLAGS={0x8, 0x8, 0x11}, @IFA_FLAGS={0x8, 0x8, 0x20}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000004}, 0x80) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) 15:10:37 executing program 4: r0 = epoll_create1(0x0) close(0xffffffffffffffff) syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x2, 0x3) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000780)) 15:10:37 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = accept4$unix(0xffffffffffffff9c, 0x0, 0x0, 0x80800) r1 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0xffffffffffffa9c3, 0x0) recvmmsg(r0, 0x0, 0xfffffffffffffe1b, 0x40002006, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r3 = open$dir(&(0x7f0000000380)='./file0\x00', 0x105802, 0x0) clock_gettime(0x0, &(0x7f0000000300)) write$9p(r2, &(0x7f0000001400)="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", 0x600) sendfile(r2, r3, 0x0, 0x10000) ioctl$sock_bt_cmtp_CMTPCONNDEL(r1, 0x400443c9, &(0x7f0000000000)={{0x5, 0x4, 0x9, 0x1c0, 0x5, 0x9}, 0x101}) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, 0x0) 15:10:37 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x6, 0x3) getsockopt$ax25_int(r0, 0x101, 0x1, &(0x7f00000000c0), &(0x7f0000000080)=0x4) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) 15:10:37 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000001780)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\xe3\xca;\xa3?\xad\xae\x0f\xb5\x97Ao3\xab\xcdY\x9a\xe3\xe5\xe1\x00\x87\xac\xad\x80\xa3P\x8c\xea\x17f%;\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80\x1d\x95WM\x9a\xc6\x95\x98\xed\xe9\xca\x9e\xe6\xcb\x8e\xef\xf659-\xef\xb5\xc9\xf2\"\x15\xb39T\x81\x19\xcc\xcd\xb5\r\x10G\x16(~\x15\xd1\xde\x9e\xb1s\xa0\x864hb\xaa\xa3\x18V\x17xE\xbd\xc2QD\xa5P\x0f\x8e\x1f\x888\xb6\xee\xc6N\xd2\x136\xeb\xa4\x1d\xaap\xc6\x9e\xdc\x007h\f\x96g\"_\xb1\x1b\xdb\x86\xc6\xc9\xb1\xcc\xa1\x9f\xd8h\xcc\x12\xf1k\xe8\x86:D\xd2\xd1\x02I\xfe\x96t\xe5C\x86)\xf0M\xc4\xa35\xcc\x9b\x9e\xbb5\x18[\x958D\\~3\xcaO\x97M\xaf\x930\xfd\x13\xa3\xde\xce0\x1d5I\xba\xc5;T\xdc\xaf\xc8\xa6\n\x92\x0e6>\x19*p\x16q\xd2\xff\xf0w\xe4\xb9\xeeT\xd8\x94\xce\xac\xc3\xa3*\r@\xa2\xa3\x84\x91\x00\x94B\x84\x94h\xe1\xd9Ys\x05\xff\x96\xe4\xbc\xc4\x9e\x99a\xfc\x89Z6KLt1\xf3\xaf\x86&\xe1\xa9G\xa3\x11B\x87)\x17pak\x8d\xdfxH\v]!\xfe\x94\xe1f\x1a~\xdd\xf962\x7f\xf0\v\x9d\xa9\x10k\xe8o\xec5\x02\ne\xc1|\x06\xb2\xd1\fW\xffA\xeaP\xa8[<)\xa6=8J\xbf\xe715\xb4p\xa0\xfcDO\x8c\x93\xde\n\x06G3`}\x9d\xe5\xb4\xb6\xdd\xf4\xc7\xd7Z\x97W\xf1\x8cy\xbb;\xf8\xe4\r\xc1\xcb\xd6?\xb6\x9a\xad\xac\v\xd5V\xf7\xe6t$\xa4\xa5RM\xb6\xa5\r\x06\xff\x96mJ\x9e\blc\xf3bki\x8e\x1f\xd2\xb6\xbdt\x11_') r1 = openat$cgroup_ro(r0, &(0x7f0000000480)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0) finit_module(r0, &(0x7f00000000c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\xe3\xca;\xa3?\xad\xae\x0f\xb5\x97Ao3\xab\xcdY\x9a\xe3\xe5\xe1\x00\x87\xac\xad\x80\xa3P\x8c\xea\x17f%;\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80\x1d\x95WM\x9a\xc6\x95\x98\xed\xe9\xca\x9e\xe6\xcb\x8e\xef\xf659-\xef\xb5\xc9\xf2\"\x15\xb39T\x81\x19\xcc\xcd\xb5\r\x10G\x16(~\x15\xd1\xde\x9e\xb1s\xa0\x864hb\xaa\xa3\x18V\x17xE\xbd\xc2QD\xa5P\x0f\x8e\x1f\x888\xb6\xee\xc6N\xd2\x136\xeb\xa4\x1d\xaap\xc6\x9e\xdc\x007h\f\x96g\"_\xb1\x1b\xdb\x86\xc6\xc9\xb1\xcc\xa1\x9f\xd8h\xcc\x12\xf1k\xe8\x86:D\xd2\xd1\x02I\xfe\x96t\xe5C\x86)\xf0M\xc4\xa35\xcc\x9b\x9e\xbb5\x18[\x958D\\~3\xcaO\x97M\xaf\x930\xfd\x13\xa3\xde\xce0\x1d5I\xba\xc5;T\xdc\xaf\xc8\xa6\n\x92\x0e6>\x19*p\x16q\xd2\xff\xf0w\xe4\xb9\xeeT\xd8\x94\xce\xac\xc3\xa3*\r@\xa2\xa3\x84\x91\x00\x94B\x84\x94h\xe1\xd9Ys\x05\xff\x96\xe4\xbc\xc4\x9e\x99a\xfc\x89Z6KLt1\xf3\xaf\x86&\xe1\xa9G\xa3\x11B\x87)\x17pak\x8d\xdfxH\v]!\xfe\x94\xe1f\x1a~\xdd\xf962\x7f\xf0\v\x9d\xa9\x10k\xe8o\xec5\x02\ne\xc1|\x06\xb2\xd1\fW\xffA\xeaP\xa8[<)\xa6=8J\xbf\xe715\xb4p\xa0\xfcDO\x8c\x93\xde\n\x06G3`}\x9d\xe5\xb4\xb6\xdd\xf4\xc7\xd7Z\x97W\xf1\x8cy\xbb;\xf8\xe4\r\xc1\xcb\xd6?\xb6\x9a\xad\xac\v\xd5V\xf7\xe6t$\xa4\xa5RM\xb6\xa5\r\x06\xff\x96mJ\x9e\blc\xf3bki\x8e\x1f\xd2\xb6\xbdt\x11_', 0x2) r3 = syz_open_procfs(r2, &(0x7f0000000040)='fd/4\x00') r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000300)="11dca50d5e0bcfe47bf070") lseek(r3, 0x20400000, 0x0) ioctl$NBD_DO_IT(r1, 0xab03) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) write$P9_RXATTRWALK(r3, &(0x7f0000000080)={0xf}, 0x2000008f) 15:10:37 executing program 4: r0 = epoll_create1(0x0) close(0xffffffffffffffff) syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x2, 0x3) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000780)) 15:10:37 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0xe60c95853bddfdc) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) [ 280.978726] audit: type=1800 audit(1565190637.939:109): pid=15589 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="file0" dev="sda1" ino=17327 res=0 15:10:38 executing program 4: r0 = epoll_create1(0x0) close(0xffffffffffffffff) syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x2, 0x3) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000780)) 15:10:38 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x917f) 15:10:38 executing program 5: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x40, 0x0) r1 = epoll_create1(0x80000) r2 = epoll_create1(0x0) setsockopt$TIPC_MCAST_BROADCAST(r0, 0x10f, 0x85) epoll_create1(0x80000) close(r1) ioctl$VT_WAITACTIVE(r0, 0x5607) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000300)={@dev, @loopback, 0x0}, &(0x7f0000000340)=0xc) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000380)={r3, 0x9, 0x3ff, 0x0, 0x3, 0x1, 0x3}) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000140)=0x6) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000001c0)={0x10203, 0x1, 0x11000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) r5 = fcntl$getown(r0, 0x9) sched_getparam(r5, &(0x7f0000000200)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, r4, 0x0, 0x1, &(0x7f0000000040)='\x00'}, 0x30) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r6, 0x10, &(0x7f0000000100)={0x7}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000780)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000180)) [ 281.407937] audit: type=1804 audit(1565190638.389:110): pid=15616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir525748567/syzkaller.UwknhR/190/file0/file0" dev="loop3" ino=253 res=1 [ 281.465386] audit: type=1800 audit(1565190638.439:111): pid=15589 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="file0" dev="sda1" ino=17327 res=0 15:10:38 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x2, 0x3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) 15:10:38 executing program 3: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xfff, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r1, 0x1, 0x0, 0x369e5d84) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280), 0x12) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='trusted.overlay.opaque\x00', &(0x7f0000000200)='y\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file1\x00', 0x0) 15:10:38 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/member\x00', 0x2, 0x0) write$selinux_access(r2, &(0x7f0000000000)={'system_u:object_r:dbusd_exec_t:s0', 0x20, 'system_u:system_r:kernel_t:s0'}, 0x55) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/status\x00', 0x0, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getgid() lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)=0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) r11 = getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000580)={0x0, 0x0}, &(0x7f00000005c0)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000013c0)={0x0, 0x0, 0x0}, &(0x7f0000001440)=0xc) r15 = geteuid() fstat(r2, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000700)={0x0, 0x0}, &(0x7f0000000740)=0xc) lstat(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r19 = geteuid() mmap$perf(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000008, 0x2010, r1, 0x0) lstat(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000001340)={0x2, 0x70, 0x0, 0x0, 0x80000000, 0x4, 0x0, 0x400, 0x80000, 0x8, 0x1, 0x99aa, 0x8, 0x522, 0x20, 0x2f, 0xaa, 0x800, 0x5, 0x9, 0x101, 0x3, 0xfffffffffffffff8, 0xcc0f, 0x716bdac1, 0x6, 0x7fff, 0x8000, 0x3ff, 0x3ff, 0x3, 0x3ff, 0x1, 0x0, 0x2, 0x1, 0x8, 0xae, 0x0, 0x8, 0x1, @perf_config_ext={0x4, 0xae}, 0x100, 0x5, 0x0, 0xe, 0xffff, 0xfffffffffffff29e, 0x1ff}, r13, 0xb, r3, 0x9) stat(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a80)={{{@in=@initdev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@local}}, &(0x7f0000000b80)=0xe8) fstat(r2, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000c40)={0x6f0, 0x0, 0x4, [{{0x0, 0x1, 0x3, 0x3f, 0x3ff, 0x40, {0x6, 0x64, 0x0, 0x8, 0x1, 0xff, 0xff, 0x5, 0x8000, 0x4, 0xff, r4, r5, 0x7, 0x6}}, {0x2, 0xbdbb, 0x1, 0x5, '@'}}, {{0x1, 0x2, 0x7, 0x1800, 0xfffffffffffff000, 0x5, {0x4, 0x2000000000, 0x1, 0x3, 0x400000000000000, 0x3ff, 0xc3, 0x6, 0x6, 0x5, 0x5, r6, r7, 0x60, 0x1}}, {0x2, 0x8, 0x10, 0xff, '/selinux/member\x00'}}, {{0x2, 0x0, 0x8a, 0x4, 0x1000, 0x4, {0x4, 0x4, 0x6, 0x0, 0x6, 0x5, 0x4, 0x7, 0x1, 0xfffffffffffffffc, 0x2, r8, r9, 0xffffffffffffff5f}}, {0x2, 0x7, 0x14, 0x1f, '}\xdcwlan1vmnet1\'vmnet0'}}, {{0x5, 0x1, 0xffffffffffffffb6, 0xffffffffffff3e16, 0x6, 0x8, {0x2, 0x69, 0xff, 0x2, 0x0, 0xe19, 0x7f, 0x6, 0x8, 0x5, 0x100, r10, r11, 0x101, 0x2}}, {0x3, 0x8, 0x21, 0x3, 'system_u:object_r:dbusd_exec_t:s0'}}, {{0x3, 0x0, 0xec5f, 0x9, 0xffffffffffffffff, 0x8f6, {0x5, 0x8, 0x52f, 0xff, 0x0, 0xfffffffffffffff7, 0x4, 0x1, 0x1, 0x5, 0x3, r12, r14, 0x7, 0x7ff}}, {0x5, 0xb39, 0x6, 0x0, '$nodev'}}, {{0x2, 0x0, 0x80, 0xfffffffffffffff8, 0x7ff, 0x100000000, {0x0, 0x1, 0x0, 0x0, 0x4, 0x1000, 0x0, 0x8, 0x6, 0xe6, 0x9, r15, r16, 0x2, 0x8a17}}, {0x1, 0x5e, 0x21, 0x2, 'system_u:object_r:dbusd_exec_t:s0'}}, {{0x3, 0x3, 0x8001, 0x100000001, 0x7, 0xffffffff7fffffff, {0x4, 0x2, 0xf5, 0xdc9, 0x75c, 0x2, 0x7, 0x3, 0x7, 0x0, 0xae39, r17, r18, 0x8, 0x1}}, {0x1, 0x10002000000, 0x26, 0x8001, '$*$eth1{posix_acl_accesseth1]\xcemd5sum^('}}, {{0x4, 0x1, 0x9, 0x20, 0x5, 0x7, {0x0, 0x200, 0x1, 0xfffffffffffff001, 0x80, 0x2, 0x1, 0x7fffffff, 0x5bbd, 0xfffffffffffffff7, 0xfffffffffffffffb, r19, r20, 0x3ff, 0x1}}, {0x0, 0x100, 0x1d, 0x30a, 'system_u:system_r:kernel_t:s0'}}, {{0x3, 0x3, 0x1000, 0xffffffff, 0x0, 0x2, {0x2, 0x200, 0x18, 0x5, 0x42, 0x2, 0x7, 0x5, 0x6a, 0x3, 0xc804, r21, r22, 0x5, 0x3}}, {0x0, 0x18b38f8, 0x14, 0x351a, '!proc:vmnet0vboxnet0'}}, {{0x0, 0x0, 0x10001, 0x505, 0x0, 0x7f, {0x4, 0x6, 0x0, 0x7, 0xfffffffffffffffb, 0x4, 0x60000000, 0x1f, 0x8, 0x7ff, 0x7, r23, r24, 0xfffffffffffff0c5, 0x100000001}}, {0x8, 0xf99, 0x5, 0x2a80d6e1, 'eth0^'}}]}, 0x6f0) 15:10:38 executing program 1: socketpair$unix(0x1, 0x200000007, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = creat(&(0x7f0000000340)='./bus\x00', 0x2a) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x106) ioctl$DRM_IOCTL_GET_MAGIC(r2, 0x80046402, &(0x7f0000000500)) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000480)=ANY=[]) fcntl$setstatus(r2, 0x4, 0x4000) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x40) ioctl$VHOST_GET_VRING_ENDIAN(r2, 0x4008af14, &(0x7f00000004c0)={0x0, 0x100000001}) write$vnet(r3, &(0x7f0000000100)={0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x68) close(r3) setsockopt$ax25_int(r2, 0x101, 0xa, &(0x7f0000000000)=0x1, 0x4) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffff9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000005c0)={0x0, @rand_addr, @dev}, &(0x7f0000000200)=0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000005740)={'nr0\x00', 0x0}) sendmmsg(r3, &(0x7f0000007f40)=[{{&(0x7f0000000680)=@hci={0x1f, r5, 0x2}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000880)="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", 0x1000}, {&(0x7f0000000700)="504d8a5b49d0de53b11a539fef372c887e2e4caeaf572001727efa71d456a27bbbb35c3a85c2aeeb4248d0436884c4314a96f886558f70c2d40a92f66d4a6ba2db4c35cd277fe6d9462ee58ffc28587dcf2a8dc8c643a9f220caa0f28dbe56b601900c09", 0x64}, {&(0x7f0000000780)="a41ab225065bb6cc56d06d8df6ac213f2021c4384e37575fcd3b553a", 0x1c}, {&(0x7f00000007c0)="4de465dba7808c62def848", 0xb}], 0x4, &(0x7f0000001880)=[{0x88, 0x12f, 0x3ff, "0d9700bd6e949b25b2ce8cd51c848a13b13973984b37ebba1a10dfab74644586965e5954137ba9ad3f6906ff19ceeccb34cc9092c22c0796f01be23184118c334308f1ad4933c7ba2590f8ae11df85f211ed87fbde20e94e48ca3609fc3fdbbde9df0b32c4b1ec2bb16db5b7c312f0fffb4dc62e9cc177b8"}, {0x18, 0x0, 0x9, "b2"}, {0x30, 0x18c, 0x3ff, "d609341d4d0a8e3c234936e22ce2b0d5579fbce494c43b1abfd953f9b9"}, {0x18, 0xff, 0x3, "5a91be"}, {0x108, 0x12b, 0x9, "4b41c9b83ca52448ce65673913c1faf6e5e22fa5d439596c8294508ce309d17d94859798654f1e40536f7ccce8dab816b8db780aa76b28dd14c63cde819aea5880ad60aa0c7aee4754dd2da832d0fcbc45b0da33bb13a3ff32370f20fb955959cd9fa883eee99e321c2c6850a3e07fd1df8e668022919548248e6a6f74a0a389d9fa5db9ed7117035001e9b298d7bd74ba442744f47342a1e5107674c56b42bf1d01a694dfa4203b2083bc1d16b5e377f7e3b0bc5aa9508156e48429f03dae4afa0afa20844b707e5707b8a83ec4d01ca86be41a99a92238d9adb5ee8898b533b70836ebba8ea267e139925f663348e412c67509aa31"}, {0x60, 0x197, 0x5, "8d13902cc6aaa77b4f7bea9167909ea9cfbed7f2448cdd69843545fc2e76148bbdd64fabadc9ca53bf184b28646f38ff78f54158884146a33f4d505e49a7b4b9c99cd751ebe98db74303281f"}, {0xe0, 0x110, 0x8, "2ad2a78655fb33c4c46a8546785a6294ae07a58a8f3ccd040ec4adf4b281d9c849317e2d4abf9fde195d9eab5fa7e436767ced7942657fae030d6f7d4ebd898b009061accf08247c147d5bae5f8086529fc8750ad9663b7f95749637c7c3f54c7df6fd7ea925dd1d12e8a7b030872dc92c2b8f0cacb78e796f0450ec70f9e96114577dc4a08bba10bfd58cd5d7d7e0806ac10575c67777817314fd434b92e4b699c98a88f9aa2c9a31037ad3c8040007c5d10b056effbc943d7864bc8a95dc62d241cdbf374cb9738467a8dded"}, {0x1010, 0x18c, 0x200, "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"}], 0x1340}}, {{&(0x7f0000002bc0)=@nl=@unspec, 0x80, &(0x7f0000002d40)=[{&(0x7f0000002c40)="ca607d2980ff6206a4715bec1df8f2c256c5dd79fa58bbb18a38e2e50fc6def1c2e10f9264d164879c448e14a3f59ebd8e17cd55d9e22694c5b464347ebaca8678a60e1d1d7845dcd41debe750024acd92d47cae7631eb87a0698e0cbfb09bbfdf7de2e675264c3be95315c31346871921b6b9b5c95052244ac1024577bdcef9b213e30e45f7c32402bd099189aa9eff407e2259962864dc136de1f3885fc92d60d5816ef6741e0aa7d71a8ff7a8d202e092be5fd4e17febfd1d223486546401c25b552f7254867a8d20729473c0f0d41f5ca8520a1f46aa4f0e00fb12a74c", 0xdf}], 0x1, &(0x7f0000002d80)=[{0x40, 0x18f, 0x1, "34708423434e005249c227b2e02ea1d7770379778253c43778db2b61110042bd439b0640d7c9898b145b"}, {0xe8, 0x100, 0x1f, "8058284e4df032fd2cf93f78f9f4a955115fbff7baea6225c684ed63f8dba09fc5238bf76a4d4875b38f1bf802ffa943d7735280da04ecd95f2b0535e5872d9d9fd77631e9955eb018f11af436e6f994f8b6a2a1316632a570b8ae0a38456d2eae22a17e2a2cdad60d41d7859f748325a7cc066b1dd626bff61a76b4d9ef21a54c07015e9d9649e7183d64f888dea363d9524a1487311666d07a31493148efe0953a1c7400e555ff74ac02dfa9da096d23c27ce0aed35246f62837f967e62d6ee118d92c15e4577dd4d1f7109cf10c6ac14228"}, {0x1010, 0x114, 0x8, "934df0cec5a6cd954df2bc2895f759849569a471ba6a21d9640a7ba89688003f65bcbc007a9deb9f656ccd587cdb6d51c652ba8047eedb30a1c2aa62c7a0536aa27c1596d4a886277c708bad7087a11d015f15a46735dbe68049f87314f96ee55880292942397af7f136f10ad151ee5cfac30027f55b88006acc7b6e76f7e3ddd645795e665c3e3fe6c07ad69a0e753d22069a4611d5b667338e605890d8c7502bae91a09deda9da8808bd76c241e80988559d97d6378ea2c72ca20998b3fd44766bc5188a258e33689cf42aad58945200ebfdb830e75f6635032accbd43a6b4f28ce94e65e7e77f9db865dcf1952778788a3fc49646f4ec99f7d8dfdd9dfe57e61d6002dfe04dd0b091f7140d16cc76c351acc4af4492cab27027427dfaf81be0eb9916c641e5aff9d69eef69875c209b0e0fc71fc0473aad6668df00c8d386ce9d55a7f06fcef8221045db10f1d5c4eec6c0649626f2494e2f50b94e48ffa59679e269699fadb712e25af9b6d23d0aeb9957f2b3ce4dd55141d816cfa6f2a291b597807f1da9d6f19ccaa767b670dcd17f9b8abd2554f82948e5415a88726e18c2a5606a9dcd20b47b0414e7abd0c950d4f16814f06d84df75e21da2c876ce90b6f23c6f4d69783725dcbbfbb3a8332a6fffbdcf2cc6bf999b4165e25b62cc986d19acdad2668a930fd9380d95c8462976b2901b6b530555c3775bf668490067992f8ccb98a49283e3def01c419587368980395529f5d401c7f8c78e3f60febfb23141ffccb893af076f9bef7fd9a2f5e959bcd9432194824c1d9518a081c307c97cf0dff9ed5d1f04e43cb1f7d96f77db0717e91948455f3e7589a5a6226811de94850a64bb3f3b0b57e5b1a7cd940e3beb9cd38b7912c18d8af181b711a3c7a799d18f9e6db3411e9954f13cf7b8f44b36de6f5a4e4a999cff9148bb201359e6166f33444cd169b4f555c9fba574ce2e670d9545834d6aadef190e5691294979fe34a28fe75fbad07fb36e9024709191dde797f74ed344b39352b2de907e78a3cd651a0e6bac7f1471dc73589984d333b42b8291399919f3686a10d5e5f4f4bb17507dc446dc0e133a399cde71d255043105c45a3a6cbf26ec77a41a850bf2fba20a5ee35c5d70f6f1a51f239260e9bc6b61295e32ee96dad42cdf9534cc2fdf38bea4c1c2bf4ce7280f2a3f18f94e468d1337d4e58754f7e4c1d9b04ebf8dd7dee7f736e9f8d7565283a0721ce6b9bea344c99d2f6daf624ed4e0a9c3ad7fa752b1deb93b72e9607df478ddd7acb2d66fb892d7d91b1aaafe991dc4c3c65549f3264d3d52705ade770f831d7f0fd9194aad96258d9b00b96e449ec8a03cedb097d1ad43fc952fc5a7a6eb4c607cc2a16bb102f06439a092e74f5a6133b52529115d0441ce406f0e5afb0923bb61fe132e8b8a6f0795f56455cb65e6c7b24779931ec84fb1ee151d085016e19e36c8e5242b41ea492651f030dd0112ad02894741a0532dd272929be1e72a4c4db07bf2b9723725a2f6f9b25cd40081f02acd036946338fe9c6fe7012e2c1a8db5d43e26f542af7c71783c4431f7774407f937dd359abdc67696b32e701036f3784480d103310ec0bebbfcf1de1c20071db99ea00a2108230de751efe3d54ba4cb997d9642cf4ff4dbebf06f59594faa1de762fc74fb27f34f920fee6af90f6343aa15d61dd3f9583b2afd0681cb5a68591ee6d9f55115164c9a6579f1fec6b5caf77d84d6b5d2655be23bab6285dfdef27245b72fb5070a4a6573ae7d98b511a27015c0781b8538b67dc6fa0a3b629361448148361cfd740704aeaba1ec70a5a96e0af8629634c9d1b9c043716a6a70ae8afc61ac7ba284a03f7d1a49f6d26833f93662fd998a100172625ee94c6bbcbc6544958d480a2d1220a6a8fd02d9a06c35d812eebd76d2802b966da23b7a79cd0195a32ed1970d3d52abdfddffee9479684c48297b4e648269057aa8c1b887b2a7feb186f176d4a7ce2b1743d0454605a98044b29014371c7b94a4bded388867c98cf9708edb6be99a5e71620d5adf3ef250342ff23970788f104c0c05fdfb5c1127f445814298e5a090153088fd28c3e5091b168f340bf142cf42c7fc9af18dc57ca8a2b2498993f1ea1ae2f0634aaa1fe931404d22a8bbf5055d3049d4e177071f48355be0bc4e646537e24c036390f2e93c219865d72412ab82f58e7684748467781346d60e2cde043ab23620623cd891b781cb81f62ea95de20fe00a0dba868a5c4341a66e170268120f7b7821ccada82d5e2438838c6876036f4b6f44c4d3cf1a0f73b895b3d20c2b7f00456de65b63d8573d8629725c65b9bfff2abebd0ddc665d6c58659dac2723fd4d86838f71c395d4f94ba63432e3e8675bef47e2e5e014a7fb9ea096f37cb2d0d86afe6c95e0823c100b5ce425de9078d95152c876df85ceedb8b0172bbd906c32f9763fecf23b355451f154e2a26e3150900ad25285033c2eb231f35322b32813a1668afb6bcf67e2b7156584613374329a71320d0c6e2c6840723abbd360564fbd289b9cdd2d2c3ea42bd73b6ae7033ca45c8277dcee8d36beb271999cad71bc34417bf2194e3de5ac31e0687976b0820522e4829fc17c98d5cc6b9247db7ac501ac8dc056f267d87a6cebddfc724d721ee9765de5de4a4ba84f982b1417ffdff118a2cfdc31a0444d8a4f84257d95d980f3f8d2cd004409c22658ef66bfa082575ea7f370d9ffe77c59e8000b006068fa42f8d40740dddf266dc6daebe0eb30fc5b8dcb08ded22ece1ecc3d611eee4b4237fff2491f53c32d38bf9ff5bc90576dcabb14cf09010d524b291ca6565214babc1e3e9e793cac28f9bf7009f64e7696a5b462a747a35055cebd8807e090509c092007f4dc5e435ea0bfc3f5c340cf01d97382313c5065e8c9014b07df76443b0939c38122be6ec799dc67509b7ff06578318b92f37dc142aff530dc64aa1cadb206f89abc00876f3023ca736c7713dcaf42ddb3e01eaf3181b170ff88155fa688a3ad188c4e5884c8c14115eebe40d5afdc5f8a1776b022cc6243ae09a66664659d1a47ef7886426a5853bed7a3b64bbdcc9a9a5edbc60fe0dfb6c166afba9011e5324fc41ba645936c50121a7be88ac6e090f155751662a2d63cee4b2c4a85c13f4cd508429ab481f0c858d02f33b9388353ca905cd9fc9f851549a5bbbb162ad8977b1c655972fff74030a3a3e8a84a2de1c4637278426d3ca36861523dce898b94875f4331f0ecb22a4ad8b90b4ef8af109a30fc599042c69e547e9c9221da404318002a09260ff4bedb64026fba7af62c0ec68700501c7c7ed581ec100b47dac69ecf122ff3460327e404784b7338bd72b7f2aeb7acd4c4850de7af01950ebc5f3be0586f116c3d94e145d7c288421580ca34baf2746bf42c38192b629d5827a93e175e25729465fee12fc5daa7e057a66875c524b832c2d1da7f69b8e930405c5c06e7a1926b8327824c3bb1572de24c24b79c9603317168c25f9c9ac1f114d67f4ba12d65facdfa54de2b1d5338810b8e855c801504062645eea9a027a20b50641eaa1ef0457efbd4fa380319ce1e59617af3e1b36afff240a10c9e2b911e3532924298e61938288443a25e895c549473597e0150bd1a234939140b433efae82fedf429924fe2cc5ae4d60a6cecef0f4c291d7c544f1c9b152d78cd1bd8a994a53b62b00a1f9c7665140882b5cfaa721e421f67eeb0de0b08845504549340a24f06360d685c98ba484eb6a0db1890ed8b9c56412812a74574579a12dbb215a6b378a3828c40c354b7b81980dadee3ba9cbbd890d567c542539b3c639cbed8f25268fd3464dbfd464e419336582c0e044c7ab6193353dc82af97abe23a0acafac87300115ec48287477090624aae50aeede60bc3f9c83e7c03fb349f82f052c8eb070b9efa7d57c50de9a4f56df43ca5af3fd4aa0fdffc406284a4d8150ef05e1d8d1149752fbb021ccc9987651c221f8aa7b8a54bcc462673b09e381fb899299cb5e42293518572f3786ccd33d692b5887cb7e0b917653c7206afec2545746a2bb182906c4b8f5d3eb906211749ba6df817b3a51d46c2f4d7b741d71c315421d151841054a0eb18d3b19fa40d03b3dad34b5fd6402efafd38e4e0d87b2b6ba8fda5957c412cd182a986b7448dc1ee146d3a88f3af08bfa8d6a3c814c8b5a57289bedbdbe6d89fb946cbd6afac4a2180f501209a1929610b3ded432835047b49e494d9c78570f8bdd8876a24244f9b953f8375747d52e0ca9062e33dca62579ec63c0b7e685fb72f9bc9c5dc7fea96bb4eb03bc3d1bd5f323477a28e25ae5088bc86e1771592f77e9c9e360bf5f74b2505aa13248ae6887d61a9576b7889e2916b3bc51ea009b6aaf49ecdf16090b427bef94609269987cb51ad28847f4f26f6d4329bb83638133a26aa09b9ba439ee5d52f9345fb6c4dcffe4b5731b2257eed004aa0a9ce456f47488a05db2360d5d78b4f62d4dd7ed42441f7ccd2e2f7fbd3b8d764e21632eb45d20eef5db56a2ab7d21b21f9bb6db7e6b01243d31d3756835fcfea83133b7f24ccef367dd47337b3b4a926ca8cb4e3983dabc02b42ecfc60873b0e88f6a1e3b959e48e2e40c5f206d63ad601ea3cb66d15629a45d649e64f1dd30601c540a7a872a9e3be0cae1cf44a9edce0e62d920abac83d629b48dcf9144bf4a0afcf039d73c7ae0aba33a29cf362a014caf215971638706006c0f213a815bb61f90d7ddffdf21b9209c928d087770fbed6ee75ba96393e40e1c369af2eca8840868e5e95b506928678abe4d636b8dcab98228875becb822ec8aaa1ac62f6791865b67e5a8c97c2bc4de4450994b8ffec66047bd2f7d6b22583cc9a728d7f71f63652e1c7acbec4f0a975bd845070c82e097b6f6d4c71fb149339c4566954ab9e353acaf6afb6435b2cd7a55e9b0374f7c9d63056ec1eb642bf3895091538b97b7b67ddc759cd4fdd3ef6c7dfbbd7015ea7e1af2c9e4acd0949ac7effbc7ba7272ebbbf5fe3dcb72817c46e438996d6a50a84f98e4c4acebc73b210a6a3167ac3c975e6d8d69177d9bcbcc9c1fa34e60dca00da318ac6ffe30f357d9721dd3a2585c3affe2e805ca4af925631971d8a38b4d9c80e32d13fd6045167ef1c92e5681e9e0e11746c15ae3b887eb86f6a8e5a0dd5c0830d6794c834d934a15d182ff23e8fa11503f4d7882613dfb756862af40efe23d003e3f34b363085a03569c79ff62cbf6071c5d822b647e4496bd388989fbe2e4374c543343fd07c81b6fc38fe661cb59617563bb568322fa975fc9aa6fa72fab931f6f7f5809bb4a5a94bbd334d392d78d0f1e9d9b385002048781d86ea4f9c2fcf16a022c52ada80a720c917819337712b8d9882637464410ade655284e6a26f7227afd45f7e57be136419e9d079a9b66d82c8932fab65d54fc9e0f778ad1e2474a6ccbac6a92d40fcf8bddcbfbdba241618f530b9013c43c207df14523c20c550b8c632ee95d164149d2f4f896c824ab8269f4c842155a28df973db85a098c8d9b1dea0e7087192f4540b2e290163345aab624efbe76638040d2cfae45426c74d8454de49182777cd11e814017cce21d21f85fd146f110d173528ae8e7bd74599a016c9e62ff71313f4240f26ee53e34a075bcbe024a6a33a9397c120ee9264619975045009ee929fff05005d68dd874104a335e9c595496e99381347b90c155f83177d965e079d9fca6e43e9dc1738de841749a872af3b017f4ed282f10073f326a23bcc27dac"}, {0x38, 0x10a, 0x0, "5b582dcabf4cce2c1886be3c000d095c523d577dbc4a47b1e09455c6f567467f1c47"}, {0xf8, 0x0, 0x39, "eda587ee3124eed3800e8bf792efdd0118c049217d0de075ce96b0afb3229c472eace8576d302fe94c7f8b8f8bd4d517c897f5a418b8b5da0da7bc7ea51d53f0332fe0b4a9e7174698e88053e32a2be94424557aa290470af59be95574aacedd97b010301f58a5e7c5e2da00c9d373c8c8d5bb1af4e425264d8667d924e21d4e771514adedf909514c603bb5a85d650d1f3a66939219b183fb13518cae313fe8138e17b444fe9766f75dab336392e3ff7298deb37b5ddc58aa763712852fe02182f8c0e11c8571a14f466273a7da4ff388717ca3edc0a6debd150ca306d571d88091f491da"}, {0xe8, 0x117, 0x33e, "9a187befd890cdbe4fcf32b902f9c0b76338e91e739167c1f2ff9e115d90905d005d6076585b341791bc724dbb3e48270fe3c41fc304c5f0afcdf24e512a37e2958514e0a02ae647a17c2a9f035ea6f910e1616fc52347af1d76485c71182e9375906f08b4772b0bd508fd45284dedf59a30e2ded17aa52136e5bb496c40970143327924e79aba41edc2723e822e7d545571d8040355ac3f7dcba78c07723482bdc0cad2dcb87fb4cda00e8456a3a77a9412abe076ab33fa77e46f0def480ccb31b00f1316448877c9d0fdbd4b79a174cb33e01f19bfdbc9"}], 0x1350}}, {{&(0x7f0000004100)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e20, @rand_addr=0xffff}}, 0x80, &(0x7f0000004240)=[{&(0x7f0000004180)="44c7e714fdf40cacfeb1f5a23ec5394d90dba090f669203722902d934af3c93d7047984b7617f8a0bb33444c7a5eb8fbbc5b7109f48b3a8ca0989d32c783321bd9e1f2ec223cf58f3c1d4a6a3cf1e98251941dc753b08a5237403fe7c26c5e5c752df882107f66f8c6ed782c28a02ade0bd5419d5bbfb95606d41a64c193f787f83a97cc9bed222a65ae3ebcadf0be46483bd2e598dee6b36e44ea9aa0aa53d1e63acd7d4e461399f61449fa8990badd6254fcfb71c5dff8a663627169b1e923", 0xc0}], 0x1, &(0x7f0000004280)=[{0x20, 0x0, 0x6, "b53c2781a1cfe3cc591adccce0bcdb"}, {0xf8, 0x13f, 0x8000, "27c4443f0d6131b5da5b70c716db7564862ea62cd41c483898fa55c7097281611c2ea4b6bb571873c32e33f5c08dc8a9e73c5d9f45ed86d3f4894c20a9ba6ee00ea7cf21e7e77eaad1a5f81a22b3f42568ffd05a4a02bde4b0cedb2e151215401f882a11d8eeed95f3f8adce10cd11db45ed28708cf8f704b40f42582ad259bbd69bfd2b1bc4fd2b3b137926af2926624b9c32929ffdd4e0aeb95049b407317bda19ef2c9f89f60919562b6a51759202db70f48337f708c433ea081e9603c9ff7b41d4391987b6f71d51a5ba9306f6aa6a4fb3018d7fca4557e2de0e8b1cf4d27a1e29152e25"}, {0x10, 0x10b, 0x9}, {0x1010, 0x118, 0x200, "5a73cd23ef5585b701743ff72ec3081dfeae6997e807eb2b19f17f8b2dd941e1cea549d39b403662e625e1a1bc56bdef9efc429d852d4293dad8b1333c8880b27640c0f13dd7bdfd81e5170fbe84913f02ed9475ee4f002867aaebc39cf8fc4944be7bd94c29c343878c67cdf25ad56ab81349e39d293453486ed8bf02eb8affa5ac7f06704fa17f3bb84b2d89ed6dd54664e85865a4aea0d86e73b30f734234b3345af475a0c00497eeed1007c86ce945f1e15139f9ff0d34c80e917519450fe667879ce0cff4c5f3461754bf5b74be3c405fd5eb8b6bd99d4a67110ac676844a6ba70c331f4b942ebed6ce1c26051039e4e2a580b56672a52150c5f20c2088d6eb4d733fa9a2accefe0875bd4d7dfd7ac9b7b8bd90ffd989e7af0c757c0a1cb7f5c2b3917298a5087c457b869e9e21d97509ac4505f22085378e15c2408e6d2f86c812ad3b696a157ba7950096a35d7e56fc9c520c3e77fb8b5169d95954c2544464c45b15134568740c1c7876536d115a99f03dd25869705ba8af058a542b32c186ca45b957d90904c6f132c519bdf4653948af578cfe1e81a6d2007d77baf5ef1f5739734b7dc1c055f15de0193b4ed5e84e19dea0905ee2f1abf5b89747185a03f6925981291e0cb7fb276811f3def635997826bc1c357f3f0f59736bb6166712b991c1266905b80e643c45d9f0abfa94ce6e7ebb7d27cdbcabafcbdf555aedeb14215bcf569f45ab46cf0c624bf32861df761a1a973005f61039f137861b10cd80b739d1d413a26f650493cdafd64afcb95efcc14ca796fb10c0de817c306591fd7fbf231c36b45cff4828ec140b640ac4c59bc22037b9535b34165cfdd04c7aecf1d8c43feb3a837f2de2775370bddc4ccb46402d36e7ff39f5ba5822125a2d353174353f8f51fd6405c279f227745e0bf7884d32b1ba38037ab37790feb557761f6d540ee43690655692bd7aa889640da63a9cb227ad84f1e95a2a5df9c9ae3478dd22271cc6afe305cb234f5a613ea020c7acca98f7ccb9e7b168b7a05efca6e919a5f8d581acc8fdc748b11bffc0775d3f62ffd7786c1ed77f7a8d2405ee0a6e2e82536c14dec4741bb525473b3f250e2068031eadd72060151b48b37bc441ae6bdf0ede485ab56caeaf74c67ae6b80c23136e1e7bb3792c7b18181a7d562fd8a990ef0a7e641836c5efba61130b11b2e532c93e86794e0b68b0c20058d8496e6847901f3f2e10a8b214d6c78704387df0b24d279a47f9fb37fe2e4833716ebf64ec49aa7b6286d893dc32971b07723a2395bb761d67bfa5942fa879f0870c4761f363ad584f38991d10f6e6fb51aa835ee4509935a069bfab5511be0d4ec023ba7f042734c9fc683dc83bb893baec07d0469283c575b46e5af65510e12c845a77a0b6cf5fe8fe7f006f5c1cd9a6acfd7518c4797c54ad4574813da13a57f9eba8bc23c02c6acafff1bac9630d5408e80ebfe1355dc0d47c0c63cd804b31d17f90498610d6a9ff897209fa3fe9143c686b87158e1d57b428d764c6dbd934777a328c18272ce0f0bf066bc312af4cc4ad9326b8bdc72914e4161b49a84d272c6c823bd10ee9cd495a6db4a3ea61384f6488ff789615506802e0382fe79408bc714ec4c6ef96004b8cc9e6d47944edcf6a80b093dfa68c236559100c97281986325e3fcb6fd31cafe791a93b0c84b44da709822b1c00b4844ff51be04261e74282479dd08a1db5cd4c36ffc6cf9b5a190764e8b5eb276dbfb6c05fdb96e5c8eb603c0fd6e3802a7b76e74d1eca6fed240ca8aa5170076263b1f6906d127350c61a5284fcfb09e2aa4003ee2ac70648fd34875be4d1441e5324294eb3921241cce50a35dca7e441c59f9f5cbe2fbfec51982b5ae27edc8f90b0f229a9583c8ffd560e635d973ae5547b71887fc59b5191b7dc326391934ab870399390c800b9baf330e692cc9b8b9e30993c6385e772364cd5855a7ee50a2d5e76b6681fafa3e7ba4496ddc0f1cbbc16b154ffaace4d14df84bde241a3102dc6a5e20152d074c578fb70bb1144bec3e955147120a23acb6c65277d51e92228189854a994e5cd22b5ef9aa16a4b105d3663cce268479964333595c46bd216b1054a6548fa4009197ef3ae92314dae455393f2f7f69e58030ff5f786f44b40cf10a590c70e527b3485ff0b57aac03ffc81c1ed7768631dd424ffa21e329b73a2569515ad3715c66cb8b38b83189a418691ed6506474dfe499c2b9db9a11d98af2096f56c9f5b4347c939e12a4167db0f90204e4582ffe88d736ed2dcdaebe82bc9fdaf29ba1d953d3a7300f390fb5d4aa92a02f69d1d09a2c9b2121cf08d7008aa9367bcaeb6b9f2c6965c963027e4939f6771f55233ec0c53415a24fa18a5f4937a7830d8de45c7476b9de50f2194d0333168f4b09e9522589eb32d823b59a3d9049ebdbe48cea74da73635671e327d96cd3c3e0bcc3432abb46731b7bbb3133d6e92b47771030bb3f7fb845b6c1da37aec1fde8de70f73992e878e38be71139f639f891f10258b614fc1675911fb2860b9e19d4bc39f233d082a28575f448ef29da22fd850a6a01cc1cf2d3be869bfd8555be448912fced0a06977aa865af747f1c8fcec0f395f86ac028139cc980f976db4bfdc8c7f4fef738b5231a4ca8c06218e61b9d3c503dff86bcde6bc96292eb8277730031ac9c59558d137af4f8273f7de9509dfe9eeacff8fba00315210a70651967b9a08521d2178da73c0b79586c811c931e231421ab69ff15fe06d20651cfa3ecc2a6ffda47acf2e785ad9040ac7c231f5695988533f317fc90ed9893d166724a4317e1a7cd302b51b714b91f34c355beeaeb4ee77429228228277c9c4916d3d82c486e28f70da3c286c99e4485ded71af01ac886e0ae999d3f7815a68b4d4c02b5adb91f088cd12507b3913c1b463758219e65412d8a9957368bc7bf1bf800a7672b5d9d5b1863bff51996e093e9e562552aaaec27f329bc559ccad8a39e8bf9a441248557e33f6cc7a9ba9b42734c31258c0054ffbcb351371a14c4ef398f7c4d7a7e90282169e69595eecbf43655e8df66fd37d5119706c7836e070d9fe25e30728861a4ab830d799e072a69d73f0f1bfe1d28bff4bba414ecf48b6d50e93c81a6fa4b1ec9379dc480b361d1546b55b6267a970a56d602ad6a4822f0cbe5f4efe0b223b655c210d3916831ca4d316db5e2344b1d96a33dc0005eaf96541888fdabb0730d1678c40c7760b443cc2461bc88ccd4e2d55ea5ebc3ccd16b0519d104423052722376cd42c9a5b5e07719208fa01293927be343182f9cfe1fdf36e42b64b91087a096050277bf9e98473f77b797d68d0d136e2a71df4145b281d2b3d35c644dc490d6b59366c6b102ac208cfbfd0739716e58d07c8a3fc6296c47f86b17bfe0d7a23229557ff93e9f02271476a78c3aad1af5286d21837421b28aeefbdc44073e6c8c4f6c6707dd238d5ea351c67ae331ccbf2fc70a877e05b5d4f7d710ed14616527c5e0cdad5694436c8678d1d4e9c1cba7935727239ee458c76b8762c2c3fc876a5107959187a0da2c73f38ecb821ca205d535f4abd8a6d3b4fb1e3b0416629b3ddf394968bb30a2e736ac01dd5becfc3c66daee8dc283f7b8e708bc530481d5cce4537c04694d8e1470669cd774558a1007aadb5d771c62b16c386157efd3cdcdaa57d14ed1b1658e21df6a4c3d39ba22ce3c8f0408b57c1f5bc015c0dd8ab0d5e4e41013d71489acc2ce9bd354ec6e2e062da90d51fe5ebee62ab51c1fc6429350940dc64b1c50b47996c058ed7b70f978a51d3f15269fa99e3fc434e75310dafa31f412275e1714d019a6b86bfa6818d1dc373fbb6baf7702f4765bd2c6613986c98195d9f151f6fa83e765ecc114c65ed005828c8023bfaa00f771fd1b3bb24d3945f317c54a3196d2849a97d5939e31d4659c9f1783386cf67be0702d9fbf8f633d2f15bfd5e2d0e93b63b41b1e3f52bc3dd4c60c19ef78dd965cfc152499f0f78e506f16ef5d6f0d73535d5b57e86a5eabaef5353383046128b08dca17aae3a9031d27c44dc0774e7cbc658676fb9daaa680d525d9fe7bdd8fed5953a27e3f459d4357d4d9eddbd48cfaa3a2e966c1b8a0e17edc3e6aa1050efe5578632b60dfd36efdd9177f3e964d48ae8ba985ab80210bd61a4344dfde4fe0e08e01760be064abc75c56176136164141fab13b4cc98339d4b920cae83c7df48d0cc11dbc38a2e842679c2c62fffbbfcd312f31a600f947cf36495a520243d84d8f033e1bded934219eb74836518d222f1800541f6ebcca24ca50393d73268bd90451d30a98ec32b01c76368a23716f223cecbf8689fabb34cb84ddc9e1c64fc52932d42020699469196890585ab2801ec7ccc7f1281b1d34b7de5ae4c1c0475fe4c5a8efffe0235fdf61b776833caacd3fcfecd0e844ebb40b7938eea252831ef0c45634e71351b1880d109a8daadbda458019591dc35fc75f8db0f69827917c796fcdba4dbd1a3f0cf0aed14ddc7343df986ac64c2d4a7b609a73b7afee3d2c6c5943dd7ccef2cd4ba875244a2a8d2a9ab0cfb29af46d61437bb1d786f6e3dc02d0a61f5cdd5a5e5e65e399841fd2e0eb2ad74b6545f4e691168257180c1b761fd47fd5b3c734542feab2e1226b2143be788be3290dfe6ab14855880a8664853fe2fa960380e4283bef3042e42b9276312d33af31d897ae6f93792b007f443583666389082fc4bc86c27f51b157a310e9ef91b425a2f6249cd902915fccaf9b5a7a09f1372b32e28ef9752d695c581ce382f78d459c7f4ae307ceadf273acd86cff4f501e176a9b99fe4a121a16169e3d30170262bbe96ddb6785ee30da96f0feef8110d76e3266a6acecce79eb84fcd461ca1c55ecb24f628ff50ff9fe6a4d6b8a8c13d969551ec93101c2346c43b3a367f6fe83fd9418a73a2442a42783d0dd18e0154fde5c323b21478664819a86b569925ec04e5c368cc916f89872654b44069ba71ec433ddfe1045189460ba971f958ffff6bf9d5ea764ca9131135bbf5534846c47d4d54ac0c8b98b9e4bd86f467b3fc4294d55ad48f6c76cc0d8a89f475ed96c422a1b0f4a9c067926c04c7554c51c74725fff0af5d114819589953224280b709d69c484dbd50f642e71ebc7abae8978adf15ffd32c826e843e5255c7eb68d9069885c9bb11991f21f5195e9b52c75d94ad95c361067b83be859eb3fd10160377c072502c66bcfd0a0b0f95ecdc6d0a93bf4a2fa44f181be8eb14b69c28d41ca0c894c81b12a06784ca4cbaa1d486b7468b51d5098021fb414b77b4477f99cee01e5bf2c25b7c4a1ed8001d950f6620dd8af95abbffc17dfae060e13f68313d01bea7d59272b9a54d51bc644d3bedce7d4693f947871c7f506d19d26f06372fcbee98cd8f71c9904cbbe3de66024e72f60a54628c672a030727227db4fec9a9c91739bb4033c905b8c93b983ca1e9a3eb24700ac15cce31e7532365c59d49ad03bb6a41ef5b8c246fcb6dd43baa00b347e8bd485cd216d19ea93072bbaa6348cf992198bdc730b0b13e66b6679b265cf690136bc3f3a44a2716387295028a58e090f85d2f89fb969839b7ac52f62c585ea622bb1dbd90d1f9d505c43c8c7b807d46ee731e3ca2eeb1ae6de2efcca0a97568bc42f997fd7f8fbe98d38996c98798bc340b74ee22429ca2b45a8849f0c0f99fb438a83aba5f57c848100b8d207497c1b164c489cba91cb32f2d275c0af79ccde29efe92c3b94433f6921df6fc2a641298808c57a33f"}], 0x1138}}, {{&(0x7f00000053c0)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e23, @empty}, 0x1, 0x4, 0x3, 0x2}}, 0x80, &(0x7f0000005580)=[{&(0x7f0000005440)="5c5b8f2e6250ebc6ae5878f3fd955f1d9c4918fd9055b83b059f36a487622783f1c531953d6954e76bcfb65b3024d96fa6a5dda5f3f6282a3dfdbe3cc75a2c5531ea7e98400714835a36b62bde8ebfe6c9d27ddf81a8bb41d215ef318cd9eed3ad362ffbef70796eb3d3b918917f7e252406609246c29fa1ab272d040435ce57a5a741fb31785393b61f74a81c342551f45e352d7f9611ef71e0c73b55b16b9e4d68806befe0", 0xa6}, {&(0x7f0000005500)="c46b665e34ec7898b333e1f056b3dda4b4943069cc55fc78aabf3196fdb09efa488491ee9766a3ad43b5b6e8a100ad53e48b3dc9f0d3a1", 0x37}, {&(0x7f0000005540)="cb97f27dbd7cd4ccd3e18e001716e12e68358977d61fda70ac030ff6048b267455846d144076f0a548436c2bc774daa12328a9d80846fec592c56d9b974d", 0x3e}], 0x3, &(0x7f00000055c0)=[{0x78, 0x10a, 0x3f, "76f5e7cf85f7c9d17feb73f6d8d8e423a21870bd1660342af12ff5c7f9d504fc15f81d0fefa20264e3b4428ada91a32b0993cd8ee8207004476542e15c06c784ef86f51eec444c438f3f527ce98a4d29e26ef49f822b0489d0515c6594ba6cd0f4b49c3755"}, {0x100, 0x19f, 0x3, "2e8baf200d86091a7fe7a8a898f7ac0ea2270c9e30373199702b9bc167f915f922550f9256cc556201135998f6a5ee127b738f95ad1d89061c64772e302b4600eac15c8f22eff08640985139c462b6f5f203402c381dd49d14e4ec1b208bada2dfccf91343803b8da0da2b6b00fb28f356f382ffd8fabb239bdb606228f1d9ed39a3b5017b480b136ee6ce5c11b7bd0e67d30c527c759f16530b33e4681965c29dfd0c6ab10f3794c766ac324758c61f98b7e805cd45bcd4e5eaafaa5971884b71408ec9123b2d35886ff0c0c852acca1e3dd9ac09e79ce768bf2e4b75b4b78b5b569934ae5ff5aeac0e64bccf88"}], 0x178}}, {{&(0x7f0000005780)=@ll={0x11, 0x1c, r6, 0x1, 0x10001}, 0x80, &(0x7f0000006800)=[{&(0x7f0000005800)="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", 0x1000}], 0x1, &(0x7f0000006840)=[{0x88, 0x189, 0x8, "0b50823bcc8b1489d22de6134e7a7c31a951d60cbebb117e4d1a9850974d04e16495c4141789a6298e223b5285cafd353dead13ce596aa163429991ebf4c197544eca68b9f465e17fef0011bace51acb7471c6a68fdc376278f51150cf59894b0902a7954767788bd1f04747526f978001999b36f860"}, {0x28, 0x113, 0x7f, "49cb03447a781b17b5d66635fd642787c377df56e4a3"}, {0x80, 0x111, 0x5, "48573ab016cb2fa140e043c5acf1691afbd562bf7b2c7c7100e22f4e43e2ddd81ff5f86c4b68ee5573a88290bc8793bbae47d9a3eb0978b27dc3afec1564faa8bc345db1fdfd2337e72a2343521f2617b6ce5aa381cd727388f97ea5decd04c6c79998556884515e021899996d0c"}, {0x58, 0x199, 0x2, "5745e36518254b1d1dba491608ff207a693dfe160d361933d7fd3f3c1c70db086862a8e01371f2a5262d9dfd2a6748489555d8dc001d21289adaf89f7274a7ecb37d"}], 0x188}}, {{&(0x7f0000006a00)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0x80, &(0x7f0000007e00)=[{&(0x7f0000006a80)="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", 0xfe}, {&(0x7f0000006b80)="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", 0x1000}, {&(0x7f0000007b80)="ba3cbd048f7f5f9655dce346874866472d523c36987bfe6c3b58094377991ac054e8ab19774538a9d9009771cc9695120ca31b4dcbca63566d55678925e3936a9749ef4d7a3db151ebb2414cc2d117f3800b4cb78271e558cfa858ba3d834bf34ed9db85b980262a645cb38f8ccfbd55865dc08ea4cdbd7ccab0f501ec8d2033d72dcc29ad46e5f1b96815f61c1afaab44f67a25702f540e2e592d0d0a9cd0eb8f1a098da87620b3ab4a18bcf043188aadae4e642675e9770db85117945da9df2274e859fe1fa2608af59384", 0xcc}, {&(0x7f0000007c80)="0303fd08f03349cf519595aa5c64645dcc2d76625b92e533d7a2cdc9c616656e92d4a21e51346c9cb8069a3ae1ccbbe7214b9637c6553feeed81f599e8854b7572d5704eee36dee55b33d87972d76baa29a6dfb03c4c48f3ee2f129e96532e13a81d0e499b4f83b31cfc849a556fd08f171c14f321d1c3d27afaca3b99b7015b71bf9278d6232b4c6a5cbb1c45b488e2cbf1adf1f14b38af1e1bc816351cc95799a4ab1745aa9ba654c3f0cc22d1b18b35e0e086d5da5f01b946169b53ba3e9c4a2d4f66cc097860cd6ea193889ca2e2b36a11fcb26d00ac6a7cd5001677b5062d328d42", 0xe4}, {&(0x7f0000007d80)="b4dddd71556912ad85ad9c4f9832a5bd2aaa21960a752bac0a6ebd3f1c9da93a2df5e64b08fd07946ce11f58c1e39515bd38e29d1023", 0x36}, {&(0x7f0000007dc0)="66cb3c52725d", 0x6}], 0x6, &(0x7f0000007e80)=[{0x88, 0x1, 0xfffffffffffffffd, "208f9bab200e15695d315f8426138680435ab4c6eb492d19423eafa83894076bdf199d01829bf5675a47716f808ee13e67224e28a10861b1de1e1ea2e76f5bda8c7093dc5e9b8940a279aa9a7bacb5ce529293456b23edd65c7955f9ce15ad7c96085683c2a1464002a48d1ad0101e2ee38a"}], 0x88}}], 0x6, 0x8085) ioctl$NBD_DO_IT(r2, 0xab03) execve(&(0x7f0000000840)='./file0\x00', 0x0, 0x0) io_setup(0x4101, &(0x7f0000000240)=0x0) r8 = open(&(0x7f000000fffa)='./bus\x00', 0x200200, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x8) truncate(&(0x7f0000000600)='./bus\x00', 0x6) setsockopt$llc_int(r3, 0x10c, 0x8, &(0x7f00000001c0)=0x1, 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x11, r8, 0x0) io_submit(r7, 0x21f, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x49) 15:10:38 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create1(0x80002) close(r0) openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) 15:10:38 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = accept4$unix(0xffffffffffffff9c, 0x0, 0x0, 0x80800) r1 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0xffffffffffffa9c3, 0x0) recvmmsg(r0, 0x0, 0xfffffffffffffe1b, 0x40002006, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r3 = open$dir(&(0x7f0000000380)='./file0\x00', 0x105802, 0x0) clock_gettime(0x0, &(0x7f0000000300)) write$9p(r2, &(0x7f0000001400)="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", 0x600) sendfile(r2, r3, 0x0, 0x10000) ioctl$sock_bt_cmtp_CMTPCONNDEL(r1, 0x400443c9, &(0x7f0000000000)={{0x5, 0x4, 0x9, 0x1c0, 0x5, 0x9}, 0x101}) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, 0x0) 15:10:38 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, &(0x7f0000000000)={0x7, 0x5, 0x5, 0x9}) [ 281.644015] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF 15:10:38 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x40, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000200), 0x4) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000180), &(0x7f0000000280)=0x4) close(r0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f0000000140)=0x1d1) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r1, &(0x7f0000000240)={0x40000000}) recvfrom$netrom(r3, &(0x7f0000000000)=""/95, 0x5f, 0x10040, &(0x7f00000000c0)={{0x3, @bcast}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default]}, 0x48) [ 281.669608] audit: type=1400 audit(1565190638.639:112): avc: denied { getopt } for pid=15619 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 281.679654] FAT-fs (loop3): Filesystem has been set read-only 15:10:38 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(0xffffffffffffffff) syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x2, 0x3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) 15:10:38 executing program 2: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x0) vmsplice(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="ab78ed0031d532a421cf8e7496e91a8066f081b40223c8a215c438f414a3c799f29b1f8e30a63085cefdc92d16ae2d8c2150e540a42821abb4f905ffbca57d6a532dbd5b1d10a0036823ae8a8db88eb397d07cc77d30939ca3cc3656fcf9ef5cddbba8f3220d637f4be8b2c8b61dcf6944c418b4caefae9561a00e14c32c74f6ce80545c01253604ff0bb5d6551d62", 0x8f}, {&(0x7f00000001c0)="a2f69ea3c3e1da6e1090e5dddcd9fc1dd6e0ec1646217bdc610c6989ae1bce7c78f2dbec843c9d5f2665318e7db1de5fa9019593bf1b2c24bc196cbca3499539e681a1c2827afc14862c50fcaf6ba13fffd69509948cccd1dac168258cfcee9c54c99150862ecc955ffd9ad0ea9834d7128922a8acd275a90c7d2fc2871c23bf6e78448063302a102a4a5f64571df131df51868f8494940ec64233211af61378985836b55be4b6a57f757d9a", 0xac}, {&(0x7f0000000280)="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", 0x1000}, {&(0x7f0000001280)="7ac931cadff6f196d4151be52a77c6ff4619cbdcc451538681cca5395b05461c5ed1f0adc3f1152fc211a51b40511df834b59070be15387f3d06257f2cbd726d866f6a9a43e796a4445745cef2edf9d8d2d16daf1414b55e55c1206f31a6b33e89c1176e53e495fb0746d431145a4611e3d82dee4d59df9230cbce6d12b2f34edb06c47b14bb6d1b247f7f16d5310a455fc4946e21a70aeafbfe1e78ac32991d83ecd9a17c8f46265796458b0b0579104917f809de3a6129709d5dcfe044e68e13f4d3d5d68b0c214994e0622e9201b3a010681f517816a87a0a", 0xda}], 0x4, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x21e, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x40000000}, @random="029cce98941b", [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0x0, @remote={0xfe, 0x80, [0x29c, 0x80ffffff00000000, 0x700, 0x500000000000000, 0x0, 0x0, 0x80ffffff], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff81, 0x0, 0x0, 0x0, [0x14], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3]}, @mcast2}}}}}}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000001380)='keyring\x00', &(0x7f00000013c0)={'syz', 0x0}, 0x0, 0x0, 0x0) r1 = request_key(&(0x7f0000001400)='syzkaller\x00', &(0x7f0000001440)={'syz', 0x3}, &(0x7f0000001480)='posix_acl_access.^\x00', 0xfffffffffffffffb) keyctl$unlink(0x9, 0x0, r1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x15, 0x0, &(0x7f00000014c0)=0xffffffe9) r2 = semget$private(0x0, 0x3, 0x200) semctl$IPC_INFO(r2, 0x6, 0x3, &(0x7f0000001500)=""/13) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000000)) 15:10:38 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x200000, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1, 0x2}) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) close(r1) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f00000002c0)={0x8, 0x1, 0x5, 0x0, 0x0, [], [], [], 0xffffffffffffff8d, 0xffffffff}) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f00000000c0)={0x4}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000180)) sendto$llc(r0, &(0x7f00000001c0)="64f5776e8440b58a530407572ea461ea062528c0fabd1da108a6b39adec9f21449f6b3a785a946c0f3756522cfc5cf50c05ce47822bd7a1f33f76950f0bcda3c05aaf32c5d82b83790ba9c987116552ba1454f4b76ce1b4946e3d2b7cb16d8057a3016fd39a529cb2f1dbb96a52118a389d97997e77323a4c9fb1e9d747614cb02a3f0486b366ac4da373554ef421f081e550d68dd9fce72de74646a0a1dbf8d1c54afa0e23e095f49883f70db20b2d7e2345e3f7fc280cef5b69b438e46112a1b25375986fb8b74f2cb03e4099667ba0e9456acc8df8e69d7", 0xd9, 0x4000, &(0x7f0000000100)={0x1a, 0xffff, 0x101, 0x81, 0x0, 0xff, @remote}, 0x10) [ 281.779390] audit: type=1800 audit(1565190638.759:113): pid=15637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="file0" dev="sda1" ino=17239 res=0 15:10:38 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(0xffffffffffffffff) syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x2, 0x3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) 15:10:38 executing program 2: syz_mount_image$gfs2(&(0x7f0000000040)='gfs2\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={[{@lockproto_nolock='lockproto=lock_nolock'}, {@locktable={'locktable', 0x3d, '/dev/snd/timer\x00'}}]}) [ 282.080541] gfs2: fsid=_dev_snd_timer: Trying to join cluster "lock_nolock", "_dev_snd_timer" [ 282.138483] gfs2: fsid=_dev_snd_timer: Now mounting FS... [ 282.172746] gfs2: not a GFS2 filesystem [ 282.186812] gfs2: fsid=_dev_snd_timer: can't read superblock [ 282.204205] gfs2: fsid=_dev_snd_timer: can't read superblock: -22 [ 282.325769] gfs2: fsid=_dev_snd_timer: Trying to join cluster "lock_nolock", "_dev_snd_timer" [ 282.344459] gfs2: fsid=_dev_snd_timer: Now mounting FS... [ 282.361724] gfs2: not a GFS2 filesystem [ 282.365746] gfs2: fsid=_dev_snd_timer: can't read superblock [ 282.372172] gfs2: fsid=_dev_snd_timer: can't read superblock: -22 [ 282.393609] audit: type=1804 audit(1565190639.379:114): pid=15654 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir525748567/syzkaller.UwknhR/191/file0/file0" dev="loop3" ino=255 res=1 15:10:39 executing program 3: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xfff, 0x0) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000100)={'gretap0\x00', 0x3}) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r2, 0x1, 0x0, 0x369e5d84) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280), 0x12) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file1\x00', 0x0) 15:10:39 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x8905, &(0x7f00000001c0)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000000)={0x80000000}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x101000, 0x0) ioctl$SIOCX25GCALLUSERDATA(r3, 0x89e4, &(0x7f00000000c0)={0x4, "a1f45c9612a9e7380c6be3611dfa0eaef108674e20a17a709236d010ddf648aa6d0aa8e48b80cfdaf76e77b0ccde57c8e9f2854d6cbdc3bd5d894aa666ec20c51765c568426e289bd970ffb388d35ea37b16903518c9a303ffd24aa86975dbba7beaf27ac472ac6724fecf8d19773eb74e8b546e6f27e5eef343274efceda478"}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r2, 0x28, &(0x7f0000000200)}, 0x10) 15:10:39 executing program 1: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x8000, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f00000000c0)={0x9, 0x0, 0x6001, 0x6, 0x3ff, 0x6, 0xda}) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x669, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x47, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000880)='\'\xc4\'\v\xec\xe4\t\xc5r\x12-\x90\xda\x9a\x94\x02\xec\xea\x10\x90\x03\xcb\xf8\x1b6\xa5t\xd6\xd3\x93\xd3\xdf\x85P\x19G7Q\v\xdcHv\x03Qa\xf3\xd4\xfc(\x83\xfb\xf8C\xf6\x8a$\xb1\x90\xeb\'~\xa0\xd8\xc8\xe8\x94#\xcd\xd5Kp\xbf\xc0\x8d7\x1b?A(\xe8^\x9c\xff\x0f\x1ck\xbc\x95\x05\xcd\x17\xf7\x15o\xd4\xdc4\x84uw\xa6w\x0f\xea`1\xec\xb4\x04\xd5\r\x8d\xde\x1f]\x15\xe5\xe8\xd00\xe5\x8d\x9c\x9ec+\x02\x1d\xffa5\x94\xab\xddNe\xfe\x8c\xc4q\xbb#f\xc1\xb9\x81W\xa4$)!\v\x9b\xa7\b\x91\xe5\xeb\x88\x1c\x0f\xb2.Tr\xe4\x99\x9e\x03\xb4\xd2\xf9KW\xce\xd1cC\xd5\xcf\x97\xa9\xeab\xda\xd6:\xa91q\xf7\xc5\xc0C\xd1\'\x89\xee\x84T:\x88x\xe2\x83\xf2r\xf4&t@\x9e\xa4qf\xdf\xf4\xb5\x01\\a\x85\xd3\xe0\xb7\n\xe7\xed\x84Q\xd7s\xcd4B\xcbQ\xa4\x9f[\x99\xdfJ%\xa8\xfc\xe3`\xc1\x0fy\x12\x181\xa5|8\xc8\xe7\x9f@\xeb:\nJA\xc9\xbc\xd4~}\xce\xe8\xfejH\x8fb\xdd\xbcJ\vk\'\xe7Q\xfd\xaaA`\xb5\xa1\xe4\xf8\x9eG\xcfb\xe8@\x04\xe1\xf8\xacU)(S\xed\xffA\xfaqt\xb6$e\n\xc7\x9b\xb0X\xb6\xd4\t\x99^^\xc2>J\x16\xd0\x8c\xecy*\xa0\a\xe9Ar\xa6\xb4n9j\xe5\xba\x8a\n\xce2\xcf_\x1b.t)\x8d09A[-\xf6\xe7\xe8\x1f\x92>\xb8\xd4>-\xacY\x9e\x88\x96\xa7\xfa\xdaoL\xa6\xec\xe8\xd5\xbfaf\xd7\xfc\x03\x91w)\xcd\x1f\xbe\xc9R\xcfz\x03\xec\br\x83\x8bM-\xf8X\xfd\"\xb4RV\x7f\xda\xd3\xd4h\x1c\xdb\xbe\xa4U\xec\xcd\'\xbc\xd22\x85{,\xe6-,6\x9d\x85\xb4fL\b\x98\xe9@\xee\xc2.\xb3\xd6w\x10\x94\xb5%D\xe8\r\xfe\x98G\x82\fx,\xa2J\x12\x03ec\xd5e-\x1f6\xe7\xb6\xd9\xcf0J\xed\xb7\x9b\xfd\xfc\x00EQ\x1f\x00D\xc95\xdeG +\x1bp\xf4\t\x94\x87\xf1ZbO\xa6\xe9\f`u\xda\xb3\x1d\xf9\x94\x80\xc1\x17\xde(_\xa7\xe7\x11\x9a\xac\x8c\xb1\xd71\xc5\xe9\xd3n\xc2\xa4\x98P\x9aF\xc2\x93\xad@\xa9h\x96\x1b]2\x88\xf3\xd8\xc798\x8c\x9f\xd4W4\xf1}\aD\xa0\xd8\xda\xf4\x1bEx(t|\xf4Y\xfaJ\xc2GS\xc9R\xb5\xda\xa8\x9b\xaa\x01\xe2~\xd8f.#\x94\xbf\x85z\xbf\xa0x62L\x1f\x91\xd2\x1e%\x88\x1f\f\xabb\x8ds\x93\x9e\xed\xd2\xdb\x02\x0e\xcf\xf5\xaf\xc8>+\x03e\xb7\xba\xb9}\xca\xfc\xe8\xed\x9b\xa2\x9ey\bMv\x8f\x8a8\xfd;\x9a5J\xee\x9a\xae\x83>$\x8a6\x05P\x8c\x05\xb8\r\xcf\xdd\x15/\xa9\xa1\xd4\x87{\xc9I4\xe3 i\xa4\xc5\xe5l\x03?\xfdM&\xc0a9}h\x8ef\x10!\xf0\x99\x80\xb72\xcc\x06\'+\xf0\xa1\a\xeeSGH\x12\x068S7s\xd3\xdaT\"\xa9jk\xed\xa2IyM\xa3&t\xfeA\xa9\"\xb4\xec\xdex\x00\x80`p\x91\x84\xbfK\xb6\x00\xa7\xa2\x06\xce\xc8X\x7f\xd1@\xf1\xcf\xdf\xae\xdb\r\xf6h\xdf\xc6+\xac\r\x9f\xc2D\xdf\xd6\xde`\xa4\xf4\xbe#\tH\x06;a(`\xdcw\x1dc_\v\x046j\xf9`\r\xc0\a\x8d\x12:l\xc7j3E\xd7\xcaX\x97\xad\x93\xea\x99\xca\xd7m\xb8\x1e1\xb6Nz\"U/\x0eP\b=\x01W\xcd\xf1x\x85\xf4&\xe7\xf9W\x06\xa4\xf8&\xbc\xf4\xd0\xd2\xd1W\xee\x9a\xdd\xdbu\x0e\x9aV\xe2\xc5\x84`Bu\x12\xa8/=\x17\xc4F\x11\xdfm-)\xd9hc\xba\xb7\x91\xd9\x11\x9a,\x19\xf4]\xa7Y@B\x1f]\x97\x9f\xc2', r0}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000004c0)='\'\xc4\'\v\xec\xe4\t\xc5r\x12-\x90\xda\x9a\x94\x02\xec\xea\x10\x90\x03\xcb\xf8\x1b6\xa5t\xd6\xd3\x93\xd3\xdf\x85P\x19G7Q\v\xdcHv\x03Qa\xf3\xd4\xfc(\x83\xfb\xf8C\xf6\x8a$\xb1\x90\xeb\'~\xa0\xd8\xc8\xe8\x94#\xcd\xd5Kp\xbf\xc0\x8d7\x1b?A(\xe8^\x9c\xff\x0f\x1ck\xbc\x95\x05\xcd\x17\xf7\x15o\xd4\xdc4\x84uw\xa6w\x0f\xea`1\xec\xb4\x04\xd5\r\x8d\xde\x1f]\x15\xe5\xe8\xd00\xe5\x8d\x9c\x9ec+\x02\x1d\xffa5\x94\xab\xddNe\xfe\x8c\xc4q\xbb#f\xc1\xb9\x81W\xa4$)!\v\x9b\xa7\b\x91\xe5\xeb\x88\x1c\x0f\xb2.Tr\xe4\x99\x9e\x03\xb4\xd2\xf9KW\xce\xd1cC\xd5\xcf\x97\xa9\xeab\xda\xd6:\xa91q\xf7\xc5\xc0C\xd1\'\x89\xee\x84T:\x88x\xe2\x83\xf2r\xf4&t@\x9e\xa4qf\xdf\xf4\xb5\x01\\a\x85\xd3\xe0\xb7\n\xe7\xed\x84Q\xd7s\xcd4B\xcbQ\xa4\x9f[\x99\xdfJ%\xa8\xfc\xe3`\xc1\x0fy\x12\x181\xa5|8\xc8\xe7\x9f@\xeb:\nJA\xc9\xbc\xd4~}\xce\xe8\xfejH\x8fb\xdd\xbcJ\vk\'\xe7Q\xfd\xaaA`\xb5\xa1\xe4\xf8\x9eG\xcfb\xe8@\x04\xe1\xf8\xacU)(S\xed\xffA\xfaqt\xb6$e\n\xc7\x9b\xb0X\xb6\xd4\t\x99^^\xc2>J\x16\xd0\x8c\xecy*\xa0\a\xe9Ar\xa6\xb4n9j\xe5\xba\x8a\n\xce2\xcf_\x1b.t)\x8d09A[-\xf6\xe7\xe8\x1f\x92>\xb8\xd4>-\xacY\x9e\x88\x96\xa7\xfa\xdaoL\xa6\xec\xe8\xd5\xbfaf\xd7\xfc\x03\x91w)\xcd\x1f\xbe\xc9R\xcfz\x03\xec\br\x83\x8bM-\xf8X\xfd\"\xb4RV\x7f\xda\xd3\xd4h\x1c\xdb\xbe\xa4U\xec\xcd\'\xbc\xd22\x85{,\xe6-,6\x9d\x85\xb4fL\b\x98\xe9@\xee\xc2.\xb3\xd6w\x10\x94\xb5%D\xe8\r\xfe\x98G\x82\fx,\xa2J\x12\x03ec\xd5e-\x1f6\xe7\xb6\xd9\xcf0J\xed\xb7\x9b\xfd\xfc\x00EQ\x1f\x00D\xc95\xdeG +\x1bp\xf4\t\x94\x87\xf1ZbO\xa6\xe9\f`u\xda\xb3\x1d\xf9\x94\x80\xc1\x17\xde(_\xa7\xe7\x11\x9a\xac\x8c\xb1\xd71\xc5\xe9\xd3n\xc2\xa4\x98P\x9aF\xc2\x93\xad@\xa9h\x96\x1b]2\x88\xf3\xd8\xc798\x8c\x9f\xd4W4\xf1}\aD\xa0\xd8\xda\xf4\x1bEx(t|\xf4Y\xfaJ\xc2GS\xc9R\xb5\xda\xa8\x9b\xaa\x01\xe2~\xd8f.#\x94\xbf\x85z\xbf\xa0x62L\x1f\x91\xd2\x1e%\x88\x1f\f\xabb\x8ds\x93\x9e\xed\xd2\xdb\x02\x0e\xcf\xf5\xaf\xc8>+\x03e\xb7\xba\xb9}\xca\xfc\xe8\xed\x9b\xa2\x9ey\bMv\x8f\x8a8\xfd;\x9a5J\xee\x9a\xae\x83>$\x8a6\x05P\x8c\x05\xb8\r\xcf\xdd\x15/\xa9\xa1\xd4\x87{\xc9I4\xe3 i\xa4\xc5\xe5l\x03?\xfdM&\xc0a9}h\x8ef\x10!\xf0\x99\x80\xb72\xcc\x06\'+\xf0\xa1\a\xeeSGH\x12\x068S7s\xd3\xdaT\"\xa9jk\xed\xa2IyM\xa3&t\xfeA\xa9\"\xb4\xec\xdex\x00\x80`p\x91\x84\xbfK\xb6\x00\xa7\xa2\x06\xce\xc8X\x7f\xd1@\xf1\xcf\xdf\xae\xdb\r\xf6h\xdf\xc6+\xac\r\x9f\xc2D\xdf\xd6\xde`\xa4\xf4\xbe#\tH\x06;a(`\xdcw\x1dc_\v\x046j\xf9`\r\xc0\a\x8d\x12:l\xc7j3E\xd7\xcaX\x97\xad\x93\xea\x99\xca\xd7m\xb8\x1e1\xb6Nz\"U/\x0eP\b=\x01W\xcd\xf1x\x85\xf4&\xe7\xf9W\x06\xa4\xf8&\xbc\xf4\xd0\xd2\xd1W\xee\x9a\xdd\xdbu\x0e\x9aV\xe2\xc5\x84`Bu\x12\xa8/=\x17\xc4F\x11\xdfm-)\xd9hc\xba\xb7\x91\xd9\x11\x9a,\x19\xf4]\xa7Y@B\x1f]\x97\x9f\xc2') syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x5, 0x80000) recvfrom$inet(r0, &(0x7f0000000c40)=""/4096, 0x1000, 0x60, &(0x7f0000000180)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) 15:10:39 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(0xffffffffffffffff) syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x2, 0x3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) 15:10:39 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = accept4$unix(0xffffffffffffff9c, 0x0, 0x0, 0x80800) r1 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0xffffffffffffa9c3, 0x0) recvmmsg(r0, 0x0, 0xfffffffffffffe1b, 0x40002006, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r3 = open$dir(&(0x7f0000000380)='./file0\x00', 0x105802, 0x0) clock_gettime(0x0, &(0x7f0000000300)) write$9p(r2, &(0x7f0000001400)="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", 0x600) sendfile(r2, r3, 0x0, 0x10000) ioctl$sock_bt_cmtp_CMTPCONNDEL(r1, 0x400443c9, &(0x7f0000000000)={{0x5, 0x4, 0x9, 0x1c0, 0x5, 0x9}, 0x101}) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, 0x0) 15:10:39 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x20000803, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00'}, 0x45c) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x100, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x9) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$uinput_user_dev(r0, &(0x7f00000004c0)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x45c) fchmodat(r1, &(0x7f0000000040)='./file0\x00', 0x8) 15:10:39 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create1(0x10080000) close(r0) openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) [ 282.680626] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000641a) [ 282.687767] FAT-fs (loop3): Filesystem has been set read-only 15:10:39 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$midi(0x0, 0x2, 0x3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) 15:10:39 executing program 2: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r0, 0xae03, 0xffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x20000) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x0, 0x0, @loopback}, 0x1c) listen(0xffffffffffffffff, 0x80000000000000bd) ioctl$KVM_SET_BOOT_CPU_ID(r2, 0xae78, &(0x7f0000000000)=0x1) r3 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000180)=0x7, 0x4) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$RTC_WKALM_RD(r2, 0x80287010, 0x0) ioctl$VIDIOC_G_INPUT(0xffffffffffffffff, 0x80045626, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="67c771f89b03db9723301db5f7a808e9e97a2069fff64d70653b87e6f390b7fffa86d9a14f34a85420436b707a5fdaf326f367b415401ec65005ba99c2d1cb9445065994f3dd36ca15c042051838827455e6b843b3caf414f1cae349c1e373a35377a4e29257a0506992a8812de8df610bb652b25eaf", @ANYRES64, @ANYPTR64=&(0x7f0000000400)=ANY=[@ANYPTR64, @ANYRES32=r6, @ANYPTR, @ANYRES32=r4, @ANYPTR, @ANYPTR], @ANYRESOCT, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRESDEC, @ANYRES32=0x0, @ANYPTR, @ANYRES16], @ANYPTR=&(0x7f0000000480)=ANY=[@ANYRESDEC=0x0]], @ANYRES16=r3, @ANYRES64=r5], 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000cfc000/0x18000)=nil, 0x0, 0xfffffffffffffefd, 0x1, &(0x7f0000000180), 0x10000000000000a2) ioctl$BLKSECDISCARD(r1, 0x127d, &(0x7f0000000140)=0x7) close(r3) r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$RTC_PIE_OFF(r7, 0x7006) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r7, 0x40bc5311, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820004, 0x0, 0x0, [0x0, 0xeca7020000000000, 0x0, 0x0, 0x4000000000000000]}, 0x2c) [ 282.759822] audit: type=1800 audit(1565190639.739:115): pid=15691 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="file0" dev="sda1" ino=17239 res=0 15:10:39 executing program 1: r0 = syz_open_dev$cec(&(0x7f0000000180)='/dev/cec#\x00', 0x1, 0x2) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0) ftruncate(r0, 0x4937) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, 0x0) ioctl$PPPIOCGFLAGS1(r1, 0x8004745a, &(0x7f0000000000)) ioctl$CAPI_SET_FLAGS(r1, 0x80044324, &(0x7f0000000280)) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000001c0)={0x5, 0x8000, 0x2, 0x622}, &(0x7f0000000140)=0x10) r2 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f00000002c0)="f02720a535b541c3f749b23507ea56b6f8ee1c837e8dc01a0082d8b0902e3208c66cfc3eaace92f581f45ca5424786484a6ebdcb60075bc56e8afd5f740f641608ce69d7d45ed40824498fc626b557f1b95874679986dc34da01a3513a81473b7ff070d98881a7685b6ce5f333affe5fb0458095a58695c49e5191a76de45b144944cef76b67094083bcaf4c9eb5f43b145e5bbee89950b6d9e4919ede9ec5addda0dce597806c9f6a39585cdedf1ae3d1f6526f2c30aab7a1a0ded32a2acfe25f2d0c90db4a7648de935c5d75628b526f3d8b3a667451cfc0e57b1b37b737c0d27e92b69616338439e88bc55a112da8dcdf3f24", 0xf4, 0xfffffffffffffff9) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000200)={r2, 0xab, 0x9f}, &(0x7f00000003c0)={'enc=', 'raw', ' hash=', {'sha256-ssse3\x00'}}, &(0x7f00000005c0)="09036bd5a744cc4d64128407db4b0c3646615d82fabf48b7ddb3519f7696dccf15949b4ea29bd8813a05790d4a8f2a05114f84848958a62db221c7c2a196330921a5ca74023639f1846b777a75228108742294b4f3853eca6a4f50f83b58b73dc4fed0b868365f63b4ad0817af85d50e4ca3169eed28ac362144a63132786dae2c45788968bd362d6a4f28fc8623c4722c1ae34fba00253c6d20240e749630bcfe54af73bbc33858a98bd9", &(0x7f0000000680)=""/159) r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2) r4 = memfd_create(&(0x7f0000000040)='\x00', 0x4) ftruncate(r4, 0x1000000) lseek(r3, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) sendfile(r3, r4, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, 0x0) flistxattr(r1, &(0x7f00000004c0)=""/164, 0xa4) fadvise64(r0, 0x0, 0x5, 0x3) 15:10:39 executing program 5: r0 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x10000) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x3}, 0xc, &(0x7f00000003c0)={&(0x7f00000001c0)={0x1dc, r1, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x28, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x40}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}]}, @TIPC_NLA_NET={0x34, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xcd}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA={0x8c, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc0f6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffffffff7336}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffffffffeef2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_BEARER={0x14, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'vcan0\x00'}}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0x54, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}]}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x4}, 0x40850) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x1, 0x600402) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x6, @mcast1, 0x3}, 0x1c) close(r2) openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000780)) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000180)) 15:10:39 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$midi(0x0, 0x2, 0x3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) 15:10:40 executing program 3: syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xfff, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r1, 0x1, 0x0, 0x369e5d84) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280), 0x12) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file1\x00', 0x0) 15:10:40 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000180)=[@in={0x2, 0x4e24, @multicast2}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={r1}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000001c0)={r1, 0x2}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x9, &(0x7f0000000240)={r2}, &(0x7f0000000280)=0x20000248) r3 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x80, 0x40) ioctl$DRM_IOCTL_GET_MAP(r3, 0xc0286404, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, 0x1, 0x3, 0x8, &(0x7f0000ffd000/0x3000)=nil, 0x7f}) 15:10:40 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r1) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x400, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={0x0, 0x6}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f00000001c0)={r3, 0x1f}, 0x8) r4 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000000000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000040)={0xe6dcd43032bac84, 0x1, [0x3, 0x9, 0x401, 0x9, 0x3, 0x5, 0x6]}) r5 = getpgid(0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r4, 0x800448d3, &(0x7f0000000200)={{0x4, 0xdf, 0x73f0, 0x46e9, 0x8, 0x3be}, 0x3, 0x345, 0x7ff, 0x96, 0x800, "d94bd4580d7497dc4337bcdd0fa941677b8f253f872812ca92aaa210dafd4b9b8b6aa78105beeb9fc7e1d3bc66c204836d6f5b6ae35191e9659d1341e1f88de87d5a3f253143e5f833b6880a51eacec20bb32b604f8a25f997ec59431da0d5249a8cb56c9095cf41d17989ea3deaa94352df24bb2346d27fcd03ef518b683072"}) ioprio_get$pid(0x2, r5) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) 15:10:40 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$midi(0x0, 0x2, 0x3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) 15:10:40 executing program 0: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$restrict_keyring(0x1d, r3, 0x0, &(0x7f0000000240)='/dev/loop-control\x00') unshare(0x205fd) prctl$PR_GET_TIMERSLACK(0x1e) fstat(0xffffffffffffffff, 0x0) r4 = fcntl$getown(r0, 0x9) sched_rr_get_interval(r4, &(0x7f0000000040)) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x3f, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r6 = openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x60c300, 0x0) symlinkat(0x0, r6, &(0x7f0000000340)='./file0\x00') ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r7) getsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x1fe) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, &(0x7f0000000400)=""/169) ioctl$sock_inet6_tcp_SIOCATMARK(r2, 0x8905, 0x0) 15:10:40 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x0, 0x3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) 15:10:40 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "69754b98dcd352e83adb81ab18a870549a8b7679d8acb22b2f12805792dafcf81b4410e9e47ddc18e9bd9cff7a32696338eed5e63b6c1ab9c7f046266f49b142093c1bb814dc2e226608641b3d0a5906888f"}, 0x56) mmap(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x1, 0x15, r1, 0x4) 15:10:40 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[], 0xffffffc0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) clock_adjtime(0x38b445dff79fa5c8, &(0x7f0000000080)={0x1ff, 0xed21, 0x5, 0x5, 0x5, 0x6, 0x5, 0x1f, 0x40, 0xffff, 0x2, 0x1, 0x100000001, 0x6, 0x1, 0x2, 0x40, 0x14, 0xb0d, 0xffffffff, 0x3, 0x9f64, 0x8, 0x4, 0x3, 0x200}) r2 = gettid() dup2(r1, r0) tkill(r2, 0x1000000000013) [ 283.304327] syz-executor.0 (15691) used greatest stack depth: 23856 bytes left 15:10:40 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x0, 0x3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) 15:10:40 executing program 1: r0 = syz_open_dev$cec(&(0x7f0000000180)='/dev/cec#\x00', 0x1, 0x2) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0) ftruncate(r0, 0x4937) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, 0x0) ioctl$PPPIOCGFLAGS1(r1, 0x8004745a, &(0x7f0000000000)) ioctl$CAPI_SET_FLAGS(r1, 0x80044324, &(0x7f0000000280)) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000001c0)={0x5, 0x8000, 0x2, 0x622}, &(0x7f0000000140)=0x10) r2 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f00000002c0)="f02720a535b541c3f749b23507ea56b6f8ee1c837e8dc01a0082d8b0902e3208c66cfc3eaace92f581f45ca5424786484a6ebdcb60075bc56e8afd5f740f641608ce69d7d45ed40824498fc626b557f1b95874679986dc34da01a3513a81473b7ff070d98881a7685b6ce5f333affe5fb0458095a58695c49e5191a76de45b144944cef76b67094083bcaf4c9eb5f43b145e5bbee89950b6d9e4919ede9ec5addda0dce597806c9f6a39585cdedf1ae3d1f6526f2c30aab7a1a0ded32a2acfe25f2d0c90db4a7648de935c5d75628b526f3d8b3a667451cfc0e57b1b37b737c0d27e92b69616338439e88bc55a112da8dcdf3f24", 0xf4, 0xfffffffffffffff9) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000200)={r2, 0xab, 0x9f}, &(0x7f00000003c0)={'enc=', 'raw', ' hash=', {'sha256-ssse3\x00'}}, &(0x7f00000005c0)="09036bd5a744cc4d64128407db4b0c3646615d82fabf48b7ddb3519f7696dccf15949b4ea29bd8813a05790d4a8f2a05114f84848958a62db221c7c2a196330921a5ca74023639f1846b777a75228108742294b4f3853eca6a4f50f83b58b73dc4fed0b868365f63b4ad0817af85d50e4ca3169eed28ac362144a63132786dae2c45788968bd362d6a4f28fc8623c4722c1ae34fba00253c6d20240e749630bcfe54af73bbc33858a98bd9", &(0x7f0000000680)=""/159) r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2) r4 = memfd_create(&(0x7f0000000040)='\x00', 0x4) ftruncate(r4, 0x1000000) lseek(r3, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) sendfile(r3, r4, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, 0x0) flistxattr(r1, &(0x7f00000004c0)=""/164, 0xa4) fadvise64(r0, 0x0, 0x5, 0x3) 15:10:40 executing program 3: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xfff, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/cachefiles\x00', 0x400, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x58, 0x0, &(0x7f0000000400)=[@release={0x40046306, 0x3}, @release={0x40046306, 0x3}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/145, 0x91, 0x2, 0x27}, @fd={0x66642a85, 0x0, r1}, @flat=@handle={0x73682a85, 0x100b}}, &(0x7f0000000100)={0x0, 0x28, 0x40}}}, @register_looper], 0xcb, 0x0, &(0x7f0000000480)="293788b951d9eb692fffc716fd5058599c3a47fd8de2370348fc31d98c71e264e8769676e7cda3bcdfcbe66875e79322c1826cc3f39741696d79055232d1877c5cb9aad7493fd916520089b2e8d2bd422cb4719cc150a46d3ae62a88d3d93c9443892f2fb7cabdc0c8059a700d780ae609726dd4453182f21aa587ad659a0ab3cfe8e008a41086f084d09ba94ddc189a4db4d67b5cbbbfa918e5456fa402f6ff09cef58a2c3e661ffda5c5eff57a287257ecfb33433c52895b268061af6f765bf0e498141cdf7a9610e009"}) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r2, 0x1, 0x0, 0x369e5d84) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280), 0x12) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000005c0)='./file1\x00', 0x40) 15:10:40 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x200000000000011, 0x80000000000003, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0x2000, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000000300)={0x2, 0x3}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f0000000140)={r7}, &(0x7f0000000180)=0x8) setsockopt$sock_void(r4, 0x1, 0x24, 0x0, 0x0) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/relabel\x00', 0x2, 0x0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f00000001c0)={r8, 0x2}, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x0) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) lsetxattr$security_evm(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='security.evm\x00', &(0x7f0000000280)=@md5={0x1, "f4a1472cd9db7f71c47ad600a826d3b2"}, 0x11, 0x1) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x0) 15:10:40 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) fadvise64(r0, 0x0, 0xfff, 0x2) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) setsockopt$netrom_NETROM_T2(r2, 0x103, 0x2, &(0x7f0000000140)=0x80000000, 0x1) r3 = getpgrp(0x0) r4 = syz_open_procfs(r3, &(0x7f0000000000)='io\x00') ioctl$SIOCAX25GETINFOOLD(r4, 0x89e9, &(0x7f0000000040)) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/status\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) 15:10:40 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x0, 0x3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) 15:10:40 executing program 5: r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f00000000c0)={0x80002004}) r1 = epoll_create1(0x0) close(r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f0000000000)=""/5, 0xff}) openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) 15:10:40 executing program 0: pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x80000040000) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000100)) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x335) gettid() bpf$MAP_CREATE(0x0, &(0x7f0000000600)={0x6, 0xf9d1, 0x0, 0x1, 0x0, 0x1, 0x6, [], 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x3c) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x142, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000080)=ANY=[@ANYBLOB="00ffffffff"]) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)=@ipx={0x4, 0x0, 0x8, "f3cbafb12fc1"}, 0x80, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0c0583b, 0x20000005) ioctl$sock_bt_cmtp_CMTPCONNADD(r1, 0x400443c8, &(0x7f0000000140)={r0, 0x5fff}) accept4$ax25(r0, &(0x7f0000000340)={{0x3, @netrom}, [@null, @remote, @netrom, @null, @null, @rose, @null, @bcast]}, &(0x7f00000002c0)=0x48, 0x80000) r4 = msgget(0x2, 0x100) msgctl$IPC_INFO(r4, 0x3, &(0x7f0000000200)=""/184) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0}, 0x18) 15:10:40 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) 15:10:40 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) getsockopt$MISDN_TIME_STAMP(r2, 0x0, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) 15:10:40 executing program 2: r0 = perf_event_open(&(0x7f0000014f88)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000440)=[{&(0x7f0000000040)=""/8, 0x8}, {0x0}, {&(0x7f0000000140)=""/133, 0xfffffffffffffd65}], 0x3) 15:10:41 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) 15:10:41 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) r1 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x22000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x2c, r2, 0x328, 0x70bd2a, 0x25dfdbfe, {{}, 0x0, 0x4102, 0x0, {0x10, 0x13, @udp='udp:syz0\x00'}}, ["", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x8004) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)=ANY=[@ANYBLOB="020d0000140000000000000000000000080012000000030000000000000000000600000000000000000000000000000000000000000000000000000000000000ff0200000000000000000000000d000105000500000000000a0000000000000000000000000000000000ffffac141400000000000000000005000600000000000a00000000000000fe8000000200000000000000000000ff0000000000000000"], 0xa0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dlm-monitor\x00', 0x400400, 0x0) ioctl$VT_RESIZE(r5, 0x5609, &(0x7f00000003c0)={0x1, 0x7, 0x2}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0xfa) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) close(r0) r6 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x8, 0x141800) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r6, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xffffffffffffff00, &(0x7f0000000280)={&(0x7f0000000200)={0x28, r7, 0x8, 0x70bd28, 0x25dfdbfd, {{}, 0x0, 0x410c, 0x0, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) [ 283.985672] kauditd_printk_skb: 2 callbacks suppressed [ 283.985682] audit: type=1804 audit(1565190640.969:118): pid=15800 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir525748567/syzkaller.UwknhR/194/file0" dev="sda1" ino=17316 res=1 15:10:41 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x10005, 0x2, 0x100000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x2, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000100)={0x8001, 0x1f, 0x5, 0x7, 0x9}, 0x14) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000000)={0x7e, 0x5, [0x4b564d03], [0xc1]}) 15:10:41 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x200000000003, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(r0, &(0x7f00000058c0)=[{{&(0x7f0000000100)=@nfc, 0x80, &(0x7f00000023c0)=[{&(0x7f0000000080)=""/31, 0x1f}, {&(0x7f0000000180)}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/24, 0x18}, {&(0x7f0000001200)=""/108, 0x6c}, {&(0x7f0000001280)=""/4096, 0x1000}, {&(0x7f0000002280)=""/139, 0x8b}, {&(0x7f0000002340)=""/73, 0x49}], 0x8}, 0x2}, {{&(0x7f0000002440)=@can, 0x80, &(0x7f0000002900)=[{&(0x7f00000024c0)=""/236, 0xec}, {&(0x7f00000025c0)=""/47, 0x2f}, {&(0x7f0000002600)=""/194, 0xc2}, {&(0x7f0000002700)=""/9, 0x9}, {&(0x7f0000002740)=""/146, 0x92}, {&(0x7f0000002800)=""/195, 0xc3}], 0x6}, 0x7}, {{&(0x7f0000002980)=@ipx, 0x80, &(0x7f0000003d80)=[{&(0x7f0000002a00)=""/135, 0x87}, {&(0x7f0000002ac0)=""/245, 0xf5}, {&(0x7f0000002bc0)=""/74, 0x4a}, {&(0x7f0000002c40)=""/39, 0x27}, {&(0x7f0000002c80)=""/4096, 0x1000}, {&(0x7f0000003c80)=""/203, 0xcb}], 0x6, &(0x7f0000003e00)=""/101, 0x65}, 0x2}, {{&(0x7f0000003e80)=@alg, 0x80, &(0x7f0000004000)=[{&(0x7f0000003f00)=""/62, 0x3e}, {&(0x7f0000003f40)=""/165, 0xa5}], 0x2, &(0x7f0000004040)=""/193, 0xc1}, 0x6ef}, {{&(0x7f0000004140)=@x25, 0x80, &(0x7f00000051c0)=[{&(0x7f00000041c0)=""/4096, 0x1000}], 0x1, &(0x7f0000005200)=""/182, 0xb6}, 0x6}, {{&(0x7f00000052c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000005480)=[{&(0x7f0000005340)=""/197, 0xc5}, {&(0x7f0000005440)=""/64, 0x40}], 0x2, &(0x7f00000054c0)=""/186, 0xba}, 0x1}, {{0x0, 0x0, &(0x7f0000005780)=[{&(0x7f0000005580)=""/38, 0x26}, {&(0x7f00000055c0)=""/11, 0xb}, {&(0x7f0000005600)=""/144, 0x90}, {&(0x7f00000056c0)=""/121, 0x79}, {&(0x7f0000005740)=""/34, 0x22}], 0x5, &(0x7f0000005800)=""/160, 0xa0}, 0x9}], 0x7, 0x40000020, &(0x7f0000005a80)) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0), 0xe2f) 15:10:41 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$inet(0x10, 0x2, 0x0) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00'}, &(0x7f0000000000)=0x44) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="24000000180007841dfffd946f610500020081001f03fe050400080008000b000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 15:10:41 executing program 3: mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xfff, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r1, 0x1, 0x0, 0x369e5d84) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280), 0x12) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file1\x00', 0x0) 15:10:41 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) 15:10:41 executing program 0: prlimit64(0x0, 0x7, &(0x7f00000001c0), 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x200, 0x0) 15:10:41 executing program 0: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000600)='./bus\x00', 0x2) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x463, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(r3, 0x0) getegid() r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000880)='/dev/dlm_plock\x00', 0x3e, 0x0) timer_create(0x3, &(0x7f0000000100)={0x0, 0x35, 0x2, @thr={&(0x7f00000003c0)="e6afd524fe871bc604ca7eeedba021e750993338714ca29e44a1c640c3d7c912e0c53a38dce0f2914cf1489e5ec56b4f5a701eec29199fe9b59902613598c466d6f6df3a56bfff600bbde286437b8ce07bc54bbe8277505278b4550bb943d9f0108c8719d5f1bf88e158f215fd97920302fe55a9a3", &(0x7f00000004c0)="2fed351e72ce873b8d63ed8f0db4e6f4fce1c91b995b1d863ae4b3a8f2765dca9cff76079360f1c7822cbd712700fc5bfec3ddbb135455e84ccc12956ab8849a535df3a41b3adbefac2736643bd3baf05b559c47fe80c747080aa56f73fef85923bbe683d188ec254766483e5896ee4806ccde27e05c745982d4f212ab6c653c0f94"}}, &(0x7f0000000580)=0x0) timer_gettime(r6, &(0x7f00000005c0)) fstat(r1, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000140), &(0x7f00000001c0)=0xb) setsockopt$nfc_llcp_NFC_LLCP_RW(r2, 0x118, 0x0, &(0x7f00000000c0)=0x7fffffff, 0x4) lstat(&(0x7f00000009c0)='./bus\x00', &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x5, &(0x7f00000007c0)=[0x0, 0x0, 0x0, r7, r8]) ioctl$DRM_IOCTL_RM_CTX(r5, 0xc0086421, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000004, 0x0, 0x0) setsockopt$sock_void(r0, 0x1, 0xbb6421b9e5d58d2f, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x5, 0x70, 0x7, 0x8, 0x0, 0xd7e4, 0x0, 0x0, 0x44, 0x4, 0x5, 0x3, 0x200, 0x0, 0x7, 0x0, 0x0, 0x1, 0x1000, 0x2, 0x9, 0x9, 0x2, 0xffffffffffff8000, 0x3f, 0x0, 0x1000, 0xff, 0x7, 0x800, 0x58, 0x0, 0x9, 0x5, 0x7, 0x2, 0x9, 0xe3e, 0x0, 0x0, 0x6, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x1ff, 0x0, 0x6, 0x3f8ba28b, 0x6}, 0x0, 0xd, r0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000340)=0xc7) sendto$inet6(r2, &(0x7f0000000200)="90992a9622260859ba34523ef1da7b6cbae78d2cf1a7a1e674a372adab32b8fc4af30500eed3ae05b4d607e675a1", 0x2e, 0x0, 0x0, 0x0) ioctl$EVIOCGMASK(r2, 0x80104592, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x6, 0x1, 0x1, 0x5, 0x0, 0x2, 0x402, 0x1, 0x3, 0x4, 0xfff, 0x9, 0x7, 0xffffffff, 0x3ff, 0x2, 0x8000, 0x200000000000, 0x7, 0x6, 0x6, 0x202, 0x10000, 0xffffffffffffff00, 0x7, 0x6, 0xffffffff, 0xd6c, 0xfffffffffffffff7, 0x8000, 0x80000001, 0xffffffff7fffffff, 0x4, 0x3, 0x4a, 0x7fff, 0x0, 0x9, 0x2, @perf_config_ext={0x7, 0x1}, 0x20, 0x4, 0x2139, 0x6, 0x40000000000, 0x4, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0x2) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000000300)) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f00000002c0), &(0x7f0000000640)=0x4) [ 284.639718] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 15:10:41 executing program 4: r0 = epoll_create1(0x0) epoll_create1(0x0) close(r0) syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x2, 0x3) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000780)) 15:10:41 executing program 1: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x74, 0x800) read(r0, &(0x7f0000003880)=""/4096, 0xffffffffffffffcc) [ 284.799042] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 15:10:41 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x60000, 0x0) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f0000000240)=""/210) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'lo\x00@\x00', 0x1801}) socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r2, 0x320, 0x70bd27, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x20000000) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x20000000000, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000100), &(0x7f0000000180)=0x68) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) getsockopt$inet_mtu(r1, 0x0, 0xa, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000000440)={0x7}, 0x4) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c) splice(r5, 0x0, r4, 0x0, 0x1000000000000003, 0x0) inotify_init1(0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x1ff) sendto$packet(r5, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) 15:10:41 executing program 4: r0 = epoll_create1(0x0) epoll_create1(0x0) close(r0) syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x2, 0x3) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000780)) 15:10:41 executing program 5: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0}, 0x68) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x400002172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0xe000, 0x3, &(0x7f0000ff2000/0xe000)=nil) read$FUSE(r0, 0x0, 0x116) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000000000)=""/74, &(0x7f0000000100)=0x4a) 15:10:41 executing program 1: mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x100000000004032, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x801, 0x0) write$P9_RRENAMEAT(r0, &(0x7f0000000040)={0x7, 0x4b, 0x2}, 0x7) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$int_in(r1, 0x5452, &(0x7f0000000100)) 15:10:41 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cachefiles\x00', 0x10103e, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000440)={0x1, &(0x7f0000000740)=[{}]}) close(r2) r3 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x5, 0x2) r4 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x1, 0x2) ioctl(r3, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000002c0)=0xc) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000300)={{{@in=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@remote}}, &(0x7f0000000400)=0xe8) mount$9p_fd(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0)='9p\x00', 0x1000000, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@posixacl='posixacl'}], [{@obj_role={'obj_role', 0x3d, '^!V'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '/dev/cachefiles\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/swradio#\x00'}}, {@euid_lt={'euid<', r5}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@fowner_lt={'fowner<', r6}}]}}) ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, &(0x7f0000000180)) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000800)=0x7) ioctl$DRM_IOCTL_GEM_CLOSE(r4, 0x40086409, &(0x7f0000000140)) r7 = socket(0x100000000080011, 0x3, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) bind(r7, &(0x7f0000000000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) r8 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r8, 0x87ffd) sendfile(r2, r8, 0x0, 0x800000000024) getresuid(&(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) mount$9p_fd(0x0, &(0x7f0000000480)='./bus\x00', &(0x7f00000004c0)='9p\x00', 0x0, 0x0) 15:10:42 executing program 1: r0 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x200, 0x298000) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f00000000c0)=""/146, &(0x7f0000000180)=0x92) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000700)) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000740)={0x1, 0x2f3, 0x85, 0x800, 0x2}) openat$cgroup_ro(r0, &(0x7f00000005c0)='memory.current\x00', 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000600)="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") r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x0) ioctl$KVM_SET_LAPIC(r0, 0x4400ae8f, &(0x7f00000001c0)={"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"}) [ 285.101338] 9pnet: Insufficient options for proto=fd 15:10:42 executing program 3: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) prctl$PR_GET_DUMPABLE(0x3) r0 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xfff, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r2, 0x1, 0x0, 0x369e5d84) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280), 0x12) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, 0x0, 0x2ef) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file1\x00', 0x0) 15:10:42 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x6, 0x800) ioctl$sock_netdev_private(r1, 0x89f6, &(0x7f0000000180)="057cf1bc7b355ca0b91bc0bf708f520e11e34a55fd0a392f6e5fe51dc53a7c547e24dc77f8e83068a600beec33f27d91874795d031fa681979067ff84991befd9c8a68f040e606144b202526320b684bfc98ae9d73a04cd5dcbba73f3681077b2a2083fb4038b1dd4e0dbdee2b7eda2a63b0fc077bb9cd544989e0a13a1e5ccc3015736d1c8301d71fde6a79fcef3cac801db9550d5b4d5a9a0dd0952b5b24abe5bf092293642bb5bffc3085ff39fc32013358836aa474ac52d5c956e07789bf") stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETOWNER(r1, 0x400454cc, r2) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000300)={'batadv0\x00', {0x2, 0x4e23, @broadcast}}) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x875c, 0x0, 0x4c51a1c6}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) add_key$user(0x0, &(0x7f0000000080)={'syz'}, &(0x7f0000000140)="f7f1ffab1d3504", 0x7, 0xfffffffffffffffd) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SMI(r4, 0xaeb7) ioctl$KVM_RUN(r4, 0xae80, 0x0) madvise(&(0x7f0000327000/0x3000)=nil, 0x3000, 0x9) [ 285.273779] audit: type=1804 audit(1565190642.249:119): pid=15832 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir525748567/syzkaller.UwknhR/195/file0/file0" dev="loop3" ino=257 res=1 15:10:42 executing program 2: r0 = socket(0x2200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @remote}, 0x10) 15:10:42 executing program 4: r0 = epoll_create1(0x0) epoll_create1(0x0) close(r0) syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x2, 0x3) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000780)) 15:10:42 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000000)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff88, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x8001, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd1, 0x48, 0x0, 0xfffffffffffffef5) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000c10000cc1e0d30709f12e53fc537f60000002d9406fb"]) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) 15:10:42 executing program 1: r0 = socket(0x5, 0x5, 0x5) recvfrom$inet(r0, &(0x7f0000000000)=""/62, 0x3e, 0x102, &(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000080)={0x80, 0x800, 0x80000000, 0x5}, 0x10) socket$inet(0x2, 0x4, 0x100) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x10d040, 0x0) ioctl$TIOCGISO7816(r1, 0x80285442, &(0x7f0000000100)) [ 285.421204] kvm: emulating exchange as write 15:10:42 executing program 2: mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xfff, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r1, 0x1, 0x0, 0x369e5d84) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280), 0x12) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file1\x00', 0x0) 15:10:42 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x2, 0x3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000780)) 15:10:42 executing program 1: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000000040)={0x0, 0xffffffffffffff13, &(0x7f0000000240)=[{&(0x7f0000000100)="24000000100007031dff22946fa2830020200a0009000300001d85687f0000000400ff7e280000000b0a43ba5d806055b6fdd80b40000000140001000029ec2400020cd37e99d69cda45a95e", 0xffffff14}]}, 0x0) 15:10:42 executing program 0: bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x2000000000004e23, @loopback}, 0x10) getrandom(0x0, 0xfffffe7f, 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x101001) r1 = open(0x0, 0x40000, 0x1a) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0) write$evdev(r0, &(0x7f0000000000)=[{{0x0, 0x7530}}], 0xffe8) ioctl$ION_IOC_HEAP_QUERY(r2, 0xc0184908, &(0x7f0000000200)={0x34, 0x0, &(0x7f00000001c0)}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0xc05c5340, &(0x7f0000000100)={0x80000000, 0x9, 0x6, {0x77359400}, 0x7, 0xab8}) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f00000000c0)) 15:10:42 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x380000, @ipv4}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@local={0xfe, 0x80, [0xa4ffffff]}}, &(0x7f00000004c0)=0x20) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x2000, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, &(0x7f00000000c0)={0x8001, 0x0, 0x0, 0x7}) 15:10:42 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x202300}, 0xc, &(0x7f0000000340)={0x0}}, 0x0) sysinfo(&(0x7f0000000000)=""/22) sendmsg(0xffffffffffffffff, &(0x7f0000003500)={0x0, 0xfffffffffffffef0, &(0x7f00000034c0), 0x0, 0x0, 0x2b2}, 0x0) ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, &(0x7f00000003c0)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @netrom, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) r2 = socket$inet(0x10, 0x7, 0xfffffffffffffbff) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'rose0\x00', 0x2}) times(&(0x7f00000004c0)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r3, 0x400448ca, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_G_TUNER(r1, 0xc054561d, &(0x7f0000000540)={0x1f, "d2a1b33086e6097bb24a7aa4bbb15f102f5d96c7437aff4a67ec0e4513a49b6f", 0x1, 0x20, 0x10000015d, 0x1f, 0x2, 0x3, 0xa, 0xfffffffffffff7fb}) ioctl$sock_ifreq(r2, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\x00\x00\'v\x01\x03\xf2\x00', @ifru_flags}) fallocate(r1, 0x11, 0x7f, 0x2) write$FUSE_WRITE(r0, &(0x7f0000000100)={0x18, 0x0, 0x5, {0x7}}, 0x18) socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000000500)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000200)=""/180) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f00000002c0)=""/48, &(0x7f0000000300)=0x30) sendmsg$nl_route_sched(r1, &(0x7f0000003480)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003440)={&(0x7f00000005c0)=ANY=[@ANYBLOB="5c2e00003000000827bd7000fbdbdf2500000000e8000100e4001b0000000c000100706f6c6963650000400002003c000100400000000100000003000000010000000300000004030100f8ffd500000001000400ffffff016700010000000300000007000000ff0f0000900006000cd440b30e182829f185ed94aa5777b7c104d289916a2f22a3e7c51da717d6e8d75679f510b5f267ee2e66b34ab892d3919d3dba0c9b4a7b2894568e92cf94c986365da47b471966f9c0cdec9a7397d9b005a33d3fcf6d091083a8140398b2319208f36ec2034d80f45968a055866a2813b829f5f05a9d08a7b21b2c3dd4434c4a292b6a6955ef72be8bdf000000e0000100dc001a00000010000100636f6e6e6d61726b00000000200002001c000100ffff00000101000001000000220000000400000002000000a4000600fd2372d3e95e657218adc7d49fcff29c80a4617eb21808e3f18420178a9d8ec531557f7ad846862138a0a69ee19409ba9aee6e0cb73cf215297c2ff3536e39fcf8f9e090449f0632c50f1915fd71a262979b0f7f9ef5fa9088d84885b9de668d9020a3cccb64926a0b9afce883e0d7b4446d3c6d6553abe4d6660f1987f3eaa403ff31bb56b122c0e1a7f9653b698be6bc82cfc089b8edbd7c402182ea00000000008c10010088100600000008000100697074007400020014000100736563757269747900000000000000000800030009000000140001007365637572697479000000000000000008000200070000001400010066696c74657200000000000000000000080003000800000008000300ff0f0000140001006e61740000000000000000000000000004100600a35b52bb946cf9408fcff56c5e39d99a2a42932f30e9ac739ff316a50186ca0d166a60a5a458bce3e155d8e8cd9e1945f19ddbe2aabab9da04c02c97d75ab585a97977226b6595a3413703e1b63f0b7d40a3690b122708b1ad7c457e10434375018bd9b86afd8ae16aca0b247df2ce94687450bcb1f49be121e5ff343c77d76a1a58d2d1b21870e9ba72693ed2e4049123ed1e4cd94337ab4f0e34482a8edddee6d00bf12f8c92b4c27fbab377f164357dff8ab26d7d3147d9408778fdf4f853c86c38f9c4babb8de175afe2472e1f2e6392e1305394614aa23dad8ebea5a29b4d838ee7a4bc7574ee248dc73abc7892b1ff755ddb42a2335126e15fdff91a25f9dbb6f8f97edaa2055259bd5f1efcb4f0eed67a4febfa8c1024997ca2bbdd55e244a98ceffdd547e736cdc6aaa5c309dd837370294c6cc07c94866af1c00ddb483e1dd03b125a0e606ee83f50004fa6e047821ed48791d37784834e0be2aa75d32f152796f1181d0fb8265f2a8fba453d31472626459111e7ec07f7ef09406588373a986608e6ab276e094968d975fbdded42303624311db18f1239316e65a9f2a2a03654bd35bbcc6699d1d6f0c0335d61a9527851c5335b61614fbd328b52a48ab6c6a583a6ad76cd93f5b2f9ecf13459b0d7fff680cba6f6722184aac5ba3ee331d62ae41d3a9228f68bf44c36c23e194ff3790ec70f71d6a76d9eee01e6cf1f64c909c01909436badd54a84fd1957b531681bba5f829b6a8dc24845da7e83b0778f680d673bad930ffe6b30f138b9d963776db994831cec6db7b5abec945c9677f1f5b586bbb9031e068f0604f62b520935f794601b948b2fc981f855f3013202168bcec721a36df1e187e57dd5b8665e45114365b811265d28e5f49dd0af9dd7ec7ee3287367bfd5d496084e3102641ae4531fe2ea6b5306e0a31e5f1e745410ad96ccc87254b471c8793ceca54d5baeb35e5d6ee23811e4a9151a66c1be3719144f023230fd6685de428bc6f4c7f44667bb4065c8927601d06c8a64064a072a63f070e03a3e0f354405893ce9a85d300a1a61906c48c770201ad22a1c93490b7f7f0cc3898f2c8a1f5e03247fe559d2d2463a07f349cbe4aac943d7c6868faef523d74741f74b4dd5f067743e1164e1cb24c9570a785a21cda40dcb3fbc47c00733e32d82a7a9b3a7732e3d9e93d2f3523498e9d8e29b63fd00a92bfed1e24b03b4d236656eee488ee87dac46e1d8ad5201855ad8463cea949d653a601a61f24e43e68a4cefdeed07cda9fe7a54230e0038eaa3a408ed2ac695a4e49770203456f7ae2e4359549257e1f3c53f65f773e534279f40f7d7037cab24b2bfd5628345a5767a7d9b5e700f38cf5fa3f2065d4059e1141a1d055e75e882f04f2c028dad70a2ec8c379cbf6aaae28541f48d386088228d91c9504866b36b332f8c499485c74f1d5cd3e1984611da06877e3d9c83d0453f1feaf17c4751e956c8099b207755ede87ec0ddc097a3b6350c1f3767aeeba3a3ed376a6cd280b522b222423b0bb04104e9326fe61619dad00a590b3b3a16fbf29f594f16519675140cbdf89bfd134ea12c438f70ae81fdc382b3024a67bd1355d2d0fbb091d3c3fc30f75968155f69c1086b553a55c48e9ef3397dd96007d86aa6395c96a2b3ba3d5b11cb1404b5bfa65ca826f4bacc9a9a0fe97a562cea57c9c3ce881e144f37e6c772680dfeb3fc4843aee8b98b6128f96a2634a894880a2f8ca3f8875503d6a00f41c9f2db2382547bdaf2d9f47d37b3f3b347e7e1cd538c58e03d7d63890900fa96043ace2c5094e2463a19c2a39f11808b3afcf2e23632556eb88bae61779cc5be9751eb8603753d8570cfbed218de1dbd4f03dbb7bab67bf4c2ad2d2107bd8013499a581eccdee1fd6dae725cbd9fcb10524d566d40ae4db1a29001e943f76454648bba46d98582cbe46f7554baf4fa668fcae2371a41ebf7273a3af159c3491262f76e3e04544d1d1dd1a1f847010e95d8248ddfb6733a638d22de638fce5b3bfa840c43355b124fec040ad1f058d12d041e489d9e9788f70c24f563f8986bf1357d0afe20bd37b117160692fc7dc8a01fba0f840dd58e7f987c56f19c8814cc1882ec7b12571e6a910054ff0250f43250ca2bc6c6275d6905b86f9861ce2414e79ddf8ffb96e6ac72945e564f4966f109e96ff5cc918cb949b7c4e6565fe6e30e7fa1695db4ceb4dec7c37dc01a8ecb1cd7aacc9a1e9342e3e5b840c3680a204bfc737da446ed17b42d570fa749b10d4baa227aac5da83146d461dd8fec2b14a4d715a58a9d822f4ae8a1dbefcb75a1f0e85b0085f97073472bc15eaa82fd95860620d0209802c8b8beddf12765e2807a10e312e2f18cb789f051571bfa2350d0e3d4cfe3a0a5a94aa43cb9349a276776349b0836d4b561663e9a7fe6fd15cac90232963fcbda1868baa6f2277b4c6d3c9c3a1e53f38d3361a8eac98e2c742108351978461640e3baed41e58f90c191a57989c4e5b9917b0134b30f3c5d61c046557fea6c22cf835dbf850a3270b89e6a13883658be656eca87e4963d16bcceff089c6c3e103f7473d519ccdfc0851a8ca208ac98e958c63b34ca991dd05c58bef8fa2d2115f9861cd863eff4b71b51082cc9c60afc272b9417b66110a1dfb6481ad7720f8ea3e34a087701ef0f78651096b94bd8e00b3abaf8491877b48a0cf3db6f5f76c27ee14306fed93cc83f4d9862beda879b8dc476e6dfe5aea7792c1ad22faff0c3eff966fc4c0ff6e60a769d2651157e3151473a4b8d80b098ee8cf2317a758db8a099d1db925474e064a495ac3a4cd82ac30152a2acffb5708dae65aadb3e73a010ab0402a131cb9dc14d469614cfec8079ce069951d0b4ebcbbb16b2bcbe1ff7087d7f0b05a4670e8a66df8ff21d82f519dca752237da29e62ed1b7512a8f4906f7c85d119e01405b6db890f8caa41cd90d7f1cac6b574f48c9d9d781e1a04b754e9c79033ccea1202ac22e9bec1547e7ffe3e8b70c4be18cb03efe7bbc55df0a89ac0f36e05ab7793e99fb710a4039b48ed9a0eeece60d5f386e5b2ff17ffa694ea027e750a330680a7e49ea7097d090562c7fc46c24247e98a4a0ce0622175b342f1cef6862e60b4c5d63d4cdc0d99f435cdc8dadbfb21faaf4db3ccdbb200609b30db277c4c253ade754e32006efe2ce8c4923a3dd67276ebabb57c5ae5daf37bbf3094d36598f107bf48bdbd30ff589a9b5659bc2cefed92311a65f86f912ac4724252856bdb5242f0b1baf393d4596fbb198beca27cd85468112631e95c0d82964d454af8ee0b9e8a5693669c81c3d1256f9aa70c8827bf10a288d3c182b14bc532af564536853117263d03d39532551d7a9f702a4cd24901a2d42be32302ddbdc496a33576b63617771e1483c25f7321a489ab1c674692f13c244eb4430fbbc2b4fbce8ee5f07f29ed5e9800576dcf1ecd1893db905f3e9fdfcbc91f768f213a2aeb3a795e98f1b614d3eb5e48a1475aa82f06280e17fcdfadaf5c6ab17c3f3d45c9c9eb73870a4507fea5bcbe3b1a937af49f31d7322eb9e4ada8c3ecdf70eec36c770616bf0f4d699004f6729f69619f15437adfc40cdaeef8ae8120f9be97e8654fa337658bb98230e329c1d9640fffc3031e596844746a2648ab336e2a4a4e6effcd06216d00a25eff5cac5e6024424dfbba869d714966950607ac2dc8d3c7a16645ced66d55257274533b50b8e41603634111f29ce3d3e55dfbdc13b261231f067eb5b2b1d9f4c05621fd00aa2fe04239429764d2ac2a2012a4f33fe4443a859db0d243cfa27ee7661c441b0185896970c21b838ef84708624f5541345f529a02a5dd3c82275ea01f489e74ceadabeea952456287d972d930db07e2613bc8aedb7ebbf7b6b4f051b3f7b39f164e2c132a9fdefa6dbd441efe4c50a83d99098528a6b17e16cc61ee2ab2c84fa66c3485aebeefa10a1b2eccb279a9b59037572644a42fa49b4927cb05477555c68671c461719de6b33e855ee2e3895c093f377c0f285937dd92a66b9446d81c32bc858b447143f1cc237dfd43d94f281d90b916b393ac8e5cb90623c6066047c91f2d84cd5632600788ba1de2067dffc3fb379b6e3f9354e24d9ec67832544bcecbed0fc18357091bc3ff26a9b22e7f96f8752b3b284d35ee284091bc9468c46553dfe29226d79254712a51a9e8cd8fe03435dfafa6484d9ab4354adcf882ab5eaffec2c44e78273e24fb8984434a7c3293434f2420097c79fff7865df33a7b0306c473ca43c44ee8f3d93e06f7066e61ca49faa20f8f5e235b1bdc1f55b91fc60ab19c60b805ef1df5972b0ea141e989d0586ffe0c57e1581eef192bfa1af10f39675e4e52bb2c8448f98335b7c3b5930c503aafd5f9a82bba3d2b1aa01fa4ef8434d6aee65a87f1c13f4e2e8126480af528fc915b31523f36b382f3b679b98abda5fc909258b8694bb2b5a5e6ff1edeb1857d2705bbbe1989b89d46a3dfe10fc2be3abac8a7d8c84d73e672aca07f961c39eddcc7a4c50abd21ff8356108ea4d94570e6c1c5be7f54be479868c131982cf4462760fc45e77ae49fa4e4398574f7389921c199e4316e9a9246b80b340d81ce054179012a0033e451aa8243f4ab13d57c91bb84db28a41f0a2a51321fbf3e8c62249d8793f067db3f5b4a1208f4eb34b9bdbd931e566b637e2c7496ee7e18a4b4423ef487177b96b673ad16109735bf02c2436fdfbacbf81ff532dd7c2cd7e742dd0a4972e0749aad7ae956da03c0207ada8ecf666570d93b786a485d3df90a5c7c5f64715353af6a01f7d0cdb43f7ad7ba81fd3b6e6e0265fb9c6b09f0e2e3eaa0c037f4019016b8fc1b3cc6a54f75e7efc5eb6ffd9fe89b81d0ffe921463fcd6313ff846a6fb9082d4bc9d33c1ba87e5f20b970e888ba64d9d37e2e1f5df0f904925021788678844df8af8a51c6b0c29c59c103cda297c6a522e4fc80ac93a7d8b4157c31cf3513c59b04da00fa91908899831ced00598e04d902daed213e10a4dff172046835db9e931698729f201e88fc2fdc051bb8842828daf33d2acbe360050a2ed28cb53f76ae1ff59e7ddb6902bb6533ac12051bf9bd2948a4da84e322cbc0e8deb251561330ade182f04ab286a1583265bab3a0a48158b8a54dbac28a6aecf3c1814df89132890f67ee966a14824f8267ea7ebd0c43e1599d0caf79e41262565a5d872d60168d7a435741313c5becbc3dfa144c6fc0d0d0d3f68a25bce86e17293acb023ba074ef6d561cedb4be9af145aabee8895393d3c865173ada9073f9a69c0aae1b528c09ebc55a818c5d4ab96c2a3b1d6b4d178e3cd744d8c75818db8d863fde698404f3bf3fe64d6f808ddecaa5b6a7c0651a9bf63ae76d582c5e8dda0fffdce41468a6b4339124d2699e70c7c2b0cd4460c5aec467e5477f85411756e9ba5d6861ae4eea75c3eca5fae93b9c6d1ffcf882e22c766c821ce204e565669164b09d3db2d45c7956159fa6a6e88dfdbc7ca7454f6d1f0f536f4f0d35499941f90eebb68a4ca3d907787f1e88435e24ff7a6d272008270ca3d9a8090a66fefea1f26a2253788f5d0e71bd53f11d21537d7c603e92b9512b9a1e3c86cecd31d7a78e35c59ad490f37064b38c4ed3880276436d84fdb2e877b2984d192fed44f515bfdf59204813433cd2bbd8cce267a902054a865c7cebcfaffb41c3514b4a82e33838a714bcddb1be339db3c7167b7521c1af696e2639ff0d4a606f04f74e83aee3f2893957b69fb9468e129d4700004410010040101c00000008000100697074002c0002001400010066696c74657200000000000000000000140001006d616e676c65000000000000000000000410060016f74047fdc6f3ea1675752982a141890fb9eeb05f804c5e2ffb7d1c9ca0ba761b0bd180e497fc5ce32708fd0ab56520d365c01f68899f179ff69b8afbf59019ab51c2d95b10bddec10d3f2ddc6b7fe93b6552c52137c6a9c7776ebd687e8a4c5acf146476288d1dbe860275a6940d3db67904199baf936bf7531341313c7d3cd0cf73a990ad0d2015aa9cdd21c095b93487e4784b108d7d40224bb5fbcea07f0f55d6fb0775f69365a17fe2c71b9d9b96d8c3b32102c1b3be55c2bd21e51d2f2640efd6631cd8009fd42c01ec572d808e465ece52f80977e7b368d67b1b0bcaf05047775c622458dc7c56ecc108fa604aa20c6b3737865c02bcced994d7010b44e420438f2a3c6c2e4c5f25b8f301ddf741325db24bdd8226edb94df1dab91c1695f8cc19e484401d6ee2ca8b1c2d9941c1c179404ab297531d0f75553714f3fbe3659d047df246cbd287bf5d659301e16d01901dbbd56ca228f387ad61ac9640251faf2e83e615933c3a5a636268c6e8c8ee105cf90bba942b081f58aa7a73a347ddb4b7d86268c771aa29e1d7e366c9ce8cef51d6fc7b4024fe0b2d2ff6de527581f364029ad9211a29c3351956e3dd345450682e96ffbb7244588bd025039a947ab51d435639431c64337a74d63a507abd6c36a2ae9252ca6f4b3d7325fbb166eded031893de07da24cc8a0769df53f3c68ae4e160d641542fef3ada38e7a540b8cb4b9158cf7045f9a1946ca3e373ede7268d1586b858fefc5a667c454c277a246a965a5f9a5fd8aceceba4a1cf988bb6ba7b8252ab791c7c2c2afa2125e7c46fa56cca83094ef2d6550467d55c0990573d4d67c07a4b6fff1e7680f0aaf821b4ff5611a6ebe218527528eeeabc4f2ed57f2f7be116101159d7fb1dd983d2ba48d2a75955eee19c2813d5becb4ed86467453e56ef025e62fca51e71f18eb78ba7e8ff0fb4be898052da77ad183243a43ba32b2aac615090d89241c066b1b2f298cb79f64c5586bee8eaec980edb7c9eae1565b1ae4e8c565e9570f7b0a70ac4244e1944c2c43cefa8900cd22c598296df39fd9196d300528f1f9b2a87793429eece00db75c677c036f70ad775cfc068f3d9ce0c45172432021a86b29bca2363c44a426616268d85ffe8b194fdd49385497763a0d1464dc7af2707f76f9220df03131c9fdb2e27cf093d35245b6cc8f430a7ddf22685c61ccc6a2d0573194129d3e66889d3efc6aa95b812775de8eb2b7f674a3493cdd99b66444fe10b015148faef63b4bbfe85f2dbe5f429b71a459433891c59f0a90cf0127e4beab1c6313e016bc2309dbbd5e622590ab273d2fcb91cc4a4d47c57e77c07ff3b2343585763546a26113f409e8bea3bf4a9864e7aa002f4c584b0e0818ede4195660cb123595265edc81a76bf36803f6d535d7a7596b3752516c003e83bfad6bf02b17fce0489433c976ab7ee2a16c539f20e65ad897957fd96db3038bc19c1c72fdb0f643a1e111d2445893488667c8e5dedec44e1d0faecf1f868f1fdd03c5bd68fae3a80724d8ff77ed9207294392f71d7c286e76ae8f47d761d8257be44176d0c00ad80c07b3935c297cbbfbd61d7d0e9e707284f61fbef422bedc205fb3557c48562109616c1aacff2a6858852e9f1b1a38d08027672b65f351b011e06e0154f9fdfb4399f53a0633f9ce24616e52047ba56887b4ed282aae92bd50598dafa5c6cf3b1b873d54ac05e6f39f12fee26e093862de284e507284f51f763e659ce2d5908c373aa4e1a73927caaa2b3ff60b4e5168a9f90bcddca78d8bbdc9fb15ee215051c7fb385d9d449843b157183d834f5240aa7b56de8f9bb47c6bc57859fa3c0574555f34d49ec61ee21a7055ad50a57ad125083c2cc72d2e0921dd6743f04f7b0682fe93fafb53557998ddc0f882f124419ba70de25cb7e2cb0912f64b6ea0bec75b56ac46943eedeb94ec81b8d3ccd69a05a8e877f4de6cacdd94413739b0c4acc7291c71216cfb0ecabb690322b570bac87fab693f11dba55ac8f495884d283901b1f164ee48705243e532a3b8218930f5c17927a25295b684d731c593a88e42a6ee4d7a6717194c08d171038e24898721803a8681899fad67e4111f92831db811c4638a106ad422cdc571010e972ed3c4c8f033ec47f828e28ee9eb027e52317f661c05999a05ffa15e6512431dece22e123880131bbc58b3a5195c6318c587874cdc7ad2897473201b1010cee1d61593a1a77fe296df0cd623c6c66872eb100773d4cdd42320960d18b2ad1b97a8e64de54ffffb39d70526f4ddfc007fe16ce5df60849ddb9a84275cb21721c989566cdb2019f9a7caaf77a16f7f79da00787b277b3cd08816f314a68a10060e0ee1ac75f82bf7a07cd8129078d20e166d87ef916f1346c128f4e8fdb01201b0abaed79109c8c6b67dec36856c1373b2f99538a954c5412f0e919ca2544054042b0338b6ad319d25f3499bcc26ed5bd45582e88daae775bbe1e82286733c39db53adef88ffc97d721ae6133bc6d5fb0c82627dba030677d6061c9a40e0ee56b7d6e9f66c9e46b43c4756493efe1ae91258f8795b76e4960a0f5b7bb29787659b8b93bfc59d4effd798faa195b7f2e65f6e1d4048835ea90a5179381619c214b9eb95090331b16551aeee50082e90ce7bf970d18632ed44937d985c4f22613b52b08bd83cbde0105257f659afa6bc53373ddeb591bfbed01899d51fdd5ec024e4bb3570b754426a0e8138d08bfa8a5f811491d04060f38f4d2a05a5e388fbd32258093eed73cbcb399c2217ef392eb2c07806f583d7adf7a4a202d8c84e3fd04a4d0f3e212149a3bdcbec25ddd98df128b0e22c5537ceae9834bdf504cf59a2dc8f1e0283f6d9f951614cb1171c0b795214655fd0edde11fdc45ecb55df8ef7743d7833e6e1b5590d9c9af3dc067496d4fa8dd833e6f56dcd785027ba428c4f62998a88b3d2086e25a7673f9cc22a0a7353ad68135fbdb9c3fa66c01296b68a052332d6408c7f96913343f811f12c3076eb6afb2518db5b7b51503cc52a71bebb5e17830a0655f8f0fc313d65ab957a00ea47c8a4a7807994c5881169b0659e395cd1805d019255af156ff8d693c7431004b2a9557528658a948e4183291611f867527720406c3d6642510a83df896bc48f4dd89f62019765cdc38eda066ae84c26e4d225adc145b25419b43847b819e0c2c826b96e01c1baa0d092bfedef9c000a5d5824812f7f1b60574e6dd6dd6010647eaf71a73dab12565a3a71392dbc24f0fbf66999b4848fda0ae437695341f109762188bc32d457af393d481c6a88b1d833447575842b5107041c5ea7ae60a4f58218239b57b4501dc9eda2c8fc056e21332657eccd2fc4aa0d9296e891c31c7790ece946f455acbdcd84d90047d41750e1c7896bcd0792c19a8f3ae0038407b3c772f9ee9c50085c67e3d4ed013105949a0d65f3a758029f771dc95ca6c50c469d1a13bbba9ca7184d7612a8a8712ea50dc5eb16ea8a1478f4967023f7821b6948d8ba1d84ffaafeaea02ce51aec2c40678a968f8253ef6c1773358659a2261adc7681e47dd9ef8763e702f87cacc516437f8afbc80042f3715c8d3a4d70a091eaadb928007ca911163ad759b9ffc829935c233d727737447e39739ffbee342bf67fde0791593682a2d3226749ad8ef047a752c25fe09043d51716d61d83399404887c44142c501efc18ebb85a7affb2f8160f0d84b9259ccee109be425e29d371141435fecaf42375537215e015f084ab87de9ea001f237a1a99b5d972cde952915be7ec98a7fe2f954d1b73f662d823c7b44f25cc1f77f9bf4b60ef78484a30cbd5d23bd6b52795f99b48fe6abe83f2ced9693525bdffb105f773ee91f6c899022dec66255db64a5c9b0e1d2a2d022fc52ef001685ebec3c144bb26f1bc664191c3216f92729677d7123ab1492ff07ab3988143a2cff4f804a8ada4b8ca187cfa8e4a35152a4d1350485935c45e7f3090aee255566cf0a1baa0a60c57e8f060232ce34c4d8350ac3483fde88380528fe2c1daf5d53ad4046eb2ada813a704726f10554941a9170d68504f6621d8d96ec39199bc32f8ca75d69efb9187aef6e6269bd4ca8970f7fc7301a276a774f15d9eabdc8ca7e950f07acbcd557d12f76b634340172f7a13b64f9b5f5d6490501d9ae9b32aa2a81840f580c7017d45baf9a60169cb6acdfb16d3ecdb20465a5c7d9649a2a537215500be6824642f323891c06349ae8ff09ad8ff96fcf12f0704e51299e9bce052765f3e0b9b475da66a795f6418b501ee253c001015cf364a060718f1fd97f0bb6a07546ddda6010e99c21cee532b0e1454cc5a2e3335b6a31af4daabfcf2d75cba967b5287d1567bf20dbc328731500656daa489f154cf1bef68098b24098b4344c7df8ce9980be52e19f80009b894ceb113759e397875640b3c6a1fcdd64e70e12dd53cf427702bf6834a5511a187c40a2d234c3a9b8d09472ba95973fb3dfeb8db94ad00615ae934595a7f24f11f10147d23a140672e6d1672e08f683f2134b76427bdfd3891fed099a55f2af5efa398d9cfb0056fb079743b5996d9b55ec39aea266fd00003e3926dbed9a88e547a59ab38e0c625c4387cf00faa4d49ceb36bb471b46f6ebe19599640fa868264df820cac5a7e92a935ca322eaf89e5d578e7e58860ff8e17817bd1ddea2cd44c175163a39c6b47658400679c852479e80ec55ac3cd1dc52b7f3c1d22c71222508da61632896fb2ff59aab83cac33ef900ec9181f60afe211355d802b2afab77b21bb1cda1a3d32c7fb5fe1b27944ac8788c6b6bb2242f2428de105cab555e2009b8331752f71b885f05c87312cab680d7766c5cec95891837d696a578ca6c07f8eaaec5f919583e2ac79161b3475f92cf314832fd14a530e33e0868236d9a9e9384120b477231f106a6c942a3e1b5deeba196e78ca428c1da6609bd72d60632555c00eebc9e57775f44031189a665078a46ad37705354438bba4df3350c17dc4e16abb50d112d4fe0f37f47ff324282a7d1f778c735cfcd7632e7133987bf4b3d18fbbd1638145e974fe111b7f9063f5a2170fcbc7019b799d16c1cae534b46983e6c5f0bfbf4ccc30644eb70c83f374c7ece521cdd1cd5969d2091c556234deb64bc928342fe62d183d767129c2eb72e6290f89b7c03f4060bd7ccf05a553c0db5520e5ee57f9955d82bcb1c7a82c3eba32ff84fd01c73378fe18b9b85dfc6f64520a4ec01e28ad73e672f67c953104c3558a784829a16910c6711624ec09c8de078a216949bfb81a6f4ba54f0d2719cb65175ca99f944a06edb6ea3ce0a321f9e83cbab266cf9664d209f54a299e61dd3154bbec2a4061a94d9ab03d8c85618d228e75b76c64b24e2e856f9c90e2b17b4692784d09a3d2cfa8dc53aae913ccc357ef2892e20d754c9f88070c4dd9b74dbbb52aa26484297be1bcebc40ee4de4e4d4ff092edc5d3f68e256b172f0267d53758795f2e7e6626c7a4483d8ee8d2f6d3983f9f5f7a02239c01b8a53a37adc59bd32a28c34768a8e91a619dfd0e02c449ccacf4ff25c341c75901f47e8d61853518ee02b38378d27aa583c4e9f8b9e5d16489ac951fb9315c77752bc0cbfd5211f3b00020de303ac4eca8ee0a387d716afda32f5e0af3129df1341153c0df2fa4b67bf19cc9f178eb5bd074928e94c2ac645b8b4d99203a00fb320dc29dfcdb47cd622484a68e1ee395a5ee1a87beb6051344ea4d00cf2a969c0aa82c0cca90e651700deddbbf69cf2537b9797611515fbf0b7b9792d50000440101004001060000000800010062706600780002000800030009000000180002000001000009000000030000000000000008000000540004000700190808000000050004110104000001000408ac0b00000010ad02fffffeff07000706ff0f0000090001037f0000007f007f110200000009000901ff01000091f6030101000000ffff6d0101000080b80006004cd68dbc2fff97800033baa87fc39607dd7b00c86f6044810af8a4a930b721fbf54e0efb1228d1b621ec822039b56486dfddc0df07d15060cd1893aa507b83c6045d38e3d77615abd6987cc28a8974affd465e060f456f2a6408d5333006fc357a6ef18180337cbce196f1eea811847eb99cdce60d513bc3f3aa0f9b2f97279d24a6c9a8d5df41fe69c3a88273636f51ff6eaa6e390fbd48a0c485062cb5a67b81697040ef8a54923f099292d5c32c07f4a0f2000000ac000100a800150000000c00010073616d706c6500003400020008000300070000000800030002000000080003000500000018000200090000000008000000000010de000000ff0000006000060026758948b674cebe8334802f9c4cd0defc0a1a5399fc504610b7db3e21cf4cb13bf954018fa20f2c37325e30c18e2c43ac971634cc5cb641dd7633d632fd415c51c606ceb55eaf1ad8e4b4ea2db0906d2700c70a86b534b0760000000000a4080100a008070000000c000100706f6c696365000050080200040403008201000002000000050000000600000023880000050000000700000004000000040000000300000002000000030000000300000000000080020000000000000000000000f7ffffff0008000001800000010000002c000000db39000001000000090000003e1b000008000000ff0f00000600000000000000070000000100000001010000800000001f0000000300000003000000fdffffff03000000020000000300000005000000b7000000ff0000000500000006000000090000000004000008000000800000000500000006000000a3660000ad0a00007f00000005000000af337f4c050000000100000003000000000200000100000003000000030000001f00000006000000010000000500000005000000030000000500000000000000040000000010000003000000040000007bbe000000000000010000000300000006000000ff0700000800000001040000010000806906000000000100ffffffff060000000000000004000000010000800020c80020000000ffffff7f400000000800000000000000ff0300000900000002000000010000000200000001000000050000007106000008000000e700000009000000df08000009000000fffbffff030000002b00000004000000f40500000700000000010000000400000104000008000000350000000100000001000000010000000700000000010000ffff000002000000e60900000100010001000000ffffffff010000000900000000100000090000000300000001040000000010000000000001000100040000000100000009000000400000000500000004000000810000000300000069530000ff010000ffffffff670000007c04000092000000faffffff000200007f000000d48e0000c92affff00080000020000003f0000000300000001000000000200000900000063b8b0722789ffff83bd00000600000008000000b707000001000000040000001f000000bd0300000200000001000000050000000900000000000100010000001f0000003f000000ffffffff01000000ff0f000017ffffff0000000006000000ff01000009000000a70000006f730000020000000800000008000000050000001465000000000000000000000100000005000000050000000600000005000000020000000700000040000000ff010000000100000101000001800000080000000900000002000000070000000700000008000000050000000100000007000000f7ffffff020000000ef00000000200000700000003000000080000000180000000001800200000000900000000000100ffff000009000000050000008107eb3c0001000005000000ff010000020000000300000000000100b923ce09070000000400000000020000090000000700000008000000d800000001000000a30b000004040300080000000002000080000000050000003f00000008000000070000000100008003000000030000000000010081000000da64000001000000080000000700000006000000ff7f000001000000030000000500000001000100000000000200000005000000cd0b0000060000000400000066030000060000000100000002000000a05c7e3d000000005e0000000000000000000000010000000000010003000000010000000600000004000000fb00000000000000f8ffffff00000000080000000000000000000000060000000800000004000000ff0300000300000006bbeb4001000000a30000007e0800000400000004000000090000000400000002000000000100005107000008000000050000000300000008000000958f000001000080040700000500000000800000030000008100000009000000050000000000000004000000030000000200000050e10000ff030000000001000300000001010000060000007f00000001000000ffffff7f9b7300000800000009000000070000000700000009000000395d000006000000010001000900000001000000fffeffff2000000001fcfffffbffffff540000000800000000000000f9ffffff0a526f4f02000000340000000700000000000000f8ffffff030000000400000006000000ed040000000000000180000080000000ff0700003b0300000004000004000000060000000000008005000000030000003f00000006000000810000003f000000040000000200000005000000f500000008000000ca000000040000000104000003000000050000003d17756bc986000005000000ff0000000900000083cf00000500000002000000a20d00000600000000000080ff000000090000000001000000000000f5ffffff000000000800000007000000050000000300000081000000b90b0000000000000100008004000000b2020000020000000200000000300000c100000000000000ffff0000a7271f93060000000800000004000000010000000200000001000100ff7f000005000000880100000080000000f0fffff4b10000fbffffff000100000080000008000000070000000100008002000000ffff00000700000006000000ffffff7fe300000009000000020000000900000001000000070000000700000005000000070000000900000006000000020000002600000007000000020000001c000000670300000300000000100000faffffff3f00000001000000060000000100ffff018000000300000006000000ff7f0000b20a00007800000037090000018000002000000007000000030000000300000008000000070000000900000004000000ff0f00000000400000000100810000000400000003000000090000000000000001000000020000003f000000030000000001000008000400080000003c00010001000000010000000700000008000000000000000900030007000800090000001402000207000500ff01000007000000ff0700002f3e00003c00060031d52c4e4a8d1d22e994a75527bff2496a14fc83eb8964470176d327505b971a77da74c263471eb34e769b081a017df864b320d20995000000001c010100180114000000080001006e6174002c00020028000100ff0f000062000000040000002d500000770d0000ac1e0001ffffffffffffffff01000000dc000600270808c93321c3c207f0c51f4bdb121e29c7dfb6bab11ada3a40b858b7e0b4db382c231538fe0aafea0f5d8b608233e29653c216e1e241ce5afb1d6203d8d8356ab6fdf5a30743f14f4122847e7d78574d4ffcbb221de5e6804e6df4280e0e2e7a3088e6e6648ad9851b72a0f3d41d41812c98fef65d0f90cfe9e852088c469977b432894a8116ef749f61163663ad3527bc4a12c91592bd473f448c5533668f40861e8c0daf571033c1c4a33bdc34220bb77c1ccc5d447030e46ec2951516a1c5e83b153291fc64e99cd44e"], 0x2e5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) bind$vsock_stream(r0, &(0x7f00000034c0)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20, 0x0) 15:10:43 executing program 5: r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/user\x00', 0x2, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000140)=0xffffffffffffff88) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x1, 0x2, 0xffffffffffffffe1, 0x8000000001}, 0xe) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x16) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000000)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'U+', 0xff}, 0x28, 0xa42cb90087e5a2ba) 15:10:43 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x2, 0x3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000780)) 15:10:43 executing program 2: syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[@ANYRESDEC], 0x227) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r2, 0x0, 0x70bd29, 0x25dfdbfc, {{}, 0x0, 0x4102, 0x0, {0x10, 0x13, @l2={'eth', 0x3a, 'team0\x00'}}}, ["", "", ""]}, 0x2c}}, 0x40800) sendfile(r1, r1, &(0x7f0000000700), 0x8080fffffffe) 15:10:43 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@nfc, &(0x7f0000000080)=0x80, 0x80000) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000100)={0x77359400}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip6_tables_targets\x00') preadv(r1, &(0x7f00000017c0), 0x1ba, 0x0) 15:10:43 executing program 3: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xfff, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r2, 0x1, 0x0, 0x369e5d84) write$UHID_SET_REPORT_REPLY(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x5f) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280), 0x12) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x60, r3, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x63}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblc\x00'}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6d0}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xb7df}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x40081) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000001c0)={0x2, r2, 0x1}) ioctl$KVM_DEASSIGN_DEV_IRQ(r0, 0x4040ae75, &(0x7f0000000100)={0xffffffffffffffe0, 0x400, 0x9fd6, 0x1}) creat(&(0x7f00000003c0)='./file1\x00', 0x0) 15:10:43 executing program 0: syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000100), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4000000000014, &(0x7f00000000c0)=0x1, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000002580)=[{{&(0x7f0000000140)=@hci, 0x26c, &(0x7f00000003c0), 0x338, &(0x7f0000000880)}}, {{&(0x7f0000000040)=@sco, 0x359, &(0x7f0000000a80), 0x1b1, &(0x7f0000000c40)}}], 0x4000000000002f0, 0x0) [ 286.018607] audit: type=1804 audit(1565190642.999:120): pid=15919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir525748567/syzkaller.UwknhR/196/file0/file0" dev="loop3" ino=259 res=1 15:10:43 executing program 1: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) prctl$PR_GET_DUMPABLE(0x3) r0 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xfff, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r2, 0x1, 0x0, 0x369e5d84) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280), 0x12) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, 0x0, 0x2ef) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file1\x00', 0x0) 15:10:43 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3, 0x0, 0x1}}) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x2, 0x2) syz_open_dev$sndtimer(&(0x7f0000000180)='/dev/snd/timer\x00', 0x0, 0x10000) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f00000000c0)={0x4, @tick=0x7, 0x2, {0xfffffffffffffffe, 0x2}, 0x1, 0x1, 0x1}) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000140)={0x120000000, 0x6, 0x4, 0x7fffffff, 0x42}) 15:10:43 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000000c060501ff0080fffdffff2e0a0005610c000100060000007d0a00010c0002"], 0x23}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.nlink\x00', &(0x7f0000000240)={'L-'}, 0x28, 0x2) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, 0x0) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) syz_open_dev$mice(0x0, 0x0, 0xfffffffffffffffc) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r4, &(0x7f00000002c0), 0x400000000000174, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:10:43 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x2, 0x3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000780)) 15:10:43 executing program 5: r0 = socket(0xa, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getuid() ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00\x88\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200004c0], 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"]}, 0x2a8) r2 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) r3 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x4, 0x4000) write$P9_ROPEN(r3, &(0x7f0000000180)={0x18, 0x71, 0x1, {{0x0, 0x1, 0x3}, 0x401}}, 0x18) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r2) 15:10:43 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x2, 0x3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) [ 286.370916] audit: type=1804 audit(1565190643.359:121): pid=15992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir525748567/syzkaller.UwknhR/197/file0/file0" dev="sda1" ino=17358 res=1 15:10:43 executing program 3: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xfff, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r2, 0x1, 0x0, 0x369e5d84) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280), 0x12) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f00000001c0)=@generic={0x3, 0x5, 0x10001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000200)) ioctl$TIOCLINUX6(r0, 0x541c, &(0x7f0000000100)={0x6, 0x8001}) creat(&(0x7f0000000240)='./file1\x00', 0x1) 15:10:43 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0xffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$net_dm(0x0) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, 0x0) write$P9_RWRITE(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) read(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086602, 0x400007) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000001}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="00032abd7000ffdbdf25000600ac1414100400000000"], 0x1c}, 0x1, 0x0, 0x0, 0x48810}, 0x8000) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x20032600) ioctl$KVM_GET_EMULATED_CPUID(r2, 0xc008ae09, &(0x7f0000000300)=""/244) ioctl$BLKRRPART(r2, 0x125f, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) 15:10:43 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x2, 0x3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) [ 286.519619] Unknown options in mask 8 [ 286.553126] Unknown options in mask 8 15:10:43 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r0 = accept(0xffffffffffffff9c, 0x0, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) semget$private(0x0, 0x0, 0x0) semctl$GETPID(0x0, 0x0, 0xb, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f00000003c0)={'caif0\x00', {0x2, 0x4e22, @loopback}}) setsockopt$inet6_opts(r0, 0x29, 0x3f, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.controllers\x00', 0x0, 0x0) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000180)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0xc0, 0x0, 0x0) 15:10:43 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000300)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x0, 0x0) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)=0x0) r6 = geteuid() stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f00000002c0), &(0x7f0000000c00)=0x0, &(0x7f0000000c40)) lstat(&(0x7f0000000c80)='./file0\x00', &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = geteuid() r11 = getgid() mount$9p_virtio(&(0x7f0000001640)='\x00', &(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)='9p\x00', 0x10, &(0x7f0000001700)={'trans=virtio,', {[{@access_client='access=client'}], [{@subj_type={'subj_type', 0x3d, 'selinux'}}, {@fsmagic={'fsmagic', 0x3d, 0xb6d0}}, {@seclabel='seclabel'}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}]}}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000d40)={0x0, 0x0}, &(0x7f0000000d80)=0xc) stat(&(0x7f0000000dc0)='./file0\x00', &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000e80)={0x0, 0x0}, &(0x7f0000000ec0)=0xc) lstat(&(0x7f0000000f00)='./file0\x00', &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000fc0)={{{@in=@initdev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@loopback}}, &(0x7f00000010c0)=0xe8) lstat(&(0x7f0000001100)='./file0\x00', &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_DIRENTPLUS(r3, &(0x7f00000011c0)={0x480, 0xffffffffffffffda, 0x8, [{{0x2, 0x3, 0x101, 0x4, 0x100000000, 0x9, {0x6, 0x3a5, 0x100000001, 0x3, 0xa63, 0x2, 0x3, 0x5613, 0x1, 0x79, 0x4, r4, r5, 0x6, 0xa8cd}}, {0x5, 0x8, 0x5, 0x1, 'syz0\x00'}}, {{0x1, 0x3, 0x4, 0x6, 0x0, 0x8, {0x6, 0x4, 0x80000000, 0x6, 0x8, 0x4, 0x2, 0x1, 0x2, 0xc88f, 0x800, r6, r7, 0x8, 0x4}}, {0x3, 0x100000000, 0xc, 0x9, '/dev/uinput\x00'}}, {{0x5, 0x1, 0xfffffffffffffffa, 0x5, 0x7, 0x1, {0x4, 0x1, 0x3, 0x3, 0x3, 0xb6, 0x9, 0x7ff, 0x0, 0x9, 0xfd68, r8, r9, 0x4, 0x6}}, {0x1, 0x1, 0xc, 0x2, '/dev/uinput\x00'}}, {{0x0, 0x0, 0xc2, 0xbb, 0x8, 0x9, {0x6, 0x40, 0x7, 0x0, 0x401, 0x9, 0x291f, 0x180000, 0x3ff, 0x101, 0x7f, r10, r11, 0x401}}, {0x2, 0xffffffffffff0001, 0x5, 0x6, 'syz0\x00'}}, {{0x3, 0x1, 0x0, 0x9, 0xfffffffffffff01c, 0x100000000, {0x3, 0x6, 0x9, 0xc5, 0xdb8c, 0xfffffffffffffffc, 0x1, 0xb1, 0xfffffffffffffffd, 0x5, 0x80, r12, r13, 0x8, 0x59}}, {0x6, 0xfffffffffffffff8, 0x5, 0x529b3a59, '}proc'}}, {{0x1, 0x2, 0x9, 0x0, 0x100000000, 0xffffffff, {0x5, 0x7, 0x8a, 0xff, 0xa92, 0x7fffffff, 0x1, 0x7, 0x4, 0x101, 0x925, r14, r15, 0x1000, 0x603d}}, {0x0, 0x7, 0x7, 0x800, 'selinux'}}, {{0x6, 0x2, 0xfff, 0x1200000000000, 0xfffffffffffffff9, 0x7, {0x1, 0x1, 0x2, 0x101, 0x5, 0x6, 0x1, 0x7fff, 0x0, 0xbf, 0x3, r16, r17, 0x0, 0x7}}, {0x1, 0x1, 0x5, 0x3, 'syz1\x00'}}]}, 0x480) write$uinput_user_dev(r2, &(0x7f0000000780)={'syz0\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 15:10:43 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x2, 0x3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) 15:10:43 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0xfffffffffffffe82, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010003b0e000000000000000007000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x6, @ANYBLOB="1800120008800100767469000c000200080001c0e0000002"], 0x40}}, 0x40000) ioctl$VFIO_IOMMU_MAP_DMA(r1, 0x3b71, 0xfffffffffffffffd) 15:10:43 executing program 4 (fault-call:4 fault-nth:0): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x2, 0x3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) [ 286.955238] input: syz1 as /devices/virtual/input/input10 [ 287.002619] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 287.056051] input: syz1 as /devices/virtual/input/input11 [ 287.078561] FAULT_INJECTION: forcing a failure. [ 287.078561] name failslab, interval 1, probability 0, space 0, times 0 [ 287.187256] CPU: 1 PID: 16037 Comm: syz-executor.4 Not tainted 4.14.137 #33 [ 287.194930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 287.194936] Call Trace: [ 287.194959] dump_stack+0x138/0x19c [ 287.194979] should_fail.cold+0x10f/0x159 [ 287.194999] should_failslab+0xdb/0x130 [ 287.195018] kmem_cache_alloc+0x2d7/0x780 [ 287.195055] SyS_epoll_ctl+0x7e1/0x2a00 [ 287.228002] ? __mutex_unlock_slowpath+0x71/0x800 [ 287.233665] ? SyS_epoll_create+0x170/0x170 [ 287.233683] ? SyS_write+0x15e/0x230 [ 287.233699] ? do_syscall_64+0x53/0x640 [ 287.233708] ? SyS_epoll_create+0x170/0x170 [ 287.233718] do_syscall_64+0x1e8/0x640 [ 287.233727] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 287.233745] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 287.233753] RIP: 0033:0x459829 [ 287.233757] RSP: 002b:00007f04e5dbfc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 287.233767] RAX: ffffffffffffffda RBX: 00007f04e5dbfc90 RCX: 0000000000459829 [ 287.233772] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000004 [ 287.233777] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 287.233783] R10: 0000000020000780 R11: 0000000000000246 R12: 00007f04e5dc06d4 [ 287.233788] R13: 00000000004bfec1 R14: 00000000004d1d48 R15: 0000000000000005 [ 287.613634] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 287.627087] FAT-fs (loop3): Filesystem has been set read-only 15:10:44 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x228376c4, 0x40a100) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x82}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x50, r1, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x3c, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x73}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x272}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x8000) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x1) clone(0x9100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000040)=ANY=[@ANYBLOB="5cc4cf98721d8586"], &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='msdos\x00', 0x0, 0x0) 15:10:44 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x20000000f, 0x4, 0x0, 0x5}, 0x2c) syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x5, 0x10000) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) 15:10:44 executing program 1: syslog(0xa, 0xffffffffffffffff, 0x12349070db022860) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') 15:10:44 executing program 4 (fault-call:4 fault-nth:1): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x2, 0x3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) 15:10:44 executing program 3: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xfff, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0xa) fallocate(r1, 0x1, 0x0, 0x369e5d84) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280), 0x12) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file1\x00', 0x0) readlinkat(r0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000400)=""/154, 0x9a) 15:10:44 executing program 2: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000180)={'filter\x00', 0x0, 0x3, 0xc9, [], 0x4, &(0x7f0000000040)=[{}, {}, {}, {}], &(0x7f0000000080)=""/201}, &(0x7f0000000200)=0x78) r2 = syz_open_dev$vbi(&(0x7f0000000240)='/dev/vbi#\x00', 0x2, 0x2) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000280)={0x0, 0x35}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000300)={r3, 0x2, 0x4, 0x8, 0x5b, 0x8}, &(0x7f0000000340)=0x14) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000500)={&(0x7f0000000380), 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xb0, r4, 0x204, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x4}, @TIPC_NLA_NET={0x44, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6e}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3ff}]}, @TIPC_NLA_SOCK={0x38, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x200}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}]}, @TIPC_NLA_SOCK={0x1c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffffffffffff9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000540)) getcwd(&(0x7f0000000580)=""/149, 0x95) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, &(0x7f0000000640)={0x59e, 0x24, [0xfff, 0xff, 0x10000, 0x8, 0x81, 0x2, 0x7fff, 0x5, 0x43]}) syz_kvm_setup_cpu$x86(r0, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000006c0)=[@textreal={0x8, &(0x7f0000000680)="36660f3880318367ef00643e670f218a2ef30f09baf80c66b813358e8e66efbafc0cec0f01df66660fe8180f011dba4000ed670fc77601", 0x37}], 0x1, 0x40, &(0x7f0000000700)=[@cr0={0x0, 0x40010}], 0x1) accept$packet(r1, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000780)=0x14) bind$can_raw(r0, &(0x7f00000007c0)={0x1d, r5}, 0x10) write$P9_RMKDIR(r0, &(0x7f0000000800)={0x14, 0x49, 0x1, {0x0, 0x2, 0x8}}, 0x14) fcntl$notify(r1, 0x402, 0x80000001) ioctl$TIOCLINUX4(r2, 0x541c, &(0x7f0000000840)) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000880), &(0x7f00000008c0)=0x4) ioctl$CAPI_INSTALLED(r1, 0x80024322) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000900)={@mcast1, 0x3, 0x3, 0xff, 0x8, 0x709, 0x8}, &(0x7f0000000940)=0x20) openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000980)='/selinux/access\x00', 0x2, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f00000009c0)={{0xa, 0x4e24, 0x3, @ipv4={[], [], @rand_addr=0x2}, 0x80000001}, {0xa, 0x4e23, 0x8, @local, 0x3}, 0x1, [0x9, 0x5, 0x12000000000, 0x0, 0xa41, 0xf428, 0xedb, 0xff]}, 0x5c) getsockopt$rose(r0, 0x104, 0x7, &(0x7f0000000a40), &(0x7f0000000a80)=0x4) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000ac0)=0x100000001) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000b40)={0x6, &(0x7f0000000b00)=[{0x2, 0x5, 0x8001, 0x18b}, {0x9, 0x47b, 0x100, 0x1000000000}, {0x9, 0x4, 0x1f, 0xfffffffffffffffb}, {0xfffffffffffffe00, 0x8, 0x7f}, {0x7ff, 0x401, 0x1, 0x94}, {0x8, 0x800, 0xfffffffffffffeff, 0x6a57}]}) fsetxattr$security_evm(r1, &(0x7f0000000b80)='security.evm\x00', &(0x7f0000000bc0)=@md5={0x1, "abfec354ccc7be52e1e4e9539f3fd374"}, 0x11, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000000c00), &(0x7f0000000c40)=0x4) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000c80)={0x9b, 0xfffffffffffffff7, 0x7, 0x3, [], [], [], 0x9, 0x200, 0x3, 0x0, "afc6d52f08f1aaa0afb46bbe87fa9a8c"}) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000e00)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000f80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x40000201}, 0xc, &(0x7f0000000f40)={&(0x7f0000000e40)={0xd8, r7, 0x204, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x10001}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xffffffff}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3c}]}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x20}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x27, 0x20}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7a}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x2000c094}, 0x4000000) 15:10:44 executing program 1: setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000000180)=0x9, 0x4) ioctl(0xffffffffffffffff, 0x1000408911, &(0x7f0000000380)="11dca5055e0bcfe47bf07008cba42883eb7dce9eb11debda856f36b1fae039107cb9eb0a6f37dc915bc637dbf7296f3e5e0cd23703499bbc5a6a90c1ebf701f24c0db7469ba1b391c82e2ec58db4961dcbad12e5859d38535091ef7f52eeab76e3ca870935c784c1a6864103dc48be8db25d34d14cdf6242375f381276fb2c963253ccf1c511d9c96b9b") ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f00000001c0)={'veth1_to_hsr\x00', {0x2, 0x4e24, @local}}) r0 = socket$kcm(0x11, 0x3, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{&(0x7f0000000040)=@l2={0x1f, 0xffffca88}, 0x80, 0x0}}], 0x3ffffffffffff2f, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000140)='nlmon0\x00') setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000280)={0x9, &(0x7f0000000200)=[{0x10000, 0x0, 0xc6d, 0x5}, {0x2, 0x10001, 0x80000000, 0x20}, {0x0, 0x4, 0x7f, 0x40}, {0x1000, 0x4, 0xfffffffffffffc00, 0x48}, {0x80, 0x3, 0x5, 0x20}, {0x7, 0x7, 0xfffffffffffffff9, 0x6}, {0x400, 0x8, 0xe916, 0x8}, {0x726, 0x7fff, 0x47b, 0xfffffffffffffffa}, {0x5011, 0x80, 0x40, 0x100}]}, 0x10) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="c109000000002c0000021fe4ac141417e0", 0x11}], 0x1}, 0x0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) 15:10:44 executing program 5: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_dev$mouse(0x0, 0x0, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000000040)={0x3, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1a}}}, {{0x2, 0x4e22, @local}}}, 0x108) [ 287.788053] FAULT_INJECTION: forcing a failure. [ 287.788053] name failslab, interval 1, probability 0, space 0, times 0 15:10:44 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f000001d000)={0x0, 0x0, &(0x7f0000024000)=[{&(0x7f0000000180)="24000000100007031dff22946fa2830020200a0009000300001d85687f0000000400ff7e28000000140a43ba5d806055b6fdd80b40000000140001000929ec2400020cd37e99d69cda45a95e", 0x4c}], 0x1}, 0x0) rt_sigaction(0x14, &(0x7f0000000080)={&(0x7f0000000000)="c4a3555e2b0d3eddc641f60c67cfc423bd7c90000000000066f245aa650fae3b660f383c8fbf9b71a1260fc5fa0041d8f0a7", {0x3a380}, 0x80000000, &(0x7f0000000040)="72d6c46121db420842d9e566aadbf2c462119cb5f222b10c450f3802aa510000000f01d9420f0d32c4c35d7ccb08"}, &(0x7f0000000140)={&(0x7f00000000c0)="0f9b3500800000c4a1915df58fe830cf26ff44d2f7c4c171fb057ae14394c402f9af60742ed914c6c481a5e0214572002636dd0e", {}, 0x0, &(0x7f0000000100)="470f72d5000402c4838d7d271fc441065ca1ab910000660fe838c4a27d797c686cc423f920c3f10f38c98300000000c441a5766957410f0b"}, 0x8, &(0x7f0000000200)) readahead(r0, 0xfffffffffffff800, 0x3b) r1 = syz_open_dev$vbi(&(0x7f00000004c0)='/dev/vbi#\x00', 0x2, 0x2) ioctl$KVM_GET_FPU(r1, 0x81a0ae8c, &(0x7f0000000280)) [ 287.903712] CPU: 0 PID: 16056 Comm: syz-executor.4 Not tainted 4.14.137 #33 [ 287.911490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 287.920878] Call Trace: [ 287.923524] dump_stack+0x138/0x19c [ 287.927196] should_fail.cold+0x10f/0x159 [ 287.931424] should_failslab+0xdb/0x130 [ 287.935424] kmem_cache_alloc+0x2d7/0x780 [ 287.939602] ? SyS_epoll_ctl+0x7e1/0x2a00 [ 287.943803] ep_ptable_queue_proc+0xaf/0x380 [ 287.948237] snd_rawmidi_poll+0x137/0x5b0 [ 287.952491] ? ep_show_fdinfo+0x3c0/0x3c0 [ 287.956741] SyS_epoll_ctl+0xb28/0x2a00 [ 287.960780] ? SyS_epoll_create+0x170/0x170 [ 287.965289] ? SyS_write+0x15e/0x230 [ 287.969012] ? ep_show_fdinfo+0x3c0/0x3c0 [ 287.973166] ? do_syscall_64+0x53/0x640 [ 287.977252] ? SyS_epoll_create+0x170/0x170 [ 287.981597] do_syscall_64+0x1e8/0x640 [ 287.985492] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 287.990474] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 287.995672] RIP: 0033:0x459829 15:10:45 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000900)='/dev/dmmidi#\x00', 0x2, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$loop(0x0, 0x0, 0x100082) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'eql\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', r5}) r6 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) readahead(r2, 0x3, 0x2) pwritev(r6, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x82, 0x0) sendfile(r4, r6, 0x0, 0x20000102000007) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) [ 287.998865] RSP: 002b:00007f04e5dbfc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 288.006764] RAX: ffffffffffffffda RBX: 00007f04e5dbfc90 RCX: 0000000000459829 [ 288.014219] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000004 [ 288.021503] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 288.028791] R10: 0000000020000780 R11: 0000000000000246 R12: 00007f04e5dc06d4 [ 288.036245] R13: 00000000004bfec1 R14: 00000000004d1d48 R15: 0000000000000005 15:10:45 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0xfffffffffffffffd], 0x4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:10:45 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) rt_sigprocmask(0x0, &(0x7f0000000180)={0xfffffffffffffffd}, 0x0, 0x8) r2 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x32, 0x4, @tid=r2}, &(0x7f0000000240)) r3 = request_key(&(0x7f0000000100)='logon\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f00000002c0)='self$-selinuxppp0@\x00', 0xfffffffffffffff9) keyctl$setperm(0x5, r3, 0x4001004) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) tkill(r2, 0x28) r4 = signalfd4(0xffffffffffffffff, &(0x7f00000001c0)={0xfffffffffffffdb0}, 0x6, 0x800) read(r4, &(0x7f0000000080)=""/128, 0xae3f1a6) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000300), &(0x7f0000000340)=0xc) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x77359400}}, 0x0) 15:10:45 executing program 0: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={[], 0x3, 0x100, 0x2, 0x800, 0xffffffffffffffc1, r1}) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000100)) prctl$PR_CAPBSET_DROP(0x18, 0x8) r2 = accept$alg(r0, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$P9_RFSYNC(r2, &(0x7f0000000180)={0x7, 0x33, 0x2}, 0x7) ioctl$SIOCX25GSUBSCRIP(r0, 0x89e0, &(0x7f00000001c0)={'ip6_vti0\x00', 0x3ff}) fcntl$setsig(r0, 0xa, 0x37) getsockname$unix(r0, &(0x7f00000002c0), &(0x7f0000000340)=0x6e) fcntl$setsig(r2, 0xa, 0x2b) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000380)=0x1) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f00000003c0)={{0x40, 0x1}, 'port0\x00', 0x3, 0x80000, 0x6dec0517, 0xfff, 0x7, 0x4, 0x6f, 0x0, 0x3, 0x7}) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, &(0x7f0000000480)) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x3f, &(0x7f00000004c0)=""/185) r4 = socket$isdn(0x22, 0x3, 0x23) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000580)={0x0, 0x7}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000600)={r5, 0x4}, &(0x7f0000000640)=0x8) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f00000006c0)={&(0x7f0000000680)=[0x0, 0x0, 0x0], 0x3, 0x5}) r6 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r6) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000740)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20008000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x30, r7, 0x502, 0x70bd25, 0x25dfdbfd, {{}, 0x0, 0x4109, 0x0, {0x14, 0x18, {0x3, @bearer=@l2={'eth', 0x3a, 'batadv0\x00'}}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x40040) connect$bt_sco(r0, &(0x7f0000000840)={0x1f, {0x2, 0x10000, 0x1f, 0x96, 0x5, 0x1ff}}, 0x8) write$selinux_create(r4, &(0x7f0000000880)=@objname={'system_u:object_r:var_run_t:s0', 0x20, '/usr/sbin/cups-browsed', 0x20, 0x8, 0x20, './file0\x00'}, 0x53) sendto$packet(r0, &(0x7f0000000900)="d1b68b4dab37bc91745b1233d72c0e720be51855a5c3efadacce254106f37ffa8f1a4e91cf68dc5210e5e7064009911719f430db3edfa127b08c3691ee9b34ca9f8e26235bc5cba7873458c134b93b19a403e07e0462e60c7e69ca2b26dcb08778b190e7c990eb4c7045a76628cc2b34c53d00255c9a8fbe8b9d26d24d8f585c251d54a34d69e136b4805fdb15f6f97ff76633f3600cd51e74a812b3dc44acb5a1ead6895c64076c2e665fcdd1f0f84551add2a6e7fd9ceaf8f0d61d07d21f18203b24aabe772922ffdf66bcfa9a51ca2535c03dd1ccf23e50af0477e8ae9c2ce42ffa8a", 0xe4, 0x40, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000a80)={'team0\x00', &(0x7f0000000a00)=@ethtool_sfeatures={0x3b, 0x8, [{0x3ff}, {0x2, 0x5}, {0x7e, 0x1}, {0x401, 0x2}, {0x8000, 0x401}, {0x7, 0x1}, {0x1f, 0x1eb3}, {0x6, 0x81}]}}) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000ac0)={r5, @in={{0x2, 0x4e21, @multicast2}}}, &(0x7f0000000b80)=0x84) ioctl$PPPIOCSCOMPRESS(r0, 0x4010744d) 15:10:45 executing program 4 (fault-call:4 fault-nth:2): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x2, 0x3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) 15:10:45 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x200000000000001, 0x0) bind$unix(r3, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r3, 0x9) connect(r2, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10040424}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x108, r5, 0x820, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0xffff}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9571}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x7ff}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x5b}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gretap0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0x108}, 0x1, 0x0, 0x0, 0x20000000}, 0x810) sendfile(r2, r4, 0x0, 0x800000bf) 15:10:45 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ubi_ctrl\x00', 0x200000, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001e40)=[{{&(0x7f0000000480)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000840)='IPVS\x00') r1 = fcntl$getown(0xffffffffffffffff, 0x9) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$FUSE_LSEEK(r0, &(0x7f00000001c0)={0x18, 0xc9c893f343abac2d, 0x7, {0x2}}, 0x18) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080), 0xfffffffffffffffd) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000200)=0x4) r2 = socket$inet(0x2, 0x80000, 0x1ff) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r2) sendto$inet(r2, 0x0, 0xfffffc9e, 0x3, 0x0, 0xffffffffffffff0b) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, 0x0, 0x0) write$P9_RMKDIR(r0, &(0x7f0000000300)={0x14, 0x49, 0x2, {0xa, 0x4}}, 0x14) r4 = syz_open_procfs(0x0, &(0x7f00000007c0)='status\x00') getsockopt$inet6_tcp_int(r3, 0x6, 0x22, &(0x7f00000000c0), &(0x7f0000000180)=0x4) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000140)='status\x00', 0x7) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) preadv(r4, &(0x7f00000017c0), 0x199, 0x0) lsetxattr$security_smack_entry(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='security.SMACK64IPOUT\x00', &(0x7f00000002c0)='lo\x00', 0x3, 0x2) [ 288.282147] FAULT_INJECTION: forcing a failure. [ 288.282147] name failslab, interval 1, probability 0, space 0, times 0 [ 288.355354] CPU: 0 PID: 16102 Comm: syz-executor.4 Not tainted 4.14.137 #33 [ 288.363912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 288.373550] Call Trace: [ 288.377216] dump_stack+0x138/0x19c [ 288.382331] should_fail.cold+0x10f/0x159 [ 288.386690] should_failslab+0xdb/0x130 [ 288.391216] kmem_cache_alloc+0x2d7/0x780 [ 288.396409] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 288.402527] ? add_wait_queue+0x112/0x170 [ 288.407424] ep_ptable_queue_proc+0xaf/0x380 [ 288.412928] snd_rawmidi_poll+0x1eb/0x5b0 [ 288.417187] ? ep_show_fdinfo+0x3c0/0x3c0 [ 288.421727] SyS_epoll_ctl+0xb28/0x2a00 [ 288.426021] ? SyS_epoll_create+0x170/0x170 [ 288.430451] ? SyS_write+0x15e/0x230 [ 288.434184] ? ep_show_fdinfo+0x3c0/0x3c0 [ 288.438349] ? do_syscall_64+0x53/0x640 [ 288.442360] ? SyS_epoll_create+0x170/0x170 [ 288.447243] do_syscall_64+0x1e8/0x640 [ 288.450182] audit: type=1804 audit(1565190645.339:122): pid=16078 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir525748567/syzkaller.UwknhR/199/file0/file0" dev="loop3" ino=264 res=1 [ 288.451407] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 288.451434] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 288.490518] RIP: 0033:0x459829 [ 288.494120] RSP: 002b:00007f04e5dbfc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 288.512225] RAX: ffffffffffffffda RBX: 00007f04e5dbfc90 RCX: 0000000000459829 [ 288.520310] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000004 [ 288.531076] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 288.540958] R10: 0000000020000780 R11: 0000000000000246 R12: 00007f04e5dc06d4 15:10:45 executing program 3: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xfff, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) open$dir(&(0x7f0000000100)='./file0\x00', 0x200, 0x100) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r1, 0x1, 0x0, 0x369e5d84) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280), 0x12) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file1\x00', 0x0) 15:10:45 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000340)={&(0x7f0000000240), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r1, 0x600, 0x70bd2c, 0x25dfdbfe, {{}, 0x0, 0xb, 0x0, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x40040) r2 = socket(0x40000000015, 0x805, 0x0) accept4$nfc_llcp(r0, &(0x7f0000000380), &(0x7f0000000400)=0x60, 0x80000) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt(r2, 0x114, 0x2714, &(0x7f0000af0fe7)=""/13, &(0x7f0000000000)=0xd) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xab3502623a8a5842}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, r3, 0x5, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4044) [ 288.552808] R13: 00000000004bfec1 R14: 00000000004d1d48 R15: 0000000000000005 15:10:45 executing program 1: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x80000, 0x0) lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, 0x0, 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_rdma(&(0x7f0000000180)='127.0.0.1\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000240)={'trans=rdma,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@sq={'sq'}}, {@timeout={'timeout', 0x3d, 0x1000}}, {@rq={'rq', 0x3d, 0x2}}, {@timeout={'timeout'}}, {@timeout={'timeout', 0x3d, 0x7ff}}, {@common=@cachetag={'cachetag'}}, {@common=@nodevmap='nodevmap'}, {@common=@version_9p2000='version=9p2000'}], [{@smackfsdef={'smackfsdef', 0x3d, 'TIPCv2\x00'}}, {@dont_hash='dont_hash'}, {@pcr={'pcr', 0x3d, 0x3b}}, {@appraise='appraise'}, {@obj_role={'obj_role'}}, {@smackfshat={'smackfshat', 0x3d, 'posix_acl_accesswlan1vboxnet1'}}]}}) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, 0x0) readlink(0x0, 0x0, 0x0) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f0000000400)=0x101) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="070070a2f2c0000025ed06010000000095000000c72a0000e59e33514b61aed81b31e630023dbfbc768bd27c40493f5682b81159db047f5a883bcdea697bda5ed6134696dfbdd3ba3ae7b2d3b47a5225b9683f4086f443e59f7941aec9fc94fb012d388e681b7fa64b0000d030b8ed7612533493cebaa65799f493d0a0cd2eb5cc374fea6ab30ecc47"], &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) quotactl(0x7fffffff, &(0x7f0000000700)='./file0\x00', 0x0, &(0x7f0000000880)="c279c2ea85") ptrace$getregs(0xc, 0x0, 0x0, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, 0x0, 0x800) syz_emit_ethernet(0x100000270, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800460000280000000000009078ac141400ac1423bb0703907800000000000000000000000000000000612c4c8c62f5f73baad76b1cb64245fd0096c6c60b61caf401027e6c029d93fa41575d488d46"], &(0x7f0000000040)) 15:10:45 executing program 4 (fault-call:4 fault-nth:3): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x2, 0x3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) 15:10:45 executing program 5: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x4000, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000180)={0x392d, 0xffffffffffffffc1, 0xada, 0x3, 0x2b6, 0x100000001}) fsetxattr$security_smack_entry(r0, &(0x7f00000000c0)='security.SMACK64IPOUT\x00', &(0x7f0000000140)='lo\x00', 0x3, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r2 = socket$pppoe(0x18, 0x1, 0x0) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000040)) sendmmsg(r1, &(0x7f0000006540)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="194e253d25ff4b9d037ffb4471510b1eabc8ee4bce52be62f0aba6daba06b77198fa8de72db563a71dcfd3185d6086ea8629a637ff517cec3663173e7a7befd22e721cbdb12b33a8a3c4449334c0ee6951f00fff13b3bdef4d5b6a90cf84865cccbe545a6f8a760e008d248d631d05cf7883382c827c2b8746000e1ff820040649cbc4475931d449f2df1c1bc42b2089321299764a4385c073734e0800054e3ca490d9d2e6c2070f99c94ebf64ed947d12047551121e17a98579e9ddda38a5cda14c97a65eb664d58fe4", 0xca}, {&(0x7f00000002c0)="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", 0xfb}, {&(0x7f00000003c0)="b80599af38f996c6968ca4b7273214fab7b4869e53e1b751619fcc91cad4", 0x1e}, {&(0x7f0000000400)="060b8c674cb2cb3fdbe0a52768d824595842de1c8bfe134c6f8be1841ee97881ee15e3387aecb9eaf1a00a0f3052c9242bdfe9a987461b8c22a037d95799a4d62fcd58c254f5c3ab3de8ea0898e4eb6055fdb9c78b3ac4574dd06a1cb4d61428a0636de7edebc15f3d7f3ea8f5c6cbafc941d7ed8a8007e3128144e1a594dc9e63741c6b2a1c27f9e4a4d5e000bbb04fd8a2cc7c438563fb749e791b6607ebd93e721c8a807dbb67", 0xa8}, {&(0x7f00000004c0)="d10a91014569eb7e56d6abc86a5f189ac06c153104", 0x15}], 0x5, &(0x7f0000000580)=[{0x1010, 0x196, 0x6, "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"}, {0x10, 0x112, 0x3}, {0x10, 0x117, 0xfffffffffffffeff}], 0x1030}}, {{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f00000015c0)="b5e893d185c8ddfd7ba732ce2566a4342f76ebec115f27e933525418d0ee1dcb08907244f54e3677bb0fbef6128b9ae029ac772a77e183b13a12491cc954627f081667a8980250cc829a54da165e6d754ca1e35eb645cf00ddd6c5fc8138bb4d1492d04c2fb6f7306ef1031a9dba47b67b1f4599cc99fc4dacb1bae56b3fc167a66a99ab09d4fdec6b4f8956f6f07d3af6d9e677c4a70ad8a5ef066727", 0x9d}, {&(0x7f0000001680)="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", 0x1000}, {&(0x7f0000002680)="0ecbb7183e346ac8628ba411b5e59c1f6917e1d4dcbd3ad374347d49ab5257b80b7d3af64a2a9cec60c43a13696b5efe1e40b86e51ab3015c26473301a1ea538281882e9ef881fd603ad9cbc6e927e268e947f3602e15f9593fac6f25255a0819d", 0x61}, {&(0x7f0000002700)="3d805f397cdc07ab6276ace9a39a49b04c4583dcc18ad0a1ed1585b32fef9dfc217c0cbe186637e3aa1d05a53a1a6214e1ec998c1ad1fb33bef63b103a09bca7993b184bcb8713eb3743a14cb57c9ea19faf9bbb07a0fb3edc9abf13a9eab850cb332bf2e1bdb113e492832d730e2136eecc9f9347dc9d6f7796d4c4688acf0b01812401e2127a5561254ffd3120b9f18424693142561d673996", 0x9a}, {&(0x7f00000027c0)="55047be6d0db9251fbefb0c8a3d55b688c7d10677efa0d91675f874e6cf5894b1a3bac3ac2dda8ab3ecad2516d62a0eb5158c3ec6b09d6d34d4acfa45a86636ef6bf0adbc617a8ada84f52a3057a3873696688ea24123f6296af8d4575e4fc39404ebf74890368b7f2718defe1a0544924c4960f28477ec936615547e6260c6082d5c5cc5c4c2d41f2c1e7a191801a879f402ab9c3718c885648445421bf9530089e4ccf7e7470fa245f0ac4cb808c21c2e0f526bc64274efff4b064c684d51b037272a5", 0xc4}, {&(0x7f00000028c0)="85accfb5f8c69b5661a43a4635bc95f3b390352b0e217f172fa51ff75f652e19e42552e69106c66fb8007f9820e952d2cd1445c27f0fac946b9ffe1ecc67a32ad2e14632cf14bf469f3c432d5d169c4599f89181676be0d14cc57385e718851d55387d281900423d255651cb2bdc2605c11e333e8018a99b7ed44765b3c079703422463b1345e4a1c83c8ebb7fef259d23d9f7ded4cf6788032a81a5bd55ec75cb07a76473e2954d141a142b7daf5c779d353b1ddf4799abd2841a0ec0ab15a743034acac0a5e5454c18f02671fd720e91b422db", 0xd4}], 0x6, &(0x7f0000002a40)=[{0x38, 0x6fedce8843f15b36, 0x1, "13b7d7d2474d29b03ea02d2e13086bc117b260644c1e74375c1e7686f5e00356aa572611"}, {0x40, 0x118, 0x1, "9a5e564dbcca7e7acb46ffa05bc3417bae59ea74df4814c6ba3291b901e4f9f249eadf5810dccd17017975a818d3"}, {0xb0, 0x10e, 0x1ca6, "ce6822abcbce2023cc8e286831588c0f6089097e024a0c7514ea9953df6efb625287acccfaf2a8f5beeec4abc8f561534d50de08183b739464cf16dabc38c6cb8a1cf2bbc6528a80d170c8a9f6ccb8748c5b827799128abf82aa2acf14813be924b8637ddc2a8ef6d0686be0684fc64fed5a5708b668078d8b42e885fd2a47077ac981e8f48dd3ee254709543b0b23ccec88a61fb7e107c6e1807f3d12"}, {0x88, 0x18f, 0x5e4ee3fc, "70b32a3097cbfadd4e069301b8964239ce6c47bd05be1765abf13e4d1d10ab452a811b0356708d1f3eef4e4b98016a862a5a1f34ce0305a22fc90107a9f7c2d0dd887f5869ed6d4aea1ddc5d5939c35a6acfd53860831c4e9063438af67665837ce6efa73ca8589a8419e967e58a0d6b9fc2cbf67cbc0e38"}, {0xd8, 0x10b, 0x7, "81a090f24cd83afc855e7dac478e813c9f22ab1c5dfef2a31164827aba5693322e46c59d0d845a9591b768e53afa168b28a01b702a94f12b627b779588072302a9d5b9b65a52a8f613a59137b91bf12c13601926eaa688a634dd665a4490fac7f33ab60b3bc8e63409e9d191cac7a3bb1225c9f9aec0dc9649088367933f4fc8403ae403b34d263bc209e39aa2a3ed6287a8340136fa2d4e2dad8b1a5d478f175c6548c2612f6c9723926a299b6c9b7f8d12e724b0fb443618f4cb0bf2b5dd32b9a90727185a079c"}, {0x30, 0x11f, 0x7, "79e055ca1964d9c7a6b674f3b266dc1a42340e1d429afea5564f9764322b8aae"}, {0x28, 0x108, 0x2, "bd2f5e4e355ab2004954baca8b704b5db5071386d7f25460"}, {0x110, 0x10c, 0x0, "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"}, {0xb0, 0x84, 0x0, "1af5dacb1c801d8e0875d8f908a047cc37fd32ac18d71ab8ce480753603515511c51b6dbdb97373dde8daf5a4becb3db4b3f681c85994c96f4386bb5151a480864b639d6538c211cbd3f8953f5b443495e7f4b0f8df0502a0e65991a985fca7c9f59fae9717499a50239aea50cc67f0cdde57470613a9f323438da2b4e531da5a8d2b649449169ba4d9d0eef465c2cb5935051959d7c845e9d72"}], 0x4a0}}, {{&(0x7f0000002f00)=@ipx={0x4, 0x7fff, 0x2, "bd9aa4ed2e49", 0x7c7}, 0x80, &(0x7f0000004440)=[{&(0x7f0000002f80)="ef051623e4835f91ac2adabdf9c5d91c4fcea41c02a24c92f8f2500797fc2df918a21bea4a4cb280b680ccbd8ffb718f68913b9f41da72c2d2dee8611aacfd117843f313039356bdd2a6e9628e30be6aab3c7900b37ecea172d3f510406f51f33c3caf650fd2fbd803676e7eebf9d2b51ac33a5cf6f2f939f398c6958b14e7625b95416d", 0x84}, {&(0x7f0000003040)="b37a3aa15f1dcc2bbf1577d5bac5e14255b1579f208f33cb44ab1aaf99237012093fddd90e24f6260c63f3ff5f2342bf76891a505e5c5d1f409066712e82ad91d3c073d05bf1a2bf7337b79527c2212750c84fe926cae73b2f006173e6639559e75137d381117d1152d891ee61f507cc29e7cc8fce3fea3e611707f55a07f33e4b115d8f54ed3e82c675814dd0b34420685532991171a37b3b8010273d625c78e1e34ca6f17f65737a6172c641971415", 0xb0}, {&(0x7f0000003100)="45821395600ff571348754f6cb4d345aa1542bfcf715c6147f42725e45534962f223214d37fdf76cdad38ae447545a56d887149e1b588f997413f3df8c386da8029fe488ac86be015b0da6a06bd0850c5e9eeb9c1a1f9edb38ff15deac0b1bb34d02ac67fe87e34b11efafa0ad5fd6cee5a896672dd4e5f3e7e796561c2be05996a7562b4a874279441bb1da1e9a0dc1572feb", 0x93}, {&(0x7f00000031c0)="2d4341bc6debc9176d0c09c5935c58d48d80c0fadefbf87bdcea6ba666543b31e343aad165afa4e6d7a162e2e6ab98aab2a30e8dbbeff03d9e81719107ed8f4a279614d3407c64a085b18fc48dc76ad1199227f5a3698e65fabfece7ae7f93c197adc5bb8eb3f2155e67ab", 0x6b}, {&(0x7f0000003240)="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", 0x1000}, {&(0x7f0000004240)="7e609ece75c99c4f123123499d317164c9add36c085d19457cbfc7e5f6e080e3d79d2bcc180bee44caf5d8a638d870a4f965d05e5f3720e1a88876b9ad7b6487f5ed4638fd86e068a2e581880dae41e88c0713bd569fec4076b33227abb1cb92338d923dde2c6c45f31a254aa2ed268f1f088c72e0d9bfba1764defaa577224439ea49af637383df84add827d76e5df759a8ab9a02f2a2c41bdada87d74dd72d5818f3b569492bdf3357d0553bf1d524bb49e6fe0e5b", 0xb6}, {&(0x7f0000004300)="93fa5b7a0704d9da7ff7e667fd6eed97684e9cda35f525defc5d3623225858f0591cbab3c7c949838a1e94bf3f4db0f060c0898db4e7d1934e198ceb842c63600e9092ed24583ea6c621f5749251fd0819c545df22adfe2e05008b6b99f01fc53cd054511fd01b84f8eb4ab31ff1b2ef69d1dde1c5a46d506464df4ba4be2f1e4aa09f21af", 0x85}, {&(0x7f00000043c0)="edb4f35ca8007bff3708a850f8eaf900a561ef683ba833ff47d480d7f52f33a2ccb17e76bb9377b78e258af6addd4593ff440f447aa3ce6c8c84088d827764e58b07ec2a0d491c8e29e3563994", 0x4d}, {&(0x7f0000004540)="c817e433f2d22bd6844a71497ebcc3de3e52c95e3b4ff1a5247d1f38368a6906394b6a9bdfaefbe54c2fb1bf6504d719a745230b88e46e5dd5bb36dd30dedf4d0428fe1001bdd7db4eaba76842598bb5c6048aeb1dcfb95ae6686bdec7f961e6d3df60eb5deb36c2b18f25fcf4519453898874adf99958d7ddf0d55a96d09d1865144f97d0dda7bcae59354ca5a0c39ed0b5b304c0b6d58d69d913720feb1904f72d57e8844f64c0f7c02d0aad82cbf526325a361e2f6ad5503748ef0c871bdacd2334f9d0d6266544af82e424af695a9e74d7b8058bba", 0xd7}], 0x9, &(0x7f0000004640)=[{0xd0, 0x10c, 0x5, "dc8f0010377f731b6b7791b4e3bfcb5d1a33be6ec34533bde0fd2670cab5ea67244aeff2a505e391d19d1c40891d01156a145b7510570d57208a6749caf1fba9694a7bc6a4d84c28d004c9bef6997729970724a2150a97d19fe6f423e0a61925fdcb43fcd23bd061ad007418ca97b38c7193e04184b3768315c53ab3346061077d8ee1ea93356d40b9b6f55279d98849aa173d1e8e9306ca16d1190cdd398797cfcd3d1eecd1396bdc5f70ab1d0f4c7b4d05be74100b4b336a"}, {0x1010, 0x111, 0x8, "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"}, {0xc0, 0x116, 0x0, "a309eccb3d1c92176e8ccfdaf5b30cdd8857292412d83ca11fffd130354dbbc9230bad9f5c3aad0be3090361c493182235de92987ed85e210c60d42859092dcfec9227a06f964a7e116ad907266da15ab47744f26fa17acf591c70047d5282cf241ad4a3f8f7aa15c745f83340ceae4204ddb674a2c97186598622dc97129b86144014dae6131da3b444bad44f4da9a3a4eb34b41b59ff527bf326e8e82f0e50f21983b5010b16693f2d2385b81613"}], 0x11a0}}, {{&(0x7f0000005800)=@vsock={0x28, 0x0, 0x2711}, 0x80, &(0x7f0000005900)=[{&(0x7f0000005880)="d67a1825a4634d0ad9f507de71beb701de4c291174283ff322c750f62000c5d894051972426f88c8df0f243c035e6aebe2fd136d3a22b1dff1fb150b67af655cba2d3624e2933dd5eb449acc0d2f4ecfd1", 0x51}], 0x1, &(0x7f0000005940)=[{0xc0, 0x0, 0x3, "2e9491a9b37346a1a52493724632cdb550030788bc014d3e8c91eb7a8a7ef232bac3920f73a7ebf70174f3eabe8e53ed35e9a1e3b7f0d9b7c38280b12ee65f2e8234cd651238b651e41bb7a96aa21552962c1f3ceff4bae825b68ed1c2552fccda5f570f400c55236ce56b02c36b54af585e64295544fc09dd250f6a61c2d192eb5d0c848ffa46611dd29c3aed0230d1011aadf80dc54de0eac4b51a8861faa772ff484ebf7a0fb4cb2c"}], 0xc0}}, {{&(0x7f0000005a00)=@ax25={{0x3, @null, 0x8}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x80, &(0x7f0000005b40)=[{&(0x7f0000005a80)="831ec9b790d73bbc097fcbd8ba7cc5d86c2be1dea61fa3c1cbabcd879bea3f362eef10b26754605262ed2fa9239d4486c207d8f5beab613b51d60870611c349cb7320ffbe52d5c08f14296ba979d8f2305236dfa25f605b9507f00a29e443157192b45b7d6b01ec17c253996f3942240a0a32213206ff298e4896107f664925bfac683009f13c99d732e0978e7da439b8fdf75f7f4f44a89a2", 0x99}], 0x1, &(0x7f0000005b80)=[{0x100, 0x1, 0x0, "3bdda65e322e9ff2703275ebe7bceabdc923d0cb28d7b16791f842d724aa4cbb5ae8722dab9a12cbadde44718a548c74170a461fa0d67e6c30c732df2284e3bc5f2f4fa6f2dbb2cdf690c357c6296ef684e11fc41d26f42d6d7b2ec3502cbaf0d790634f07901b328cbf9084b7d3e510902ab6b02f68b407c9cdb7f1f0e1e3e9bd89e2efee30859eae94f18aab01871250a754d4d69781809db6692a2655e3cfb3b23fac108e094eae454610e071031eac7e5329f1076e4f9db6016575ab36da341b41bdaee9eb849b579e913cdd24a9d2c62a292c8a955021cb462234e0f8ff640abfa614d730d9b471c2e3abe2abd0"}, {0x50, 0x11f, 0x3ff, "26183ef2ea8a5537dc54518dfa73fd7ab9cfd819f5c0ae66181d6cec5bafd57b5876be011278941e82d2fa9aa72bfeea4048a1b0df6877dee69595"}], 0x150}}, {{&(0x7f0000005d00)=@tipc=@id={0x1e, 0x3, 0x0, {0x4e24, 0x4}}, 0x80, &(0x7f0000005ec0)=[{&(0x7f0000005d80)="c3ab9471b9f036ce1c7b8a1e83b17838a0753c25519a62f53b659da0c28605f2a1896f1ffe935b88b14915ac148e1b98dcb596fd711e838a61ee78d35d29a3a656d814e2d88ea39e31f268759a20f2bcfe020fd07dbe00fc78f571253a47c965da9702da596987d2f4c9c2eb1476222d475352567df6e6ec8a3684d6c4d2858ea2ef44790a25291758d5ae3394a78e4efb299ea360a05b95ae84394d0e5128f4f3a7c8d82cc39f08dd5c5b38b1be53acaa2f2a006ff477973f9488ce868ff67f9645d1241b3c36f411afe954d0a6b9c08e007b1fc8143d00200909dd27797c987d9a463ec787b3", 0xe7}, {&(0x7f0000005e80)="c743ba7975750a4e9a0080675b061b8348d0c16f25eaa387c94d922513914b2045a3f483eecca3ae", 0x28}], 0x2, &(0x7f0000005f00)=[{0xf8, 0x105, 0x7a4, "ed31960ec4c80d904d304b7e06f890462dfe862a44b2fc5e2fb64674476d3d1cbf71f62cc1c5766514bb6f64218169cfc4ce99c3f852c1c4251fd5f1c9e342e8b9f2e761e00d078c9428fde4cbcc8038c0a892051019b63ba8d08bb9cc67120e2a3d0fdf60e5d51d10d5336ab65c3190290195205efaffaeda554beafed2b4a3def95256a04d6b24b8d3e79355620966f7c5755680ec90104babf8eeb224c958e1095e1bb0b226812b1924252421325dbaeea4eb4565627fa7ff0a2016c9eda186ffe02987ba51d850e2bd4ee95d287b296a01ec8dce553a464a619144b6aa7913b8"}, {0x90, 0x119, 0x7, "ad15c0b3e51784440761fe2d870bceabbc12efda275384e4b60b48bd711e61019ee9bf22430eec1bd7566678ecf8c50f31149c4e375263dc4049dd69c954eb136bf66273152f74f1ab8bde46c898d6c9724908451463358889f9c76e3d4e43a387690184b725df4481c4d6496c2934ea84eabd6e0aa7e0a6256098ca005155"}], 0x188}}, {{&(0x7f00000060c0)=@llc={0x1a, 0xffff, 0x0, 0xae66, 0x100000000, 0x4}, 0x80, &(0x7f00000064c0)=[{&(0x7f0000006140)="af7610579cc66195de0e2f5cba3da069d11ededd53e15ad237bf6e11e06b1dab378655019d3c5d0501ddf7abb2c321a233f8c9145cbe382dda94b2ae64c5173f2a5f80851d69d6119ef10f77de51cf440197c48b96abb1957efb20e4f061daa31327cb9e30e5e279745e0ea39556f8b63c9f803d560fdc71609e5275d37edaa3724df8f30b68c77afc897b1b823dbc894cb3a28ace10a1b33b7f88a689a69dd252e3449c50f9ec1224ac8290e105fadf7c0717", 0xb3}, {&(0x7f0000006200)="660e3ccb4c6016abf37dc1ca1245586d3b206a5a680f05e471e8bbed0949d166969d74b3f17c7b039c", 0x29}, {&(0x7f0000006240)="ebd85cf6f9b797c92d88", 0xa}, {&(0x7f0000006280)="399b5371", 0x4}, {&(0x7f00000062c0)="5b7f054853dd772b77d83ed0d37585c15111ec41ba4f1fa38aaa9a11561e5e295a8993c3d9fcddf2fd49fbd62ef7948e8a2b5ef08bd624ee955aba17e63ad7bb4c32386c9453dd43ec23375457c414", 0x4f}, {&(0x7f0000006340)="79c593846308a410928100cef14121a9f931467180454894b95817b11ca6f75c8e6dae44ae4942e3022fd87dc5b110fb9e9a8330d5f211e65a27e5e6a0d5b7dc7c80b51c637405d9839bd4b345e4b9a9384a73d843fd66278b384170df0857eb15cdc33f5103ba55a87a7cebea409fc491d1c14244c71c7f23846815eca53534b9f8de3c3a3efe786178d55a03", 0x8d}, {&(0x7f0000006400)="220944283248f25d0492446fc2be5f5baca6c78dcbb256ffe56e54c941264ae4ca02c08ffb27b0792b46df4f39a2e7314877925b228c8fad60c8ca9ae4c21095b473aabbd3d6c969ee1bd62c67cb538e7418ad966ae79addf02137c6c195dfdf1178c5f01bec93bc0ae97ad0819a513165957bf006e6e8f9fd5b1854f00621e97ee5a14e551abb5486a2d89c9452d7ffb8288d00ae21ae1ab397366a92", 0x9d}], 0x7, &(0x7f0000007840)=[{0x40, 0x0, 0x7fff, "76b923b712d9954636f3f79444df243c41a5d80392712e2f1ae17ab430390421f21c1bf5579a47c15129134168be4fc4"}, {0x88, 0x117, 0x50, "18add0ccba1423a07557983c7d581fa3c1bf25c91695d30c6eb1bb15e171c55a6ce1c2ca4488269d24c665efd23f11a61d127f63729bdb354c50346884a9e32a0ba4c32d386f914c93a294f6062d804305fc79a0b023fd95d7a90716095077730e22071fe37bf01d83afa045bf8557f765a793"}, {0x18, 0x113, 0x6, "f0c8e8dcf993bd"}, {0x1010, 0x88, 0x3, "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"}, {0x68, 0x117, 0x1435, "d6948f51a4b36f0022f5d353418808b49d4d01fadea45cfde3a7acd68e435da045facf3cc83a99cb11803abc2a0f3b39924368cdee35394266ec9ff68974686ca4b2fe72d8111a0c969419e82c6723c79e9d1859"}, {0x100, 0x0, 0x6, "2f73b9001525ca25ab4c4a19ff7f3ca300945ac2052a08cc7e7803b364162c9f788e3660f6d42868d3a92581bc548d0efdb51cf81523ba1026ec6e2a559e5f1da96a66462984a719dc49ab7df463519be8c2761ecf91d58ef23c9ec1c12bd8afbae4d1955c948d2af003c4e45f78c66eac761ed1f3a99dd5becbf21695e1543c8fa25da349a07fcf78dde6eee24b721964637fef6d3f8d57d72144a8d59a7c459fa8dcf02dad96b2417f4263bb44efdc8f3900a3118fb201b4fb55496d29e625b43b82ad9e2bf42e8e12fc65444973fcb28ab19cac980feb61a12c15fe8eda19f9ffdee05ae22abd6d16895f4f84ae"}, {0xa0, 0x112, 0x10000, "e40d1b6286c5a4030cc17006a018fd1a1f22b54e2f108c74f2a015577df323d9ba8192f8bb68dc5eb0c851035dca54dbe13f5895cff3f96ae4c9be9a485549ebf16dfb85dc98857a1ef5edbe72948e7fec1b6338cd824b04d5df4186aeece64212b04b9461a003ac7fb90c853fdf11d854a6c1719a661129ce76ef1a36aaa6611b7fb72fa2af7fabfc"}, {0x100, 0x104, 0x2, "4248f4171fd7f4336fd729954d234c06435f0042d896592079890b9a69770ac6ff7fb75073f8aef9e66e15d305a270745407bed59682d7a620e77c0fc7b0eafec863ca527317929616fd7bb0525efa02aac1f972b6c306b4dd7846203f167bc3bf72c4f60db9f46c1ee404b044c277375d5c94cc614510c48bbd04c7ab4babd9e06fa40ece58a05ac36ae54475fafec6cf8bdd726e2cb9ed6f511fb78defeb3abb4e22caa415f0f3311ff193049642cede4e1f445b650f96c83073596f56828686e3b243bb4d18bb0e46fa818f2d318dc39027fdf50504eb040bac5a38305c122f883861355e6f85e41452be"}], 0x13f8}}], 0x7, 0x4000) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) sendmmsg(r2, &(0x7f0000004500)=[{{0x0, 0xffffff7f, 0x0}}], 0x1fe, 0x0) recvmmsg(r2, &(0x7f0000007780)=[{{0x0, 0xfffffffffffffd22, 0x0}}, {{0x0, 0x0, 0x0, 0x367}}, {{0x0, 0x0, 0x0}, 0xfffffffffffffffd}], 0x3, 0xfffffffffffffffd, 0x0) 15:10:45 executing program 2: syz_mount_image$btrfs(&(0x7f0000000040)='btrfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f00000015c0)='./file1\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYPTR], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readlink(&(0x7f0000000100)='./file1\x00', &(0x7f0000000200)=""/250, 0xfa) mount$overlay(0x404000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65302c776f726b6469723d2e2f66696c65315c00dbeb73a7d80e0f805d80b523fea5a5b86d3c196d4e4244e8695fb9c5c8857b8a6621daa7ba34858733f6c09cc6e115426eb3290f8d4110899b70f81a0439583dfc5269bb4a"]) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0x0) readlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000580)=""/209, 0xd1) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80000) syz_mount_image$minix(&(0x7f0000000300)='minix\x00', 0x0, 0x0, 0x1, &(0x7f0000000700)=[{&(0x7f00000003c0)="b48483c442ce32b22ccec89d4821990c856f3db51781503037f0acfd57f3ae1ba50a94c1d27189b889090ca391", 0x2d}], 0x200000, 0x0) getsockopt$inet_mreq(r0, 0x0, 0x0, 0x0, 0x0) 15:10:45 executing program 1: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x80000, 0x0) lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, 0x0, 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_rdma(&(0x7f0000000180)='127.0.0.1\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000240)={'trans=rdma,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@sq={'sq'}}, {@timeout={'timeout', 0x3d, 0x1000}}, {@rq={'rq', 0x3d, 0x2}}, {@timeout={'timeout'}}, {@timeout={'timeout', 0x3d, 0x7ff}}, {@common=@cachetag={'cachetag'}}, {@common=@nodevmap='nodevmap'}, {@common=@version_9p2000='version=9p2000'}], [{@smackfsdef={'smackfsdef', 0x3d, 'TIPCv2\x00'}}, {@dont_hash='dont_hash'}, {@pcr={'pcr', 0x3d, 0x3b}}, {@appraise='appraise'}, {@obj_role={'obj_role'}}, {@smackfshat={'smackfshat', 0x3d, 'posix_acl_accesswlan1vboxnet1'}}]}}) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, 0x0) readlink(0x0, 0x0, 0x0) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f0000000400)=0x101) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="070070a2f2c0000025ed06010000000095000000c72a0000e59e33514b61aed81b31e630023dbfbc768bd27c40493f5682b81159db047f5a883bcdea697bda5ed6134696dfbdd3ba3ae7b2d3b47a5225b9683f4086f443e59f7941aec9fc94fb012d388e681b7fa64b0000d030b8ed7612533493cebaa65799f493d0a0cd2eb5cc374fea6ab30ecc47"], &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) quotactl(0x7fffffff, &(0x7f0000000700)='./file0\x00', 0x0, &(0x7f0000000880)="c279c2ea85") ptrace$getregs(0xc, 0x0, 0x0, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, 0x0, 0x800) syz_emit_ethernet(0x100000270, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800460000280000000000009078ac141400ac1423bb0703907800000000000000000000000000000000612c4c8c62f5f73baad76b1cb64245fd0096c6c60b61caf401027e6c029d93fa41575d488d46"], &(0x7f0000000040)) 15:10:46 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='oom_score_adj\x00') ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000040)={0x7, 0x7fffffff, 0x4, 0x0, 0x86, 0x40, 0x3cf, 0x5, 0xffff, 0x8001, 0x6, 0x8, 0x0, 0x6, 0x10000, 0x3, 0x3, 0x1ff, 0x3}) close(r0) syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x2, 0x3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) 15:10:46 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") getresuid(&(0x7f0000000000)=0x0, &(0x7f0000000040), &(0x7f00000000c0)) syz_mount_image$jfs(&(0x7f0000000140)='jfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@iocharset={'iocharset', 0x3d, 'cp737'}}], [{@dont_measure='dont_measure'}, {@uid_lt={'uid<', r1}}, {@fsuuid={'fsuuid', 0x3d, {[0x36, 0x71, 0x37, 0x65, 0x7f, 0x7d, 0x37, 0x39], 0x2d, [0x37, 0x75, 0x35, 0x77], 0x2d, [0x74, 0x71, 0x66], 0x2d, [0x7f, 0x61, 0x33, 0x77], 0x2d, [0x77, 0x32, 0x37, 0x36, 0x63, 0x34, 0x3d, 0x39]}}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x2}}]}) 15:10:46 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e22, 0x9, @rand_addr="235b05d1bb65020d5421ad4288544f73", 0x3f}, @in6={0xa, 0x4e22, 0xffffffffffffffe1, @mcast1, 0x1}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x10}}, @in6={0xa, 0x4e24, 0x1000, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}], 0x64) ioctl$MON_IOCX_GETX(r2, 0x4018920a, &(0x7f0000000100)={&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f00000000c0)=""/42, 0x2a}) ioctl$sock_ifreq(r1, 0x8983, &(0x7f00000002c0)={'\x06\x00\x00\x00ap\xb0\x02\x00 \x00', @ifru_flags}) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 289.094261] overlayfs: failed to resolve './file1': -2 15:10:46 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000010c0)={&(0x7f0000001080)='./bus\x00', 0x0, 0x10}, 0x10) lsetxattr$security_selinux(&(0x7f0000000140)='./bus\x00', &(0x7f0000000180)='security.selinux\x00', &(0x7f0000000200)='system_u:object_r:pam_var_run_tJ\x02\v\x1c', 0x12, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000f40)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x2100}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x1c, r1, 0x604, 0x70bd28, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x1c}}, 0x4) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000ec0)='/dev/dlm_plock\x00', 0x501002, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000001040)={0x6, 0x3, 0x1, 0x8, 'syz1\x00', 0x4}) r2 = accept4$unix(r0, &(0x7f0000000080)=@abs, &(0x7f0000000000)=0x6e, 0x800) recvmmsg(r2, &(0x7f0000000dc0)=[{{&(0x7f0000000240)=@sco, 0x80, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/220, 0xdc}, {&(0x7f00000003c0)=""/141, 0x8d}], 0x2, &(0x7f0000000480)=""/141, 0x8d}, 0xf4}, {{&(0x7f0000000540)=@caif=@rfm, 0x80, &(0x7f0000000980)=[{&(0x7f00000005c0)=""/86, 0x56}, {&(0x7f00000001c0)=""/14, 0xe}, {&(0x7f0000000640)=""/174, 0xae}, {&(0x7f0000000700)=""/155, 0x9b}, {&(0x7f00000007c0)=""/230, 0xe6}, {&(0x7f00000008c0)=""/161, 0xa1}], 0x6, &(0x7f0000000a00)=""/165, 0xa5}, 0x3}, {{&(0x7f0000000ac0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c}, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000b40)=""/192, 0xc0}, {&(0x7f0000000c00)=""/222, 0xde}], 0x2, &(0x7f0000000d40)=""/84, 0x54}, 0x8001}], 0x3, 0x40000042, &(0x7f0000000e80)={0x77359400}) 15:10:46 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x822102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x0, 0x20e41) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af23, &(0x7f0000000040)={0x0, 0xffffffffffffffff}) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x39) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x80000000, 0x0, 0x0, 0xf7}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r1, 0x0, 0x0) [ 289.202912] SELinux: Context system_u:object_r: is not valid (left unmapped). 15:10:46 executing program 4: r0 = epoll_create1(0xfffffffffffffffe) r1 = epoll_create1(0x0) close(r0) syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x2, 0x3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) 15:10:46 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2) sendto$unix(r0, &(0x7f0000000080)="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", 0x1000, 0x40000, &(0x7f0000001080)=@abs={0x0, 0x0, 0x4e24}, 0x6e) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x20a, 0x0) 15:10:46 executing program 3: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xfff, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r1, 0x1, 0x0, 0x369e5d84) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280), 0x12) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_NESTED_STATE(r1, 0xc080aebe, &(0x7f0000000400)={0x0, 0x0, 0x2080}) creat(&(0x7f00000003c0)='./file1\x00', 0x0) 15:10:46 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r0 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r1 = dup(r0) execveat(r1, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 15:10:46 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x20000, 0x0) ioctl$VFIO_CHECK_EXTENSION(r1, 0x3b65, 0x6) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") write(0xffffffffffffffff, &(0x7f0000000100)="1f00000055000d0000000000fc07ff1b070404000300000007000100010039", 0x1f) ioctl$sock_rose_SIOCRSCLRRT(r1, 0x89e4) 15:10:46 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x1d, 0x400000) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000240)={0x8, 0x0, 0x1}) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000280)={0x9, r3, 0x10001, 0x7ff}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xffffffffffffff44}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="020a000007000000000020000000854105001a000000000000d74619ed1307d89524429adc542c0200000012aac700"/56], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000000200fd000005000500000000000a004872bbb6896209000055781309e339be593f7710aa000001ff0100410000"], 0x70}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x3ef, 0x0) [ 289.528219] audit: type=1804 audit(1565190646.509:123): pid=16126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir525748567/syzkaller.UwknhR/200/file0/file0" dev="loop3" ino=266 res=1 15:10:46 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xff}, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000700)='/dev/audio\x00', 0x402, 0x0) ioctl$CAPI_NCCI_GETUNIT(r0, 0x80044327, &(0x7f0000000740)=0x10) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs, &(0x7f0000000000)=0x6e) sendmsg(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000100)="b228483edb8ddde8f7d0c8cba9815c6c1d3fdfe90383904ed302a7a57fbfa384e558dc968fd352219fb52846c1b5c8f66452af950ad568528018275eba6a1ba23578527e446232a0d241f4d7605caffd40894a031b1ad4f5c8067c57406c02028ac235454b5f7c3e4cca55706c85c090e9f791445dfa4530d69b8eb861b4ee160fa5b4656f61c198f5cc491812eb4956fcee953fa226038c946ebcc953932bac36651fcb5de32bceafb12964ac3de84e8606cec1b3616527793a8d19bf8c96b2e6533ad0d0ba56297e040509cfa8630e579fed4304560c3e7ef9113e212e987da2", 0xe1}, {&(0x7f00000002c0)="ade017b3c63e2f240a8fc61ead57909d49f142392ece1a299bdb98d8f2b19ec7b79ddaa995233156fa8d3370bc2678968fa1db165f1a9f6cf5fef49e3d9872e462c8d63180786f08c8c30bf40f234c9bad8ab823ad8636f52ba960ed419a58ae70d0953e842a0a7591cf548598936ff6088d1a2ff4a3708ce599f9e9b6df56ab8977f0984fcde7edcfe10af72cb91a37849934484d93c14356408f408bbe877e78471de1098f43de2f492d231ba8cc8161f76c309e582906cab57c0cccd001be69f73f559c2d262f31c856", 0xcb}, {&(0x7f0000000200)="61fca5b36ac0b61cfb519dded6a816e41619a1fa3b820e552601c1989aa63344d3f0f4ce60fbe2eb411f761eeaa7f7c0fea609ccdb88c9e41b", 0x39}, {&(0x7f00000003c0)="631d05d562d86773c12cf635f2583398d0d7a748c789b74d2b9a772a2183e4e66cdbd5db0caca445cbb615dfaff728ffe077c1ecf9794d310e6aa863435274891c1657d46dab3639f8530f406261755ae69b9f3984f54b95e33b223b988ec08942e1fe8a815feccb9091753d80fb8719b107ade0d24b84e5761200bc6f190e4206172996c95a2e19c5c49bf67366ad7265f04f084faa0ad7bad4fd76da82f91f36f3933a539153e19a9dfa30eefd484beb629b6e2611e494973f72932f8a6279b3bc9617d41cd83dec075b1884679c33cbe1dc537eac5c21f1b68b0b", 0xdc}], 0x4, &(0x7f00000004c0)=[{0xf8, 0x112, 0x5, "2a121d9c0d87b5afaeaa4be8aa4351b66755c82b03540ac075e7968d00a1cc0c596ff686ae6e7f1188998324a1c0bc934271de1f999e951ce657de76097beb1d75a4d40544e00f7b98522e0facdc67fb6e49ba1be87f9f8b0e3716ae30fdcf596f8c63b9a265810d07be826f9f1a8c4eedbf923e646df03b7893f230d6cde68dcf11093c643469586234929c5138fcc67525b4a7937b88ba896e2e267762ed60fbd52ca028641802e044af9c7a2b22054a453c0aff3c2ab96775139ca3fd34c3fa675b346b062b5a0c788dece8c462e8201fc804a680cd9dd083f60b652e9fffc38be3e2201524"}, {0xd8, 0x112, 0x9, "d53bd542065348a72af79af68b0345916a3f4a4c4fe3a9659ef97e2726a1bb30c934a2617b3dd0e2d2c95218690b3abee706adf131ce0986cc41b8974b69980c61f69d1db6df37d62aa6d2e42047732654f88dda71367d6bc5fd3bf48fab75279f83fafa060578a922cc960200a0abc7f75034fb3b5f9d8a3306f7155539caabe239707ea58741e42b0c94e547078e4d7ae3f484969805c11320dcbaba8e1b1127463c2abf491ad534370f9f48f67ec87c8a04649ebc7a68314a5a279fc493fbcaa43970f29cee35"}], 0x1d0}, 0x40000) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) sched_yield() 15:10:46 executing program 5: r0 = socket(0x100001400000010, 0x2, 0x0) write(r0, &(0x7f0000000080)="2400000052001f0014f97407010904000200071008000100010000000800800000000000", 0x54a) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x302, 0x70bd2c, 0x25dfdbff, {{}, 0x0, 0x4102, 0x0, {0x10, 0x13, @udp='udp:syz2\x00'}}, ["", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) 15:10:46 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000087c0)={0x0, 0x0, &(0x7f0000008780)={&(0x7f00000086c0)=ANY=[@ANYBLOB="440000001000050500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000c016e00"/27, @ANYRES32=0x0], 0x44}}, 0x0) 15:10:46 executing program 5: ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, &(0x7f0000000040)) openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x620001, 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000300)={0x1f, {0x1, 0x6, 0x3, 0x0, 0x3, 0x2}}, 0xa) clone(0x41ff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_SET_FPEMU(0xa, 0x3) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) r2 = syz_open_dev$swradio(&(0x7f0000000280)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)={0x4000201f, 0x3f000000}) close(r2) 15:10:46 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000000)=0x4) r2 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x3, 0x24001) ioctl$BLKROGET(r2, 0x125e, &(0x7f0000000100)) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4000000000001) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000180)=ANY=[@ANYBLOB="1f0000000000000000000040050000a90000e7fc4b83bbb600000000c2b7871001000000000000002560b700ff"]) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)={0x2, 0x2, [{0x485}]}) [ 289.718530] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pig=16212 comm=syz-executor.5 15:10:46 executing program 4: r0 = epoll_create1(0x80000) r1 = epoll_create1(0x0) close(r0) syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x2, 0x3) mknod$loop(&(0x7f0000000400)='./file0\x00', 0xc800, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000002c0)={'trans=unix,'}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) [ 289.786392] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 15:10:46 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket(0x8, 0x80806, 0x1) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x20, 0x0) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x40, 0x0) ioctl$IOC_PR_RELEASE(r3, 0x401070ca, &(0x7f0000000040)={0xcc6d, 0x2, 0x1}) tee(r1, r1, 0x5, 0x1) r4 = dup(r1) setsockopt$inet_group_source_req(r4, 0x0, 0x2c, &(0x7f0000000380)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) ioctl$BLKSECDISCARD(r3, 0x127d, &(0x7f00000001c0)=0xffffffffffffffff) ptrace$setopts(0x4206, r2, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300021b000000000000000000050005000600000000000a00000000000000000000997f6699000000000000d6dbb905d1f86beb0000000d002800e0020000b89c1aa2997da12ba79996d8ee000000809ac1ec3d95c9a0af6fa7fe171ac34721f755b088c2a08594e391798e4fd4959b00000000010000007525a30d463ea43084dc1840039649673b733890eb3db522d9e73a871e86cc8cadda87000000010200010000000000000002fdffffffff05000500000000710a000000def7bd3e10e2e6e0000000003f"], 0xc9}}, 0x0) tkill(r2, 0x10010000000035) fcntl$setstatus(r1, 0x4, 0x80000000002c00) [ 289.838156] audit: type=1804 audit(1565190646.819:124): pid=16216 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir525748567/syzkaller.UwknhR/201/file0/file0" dev="sda1" ino=16561 res=1 [ 289.892852] 9pnet: p9_fd_create_unix (16228): problem connecting socket: ./file0: -111 15:10:46 executing program 3: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xfff, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r1, 0x1, 0x0, 0x369e5d84) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280), 0x12) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file1\x00', 0x0) 15:10:47 executing program 0: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xfff, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r1, 0x1, 0x0, 0x369e5d84) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280), 0x12) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_NESTED_STATE(r1, 0xc080aebe, &(0x7f0000000400)={0x0, 0x0, 0x2080}) creat(&(0x7f00000003c0)='./file1\x00', 0x0) [ 290.590320] audit: type=1804 audit(1565190647.569:125): pid=16259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir525748567/syzkaller.UwknhR/202/file0/file0" dev="loop3" ino=268 res=1 [ 290.626103] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 290.656994] FAT-fs (loop0): Filesystem has been set read-only 15:10:47 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20325a0d1de0c467b3a057000708007ee5f9ffffffcaec4fda00000010000000050000000000728c48d21460190849b0be182a071f21003d46"], 0x1}}, 0x0) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000080)=""/42) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(r0, 0x0, 0x80000003, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x35) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:10:47 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$VT_SETMODE(r2, 0x5602, &(0x7f0000000040)={0x100, 0x5, 0x7453, 0x9, 0x3ff}) syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x2, 0x3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) 15:10:47 executing program 0: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xfff, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r1, 0x1, 0x0, 0x369e5d84) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280), 0x12) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_NESTED_STATE(r1, 0xc080aebe, &(0x7f0000000400)={0x0, 0x0, 0x2080}) creat(&(0x7f00000003c0)='./file1\x00', 0x0) 15:10:47 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f00000000c0)=0x1) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 15:10:47 executing program 3: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0xfff, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r1, 0x1, 0x0, 0x369e5d84) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280), 0x12) ioctl$KDSETLED(r0, 0x4b32, 0x1000) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file1\x00', 0x0) 15:10:47 executing program 1: socket$inet(0x10, 0x800000000000002, 0x9) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x4000, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0106418, &(0x7f0000000040)={0x68, 0x3, 0x1, 0x3, 0x3, 0x3}) 15:10:47 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000300)={0x0, 0x108000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) readlinkat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000000, 0x1010, r2, 0x0) 15:10:47 executing program 1: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x1) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x1) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x102, 0x0) 15:10:48 executing program 5: [ 291.369789] audit: type=1804 audit(1565190648.349:126): pid=16292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir525748567/syzkaller.UwknhR/203/file0/file0" dev="loop3" ino=272 res=1 [ 291.473401] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 291.486367] FAT-fs (loop0): Filesystem has been set read-only [ 291.595167] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 291.603300] FAT-fs (loop3): Filesystem has been set read-only 15:10:49 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$rose(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x11, &(0x7f0000ffb000/0x3000)=nil) syz_read_part_table(0x0, 0xaaaae0f, &(0x7f0000000480)=[{&(0x7f0000000000)="02006800000f000000000000000000008128b14700000000d59863d20000000002000f2020cc5f000000ff0700167600000051776200000000000000000000000000000000000000000000000000000000000000000000008a6e947f000055a0ad2801c0f7161ccb9b83728af50b6c8dd5b77c2ce10080f989a6390accb1e106c15b4a643a938c583a6f0c711c27d054c4796c65ef26948e0b9ba179164148fe77d70f979d562a84e13426014ab12c728d70ae2665d19d3c423bb750bc8100000000000000", 0xc8, 0x1a0}]) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$PPPIOCGIDLE(r0, 0x8010743f, &(0x7f0000000140)) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) 15:10:49 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r3}, 0x14) syz_emit_ethernet(0x3e, &(0x7f0000001180)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60b7e72000032c00fe80000000000000aafe8003000000000000000000000000aa8000907800"/62], 0x0) 15:10:49 executing program 4: r0 = epoll_create1(0x80000) r1 = epoll_create1(0x0) close(r0) r2 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x800000000000002, 0x5) getsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000140), &(0x7f0000000180)=0x4) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0xffff) getsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000040), &(0x7f0000000080)=0x4) setsockopt$netlink_NETLINK_RX_RING(r2, 0x10e, 0x6, &(0x7f0000000100)={0x92a, 0x4b09, 0x2, 0x100000000}, 0x10) 15:10:49 executing program 0: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xfff, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r1, 0x1, 0x0, 0x369e5d84) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280), 0x12) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_NESTED_STATE(r1, 0xc080aebe, &(0x7f0000000400)={0x0, 0x0, 0x2080}) creat(&(0x7f00000003c0)='./file1\x00', 0x0) 15:10:49 executing program 3: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xfff, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r1, 0x1, 0x0, 0x369e5d84) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280), 0x12) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x80340, 0x0) creat(&(0x7f00000003c0)='./file1\x00', 0x0) 15:10:49 executing program 1: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x1) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x1) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x102, 0x0) 15:10:50 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x5, 0x20000000000003) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) [ 293.149518] syz-executor.5 (16318) used greatest stack depth: 23648 bytes left 15:10:50 executing program 5: clone(0x41fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x2000, 0x0) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x111, 0x2, 0x1, 0x4) syz_open_procfs$namespace(r0, &(0x7f00000000c0)='ns/net\x00') setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="6f73782e4065746831000e83851c144041521ddf0900000000000000d976fc75f4de2a5a787456d30b931e3c00cbfa11e66597f4c8badaef52c9284310ad407a4cc36fc623f795894e8685e95a44c81be67344acc148c07e29ef1cfcc1421bbf104a030b79a668afcde5fa307ace793f6fbd434e78bfc6ab29d6c952526e161bed8dc7562f82d97e1cc8ef3d6d3b8bd6813c9dea319fe94338f99461a9cb19eeb97ff883f111b4e116d511bce2b2d34a441a4db0d597b5012e22e9a6"], &(0x7f00000001c0)='nodev/\x00', 0x7, 0x3) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) rt_tgsigqueueinfo(r0, r0, 0x10000000016, &(0x7f0000000200)) ptrace(0xffffffffffffffff, r0) rt_tgsigqueueinfo(r0, r0, 0x15, &(0x7f0000000040)={0x3a, 0x1, 0x16}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x18032, 0xffffffffffffffff, 0x0) ptrace$poke(0x2, r0, &(0x7f0000000100), 0x0) ptrace$poke(0x5, r0, &(0x7f0000000000), 0x0) 15:10:50 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x2, 0x3) r3 = getpgid(0x0) fcntl$setown(r2, 0x8, r3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) 15:10:50 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x5, 0x66, 0x5, 0xfff, 0x7f}) r2 = syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x2, 0x3) ioctl$SG_GET_LOW_DMA(r1, 0x227a, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) ioctl$VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000040)) [ 293.575536] Dev loop2: unable to read RDB block 1 [ 293.589240] loop2: unable to read partition table [ 293.600782] loop2: partition table beyond EOD, truncated [ 293.606446] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) 15:10:50 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = epoll_create(0x20) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x22a000, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000140)={0x2, 0x149, 0x9c44, 'queue1\x00', 0x7}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)) 15:10:50 executing program 2: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000800)=ANY=[@ANYBLOB="0000042000000000000060ed207441733bdae00fd300000000e46ce6160a0000ff0000008a2269b881407325049637e5df72d0195dbae7fa96feffffff00000000e289971e87943b844038fac1577f90fb1e9fbd4015b424af570ca64a49a6d21c196a465fd810ab43d857e1ad0d1d280000e9c6e75f0151fe1dc5dd8e4b573928c739cba5e9e1bda141c1901b4da548b8073aae18976fb8e6201b0c8a82e2526dc59ec6d7544771393d14eafebb2ec1e50123c5583d29b942520c8942ae00100000ad7fb198b84b59639a66ad1a608315e267046d8ec51f0b486a001d8f480f22cb8878e0681107b1c5da0172fea4774da9d1b119004915a4ec746d7a3e68f6d208b4dc390fb44eb9d875a14a5b99893537ac18c8e5f169fa315963e8bfb2aeaf02f52aa892f4545d2bd33ff60000f7ff7cd24f67a39db1f457f8010036afbeed28788ecbd59b79d0723cdcdbcd5f816474796ecfdeb1e1c2f02fed68520cb626c689f3b350142c0be62802f4b8c8d299f05ec36986a99e6ed93caccb3c7ef8fee6f1fc12fab0790d6603c03661d75201a9a4fe6c2b4d7b97d115b8f2a97db37c7baf68825d9003bef61e005d1c1fb50a3c82202c53f3c496b9d2e50ba4f0530f57dcd7867a7235fcaed05ac66b34cbcbb76bf684b1d95d52af30858e442474bbebc9803fc871ddf05945b8e9fc4e5ba8e3f4f9121f90a454df27021a846f5f445ef951ca4bc575794abda2d365635d0c66c1867f10eb4d871b31c69e79342de12a6d46ebd5417deeac8d9ccfc8c465256d40f1cf00000017289fbb65c028f61f5370928d617f919ec60576201f1a4721b1befd6c0c9be9783c2546a8eb1a5d0f295ab1514b4691dcc34d186f390b731885dcb37b616588b39d425d4910dbe85aadf7048a0c7aa495e63b46ae41ddd183bf68940f54b434f71348a07ed931eb3c62b8d5fcd1c1ddcff741e9998748b950a22b74435a72718b469676c24b84dc1b79d5045801194a23bbecc5f49b754eca1cca3d6cacc31cdb50ec136c97c073e7b476bc598cc3df8fb84fc9244c0808407970a52e000000a46c69d32bccff0c4eba7472c0e0500bd8c2aaf49f7ae487d363d0b4210aec5dd0645bd996b07031774ebd76eeae72c53a216e39e5a85f2330dc478f7c3fe7760dc424f1934e2105c8f0f7fced6e0760de1fedc16f7568e06ee2a32220ee6df22c3fcf866cae160beb1eb8847d527c182aefc94c3374c4a0977ae954e62691abce4b13b0f751868479e77fbf65475c2876e93d4632e14c81c87b8f975d4fc3ee1a003cf8ac03631758d5038780eec0c6227a35e7a51ce4c136d143a79379ec58f20bb45f4dba69df1a5bf669f23f0ddd38d2dfc839aaab07d6a303d186bbde5f27a63338e94acb64372946980c63a179eef233a9c93c7a91b8fb3b9e1c30d7733a5a4cfa9c01cc06651a7c4447887ba11f3a6d00000000000035d8fb179929fbe1d68434bd26f25b97e0d3385b935b37fd36b5c7663699c0113fa0f3e73ee817f52b1b716dea9f3cb2215035097619f5c7926067d21fb2bdc0c843120085cbb79c3de4164077462c495e3bb60d7543562b88086f57a91f0fdb04604c14dc8cd2ac0badc2af3db18e2a250d75c2a25120cd98db7a7e2e15d1cbc99e8c16eb4d1a823a866000"/1196], 0x1) close(r1) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000000)={@remote, @rand_addr, @multicast2}, &(0x7f0000000040)=0xc) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f0000000240)='./file0\x00', 0x8000, 0x50) sendfile(r3, r3, 0x0, 0x3) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r4, r4, r4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/null\x00', 0x41, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r3, 0x40044900, 0xffff) r6 = socket(0xa, 0x3, 0x8) write$P9_RLINK(r5, &(0x7f0000000200)={0x7, 0x47, 0x1}, 0x7) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffe000/0x1000)=nil) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x3, 0x80000, 0x5, 0xfffffffffffffffd}, {0x7fefadfb, 0x8, 0x10000, 0x9}, {0x9, 0x20, 0x100000001, 0x80}, {0xffffffffffffff01, 0x984c, 0xfffffffffffffffd, 0xc96}, {0xffffffff, 0x3, 0x0, 0x5a}, {0x3f, 0x112000, 0xfffffffffffffff8, 0xc0}, {0xe60, 0x0, 0x100, 0x1}, {0xa7a, 0x2, 0xffffffffffffff81, 0x4}, {0x3, 0x7, 0x4, 0x7}]}, 0x10) getsockopt$IPT_SO_GET_INFO(r6, 0x0, 0x40, &(0x7f0000000500)={'nat\x00'}, &(0x7f00000001c0)=0x54) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000000)={'bridge0\x004\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x89a1, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) syz_genetlink_get_family_id$nbd(&(0x7f0000000440)='nbd\x00') perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = creat(&(0x7f0000000100)='./file1\x00', 0x0) write$cgroup_type(r7, &(0x7f0000000040)='threaded\x00', 0xfd87) fallocate(r7, 0x5, 0x621, 0x81) sendmmsg(r7, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f0000000740)}, 0x7fffffff}], 0x1, 0x4040000) accept$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000340)=0x14) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syz_tun\x00', r8}) 15:10:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mknod(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x402, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000440)={0x0, 0x0, 0x3}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000540)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000580)={0x0, r2}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000200)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000240)={r3, r4}) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='security.ima\x00', &(0x7f0000000080)=@ng={0x4, 0x11}, 0x2, 0x0) r5 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x9a4, 0x40) mkdirat(r5, &(0x7f0000000100)='./bus\x00', 0x106) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f00000003c0)={0xb, 0x10, 0xfa00, {&(0x7f0000000280), r6, 0x7}}, 0x18) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r5, 0x40106614, &(0x7f0000000400)) open(&(0x7f0000000600)='./bus\x00', 0x0, 0x0) [ 293.700111] audit: type=1804 audit(1565190650.669:127): pid=16331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir525748567/syzkaller.UwknhR/204/file0/file0" dev="loop3" ino=276 res=1 15:10:50 executing program 4: r0 = epoll_create1(0x80000) r1 = epoll_create1(0x0) close(r0) ioctl$int_out(r0, 0x2, &(0x7f0000000000)) r2 = syz_open_dev$rtc(&(0x7f0000000040)='/dev/rtc#\x00', 0x9, 0x0) ioctl$RTC_AIE_OFF(r2, 0x7002) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x80, 0x0) ioctl$VIDIOC_S_PRIORITY(r3, 0x40045644, 0x1) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000000c0)="36f3460f09c7442400917a0000c744240213000000c7442406000000000f011424430f18ebd8903d1d78f0df54e28dc4039968ccfb6466430ff26710660ff6c666b80d018ec866ba2100b800200000ef", 0x50}], 0x1, 0x40, &(0x7f0000000180)=[@vmwrite={0x8, 0x0, 0xfffffffffffffffc, 0x0, 0xfffffffffffffff8, 0x0, 0x9, 0x0, 0x200}], 0x1) syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x2, 0x3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) 15:10:50 executing program 3: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xfff, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r1, 0x1, 0x0, 0x369e5d84) setxattr$security_ima(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)='security.ima\x00', &(0x7f00000002c0)=@md5={0x1, "4c2862d9b39572c6df850cdb9d738af8"}, 0x11, 0x1) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f00000001c0)=""/81, 0x51) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280), 0x12) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) ioctl$RTC_PIE_OFF(r1, 0x7006) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file1\x00', 0x0) 15:10:50 executing program 0: r0 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000240)={'syz'}, &(0x7f0000000300)='\a', 0x1, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, r1) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) setxattr$security_ima(&(0x7f0000000180)='./file0/bus\x00', 0x0, &(0x7f0000000300)=@md5={0x1, "99bfb5a0c90323112bac0ae842d894e4"}, 0x11, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) keyctl$KEYCTL_MOVE(0x1e, r0, r0, r1, 0x1) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r3 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r3, 0x7, &(0x7f0000027000)={0x1}) r4 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0xfff) fchdir(r4) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mkdir(&(0x7f00000005c0)='./file0\x00', 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={0x0, r2, 0x0, 0x1, &(0x7f0000000200)='\x00'}, 0x30) write$P9_RAUTH(r5, &(0x7f0000000100)={0x181}, 0x14) sendfile(r5, r5, &(0x7f0000000240), 0x7fff) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f00000004c0), 0x0) [ 293.868747] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 293.878166] FAT-fs (loop0): Filesystem has been set read-only [ 293.891642] ima: Can not allocate sm3-256 (reason: -2) 15:10:50 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r0, &(0x7f0000003040)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000180)=""/117, 0x75}, {&(0x7f00000002c0)=""/185, 0xb9}, {&(0x7f0000000000)=""/22, 0x16}, {&(0x7f0000000200)=""/103, 0x67}], 0x4, &(0x7f00000003c0)=""/247, 0xf7}, 0x8}, {{&(0x7f00000004c0)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f00000019c0)=[{&(0x7f0000000540)=""/240, 0xf0}, {&(0x7f0000000640)=""/156, 0x9c}, {&(0x7f0000000700)=""/159, 0x9f}, {&(0x7f00000007c0)=""/4, 0x4}, {&(0x7f0000000800)=""/104, 0x68}, {&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001900)=""/144, 0x90}, {&(0x7f0000000880)=""/26, 0x1a}], 0x8, &(0x7f0000001a40)=""/98, 0x62}, 0x47}, {{&(0x7f0000001ac0)=@ll, 0x80, &(0x7f0000001d00)=[{&(0x7f0000001b40)=""/250, 0xfa}, {&(0x7f0000001c40)=""/167, 0xa7}], 0x2, &(0x7f0000001d40)=""/80, 0x50}, 0x1}, {{0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f0000001dc0)=""/235, 0xeb}, {&(0x7f0000001ec0)=""/127, 0x7f}, {&(0x7f0000002040)=""/4096, 0x1000}], 0x3}, 0x7}], 0x4, 0x100, &(0x7f0000001f80)={0x0, 0x989680}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001fc0)={'vxcan1\x00', r1}) ioctl(r0, 0x1000008912, &(0x7f00000008c0)="11dca5055e0bcfe47bf070") r2 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x2010, r2, 0x1c) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000280)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0xd, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$IP_VS_SO_GET_TIMEOUT(r4, 0x0, 0x486, &(0x7f0000000040), &(0x7f00000000c0)=0xc) dup2(r2, r4) write(r3, &(0x7f0000003140)="683638d606016674875f0e098bc053061c41670c27d451f27d7bf5bd662f70f28ceab0a347ef3fa05c52a430cadb8d", 0x2f) dup3(r4, r3, 0x80000) 15:10:50 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) mbind(&(0x7f0000522000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000000180)=0x939, 0x2, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="f123e170fc419ff604716aa133a5d799130252516aa7f8b4999ee89590f5ce4ce5a685bedc46c3126d00e899654dd62464e8b379e631e824629c6f43dcb0e900e4517a3ac6bd2d4f29e1b1a3d66595341e38ab5e89c2ca025c1adb03a2c808e5d00d9a264de1a38977ce8ab518ea429df73fa9a5df298b12efa86252e71d38503294d82f15afb53d17c7726cf02eed1ea8ed70cc049317a503b37bc7b972485cc74fd9b565632dfe0075618e4029f3ee991599dec1699bc4902e6206231c51e347661c3a18b079d92b63578537773eeb682cf6453c3da47d76bf4c8df1e21d7e0b4a5fc75ee91ea8271a717cb1aaf0b7ae82409c"], 0xf4) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_NOTIFY_DELETE(r1, &(0x7f00000000c0)={0x2e, 0x6, 0x0, {0x5, 0x5, 0x5, 0x0, 'vfat\x00'}}, 0x2e) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000080)) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f00000001c0)=0x3) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file1\x00', 0x0) write$selinux_validatetrans(r0, &(0x7f0000000240)={'system_u:object_r:kmsg_device_t:s0', 0x20, 'system_u:object_r:var_t:s0', 0x20, 0x2, 0x20, '/usr/sbin/cupsd\x00'}, 0x63) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) mremap(&(0x7f0000521000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f000051f000/0x4000)=nil) [ 293.897745] audit: type=1800 audit(1565190650.879:128): pid=16368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed" comm="syz-executor.1" name="bus" dev="sda1" ino=17041 res=0 15:10:51 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x400000, 0x0) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={@remote={[], 0x3}, 0xc, 'ip6erspan0\x00'}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x2, 0x3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000000)='trusted.overlay.origin\x00', &(0x7f0000000040)='y\x00', 0x2, 0x1) 15:10:51 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca501000000e47bf070") preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/icmp\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) [ 294.183206] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 294.200459] FAT-fs (loop1): Filesystem has been set read-only 15:10:51 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$void(r0, 0xc0045c78) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@ipv6_newroute={0x30, 0x18, 0x303, 0x0, 0x0, {}, [@RTA_GATEWAY={0x14, 0x5, @remote}]}, 0x30}}, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x800, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) 15:10:51 executing program 4: r0 = epoll_create1(0x80000) r1 = epoll_create1(0x0) close(r0) r2 = syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x2, 0x3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) write$FUSE_POLL(r2, &(0x7f0000000000)={0x18, 0xfffffffffffffffe, 0x8, {0x10001}}, 0x18) [ 294.235347] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 294.257421] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) 15:10:51 executing program 1: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r0, &(0x7f0000000340)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[]], 0x8) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x200000, 0x0) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) 15:10:51 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0xff) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) sendmsg(r0, &(0x7f000001b000)={0x0, 0x3dc, &(0x7f0000000000)=[{&(0x7f0000000180)="f67f986af9dc3ba1fe8000000000000087209739ae649266f062bccf78b94585b9bf1100ed8bc3b5", 0x28}], 0x1}, 0x0) 15:10:51 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000331000)={0x8000000002, 0x4, 0x7, 0x4}, 0xe) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) setsockopt$inet_udp_int(r1, 0x11, 0x0, &(0x7f0000000100)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'irlan0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f00000000c0)={@dev={0xfe, 0x80, [], 0x12}, r2}, 0x14) accept(r1, &(0x7f0000000180)=@alg, &(0x7f0000000040)=0x80) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, &(0x7f0000000000), 0x0}, 0x18) 15:10:51 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x80000000, 0x20440) connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @reserved}, 0x10) syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x2, 0x3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) [ 294.670355] audit: type=1804 audit(1565190651.649:129): pid=16400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir525748567/syzkaller.UwknhR/205/file0/file0" dev="loop3" ino=280 res=1 15:10:51 executing program 3: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xfff, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r1, 0x1, 0x0, 0x369e5d84) getpeername$netrom(r0, &(0x7f00000001c0)={{0x3, @bcast}, [@remote, @netrom, @null, @rose, @netrom, @null, @remote, @bcast]}, &(0x7f0000000100)=0x48) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280), 0x12) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file1\x00', 0x0) 15:10:51 executing program 0: r0 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000240)={'syz'}, &(0x7f0000000300)='\a', 0x1, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, r1) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) setxattr$security_ima(&(0x7f0000000180)='./file0/bus\x00', 0x0, &(0x7f0000000300)=@md5={0x1, "99bfb5a0c90323112bac0ae842d894e4"}, 0x11, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) keyctl$KEYCTL_MOVE(0x1e, r0, r0, r1, 0x1) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r3 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r3, 0x7, &(0x7f0000027000)={0x1}) r4 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0xfff) fchdir(r4) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mkdir(&(0x7f00000005c0)='./file0\x00', 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={0x0, r2, 0x0, 0x1, &(0x7f0000000200)='\x00'}, 0x30) write$P9_RAUTH(r5, &(0x7f0000000100)={0x181}, 0x14) sendfile(r5, r5, &(0x7f0000000240), 0x7fff) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f00000004c0), 0x0) 15:10:51 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xfff, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r1, 0x1, 0x0, 0x369e5d84) setxattr$security_ima(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)='security.ima\x00', &(0x7f00000002c0)=@md5={0x1, "4c2862d9b39572c6df850cdb9d738af8"}, 0x11, 0x1) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f00000001c0)=""/81, 0x51) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280), 0x12) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) ioctl$RTC_PIE_OFF(r1, 0x7006) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file1\x00', 0x0) 15:10:51 executing program 2: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xfff, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r1, 0x1, 0x0, 0x369e5d84) setxattr$security_ima(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)='security.ima\x00', &(0x7f00000002c0)=@md5={0x1, "4c2862d9b39572c6df850cdb9d738af8"}, 0x11, 0x1) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f00000001c0)=""/81, 0x51) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280), 0x12) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) ioctl$RTC_PIE_OFF(r1, 0x7006) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file1\x00', 0x0) 15:10:51 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000000)) syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x2, 0x3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) 15:10:52 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x2, 0x3) ioctl$SG_SET_DEBUG(r2, 0x227e, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) 15:10:52 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xb8\x9f&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) write$FUSE_LK(r0, &(0x7f0000000040)={0x28, 0xfffffffffffffff5, 0x4, {{0x4, 0x0, 0x2}}}, 0x4b75f483a1a3006d) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xfffffffffff7fffe, 0x12, r0, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0xc020660b, &(0x7f0000000000)) 15:10:52 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x0, 0x0) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000240)) init_module(&(0x7f00000000c0)='\x00', 0x1, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) getgroups(0x0, &(0x7f0000000040)) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) fcntl$setown(r1, 0x8, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r5) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) prctl$PR_SET_FP_MODE(0x2d, 0x2) inotify_add_watch(r4, &(0x7f00000002c0)='./bus\x00', 0x800) inotify_rm_watch(r4, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040), 0x4) ioctl$sock_SIOCOUTQNSD(r6, 0x894b, &(0x7f0000000180)) r7 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$KVM_X86_SETUP_MCE(r7, 0x4008ae9c, &(0x7f0000000280)={0x4, 0x1, 0x8000}) 15:10:52 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$KVM_X86_SET_MCE(r1, 0x4040ae9e, &(0x7f0000000180)={0x2400000000000000, 0x4000, 0x20000000000, 0x8, 0x1e}) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000100)=@gcm_128={{0x303}, "16b1538a289b52b3", "767461856c2b916ad329db700f160a12", "03305a41", "262e0387b68b8cf4"}, 0x28) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x1000000, &(0x7f0000000400)=0x96d1, 0xfffffffffffffcf2) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = accept4(0xffffffffffffffff, &(0x7f0000000480)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f0000000380)={0x7b}) fcntl$getownex(r3, 0x10, &(0x7f0000000040)) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r4, 0x400c6615, &(0x7f0000000200)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 15:10:52 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000280)={0x0, 0x5}, 0x4) poll(0x0, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x1b48, 0x480000) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, 0x0) fcntl$getown(r3, 0x9) 15:10:52 executing program 4: r0 = epoll_create1(0x0) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2f9, 0x1) ioctl$KVM_X86_SET_MCE(r1, 0x4040ae9e, &(0x7f0000000080)={0x1000000000000000, 0x3000, 0x40, 0xc, 0x1d}) r2 = epoll_create1(0x0) close(r0) r3 = syz_open_dev$midi(&(0x7f0000000140)='/dev/midi#\x00', 0x8000002, 0x10002) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000000)) 15:10:52 executing program 4: r0 = epoll_create1(0x0) epoll_create1(0x0) close(r0) r1 = syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x2, 0x3) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)) [ 295.665091] audit: type=1804 audit(1565190652.649:130): pid=16499 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir525748567/syzkaller.UwknhR/206/file0/file0" dev="loop3" ino=284 res=1 [ 295.910211] protocol 88fb is buggy, dev hsr_slave_0 [ 295.915505] protocol 88fb is buggy, dev hsr_slave_1 15:10:53 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000040)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6gre0\x00'}) 15:10:53 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$cec(0x0, 0x1, 0x2) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f00000003c0)={0x28, 0x2, 0x0, {0x4, 0x0, 0x1}}, 0x28) clone(0x2100001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000580)='ce\x10\x15\x00\x01\xf5\xb1\xab\xd2l[i\xf9\xfcG\x1aWph\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000000040)='encrypted\x00', &(0x7f0000000380)={'syz'}, &(0x7f0000000340)='wlan1!}userem0(:-[ppp0&^vmnet0:-!-\x00', 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, &(0x7f0000000500)) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000140)={0x0, 0xb4, "be0a6db0fc63d2c214648627eb16ba1eb562275b1de848030e29e2749af7f86f484e4c9cf465efd92377b0204e51cf8d1a56ff939723ab9da6b5ef4f09b73417561f6f380844ab9b632af09bfd1b59f2a1a5b16501c3344c199a47a3fc57d36220d7a8b29911e6fc83b21f11325132034c98bb117f2a6dd2c0482db763e7cc6f2fb157eee06d97a7096de84ad117e0ba8a63049c258126ab866baae76668350f3448e4ec89272d6a5eabcd5c7e29be069a0de8db"}, &(0x7f0000000200)=0xbc) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000280)={0x8, 0x8000, 0x40, 0x509a, r2}, &(0x7f00000002c0)=0x10) sendto$inet(r1, 0x0, 0xfffffffffffffef3, 0x0, 0x0, 0x0) prctl$PR_GET_SECUREBITS(0x1b) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xf4fffffc, 0x1, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0) 15:10:53 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r1) r2 = syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x2, 0x3) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000780)) 15:10:53 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0xfffffffffffffd87) unlink(&(0x7f0000000180)='./file0\x00') clone(0x2100001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup3(r0, r1, 0x0) mount(&(0x7f0000000200)=ANY=[@ANYPTR, @ANYPTR64], &(0x7f0000001c00)='./file0\x00', 0x0, 0x1004, 0x0) r2 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$TIOCSTI(r2, 0x5412, 0x6) 15:10:53 executing program 3: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xffc, 0x200) link(&(0x7f0000000100)='./file1\x00', &(0x7f00000001c0)='./file1\x00') r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) getsockname$unix(r0, &(0x7f0000000200), &(0x7f00000002c0)=0x6e) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r2, 0x1, 0x0, 0x369e5d84) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000001780)={{{@in=@loopback, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}}}, &(0x7f0000001880)=0xe8) lstat(&(0x7f00000018c0)='./file0\x00', &(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getuid() syz_mount_image$ext4(&(0x7f0000000340)='ext2\x00', &(0x7f0000000380)='./file1\x00', 0x9, 0x4, &(0x7f0000001700)=[{&(0x7f00000004c0)="8e136ae283bc7d5f3ff8f66b298349d2bae2814b7167c6befce2ca519185830835a78068df15e2ea9b2dd5556310d8239fcd7b2e1d7592ffb7f2009af364fcb79804a07949766fa8208212377183b692e28b15d7628068fb8666e98221e330ead3ad2f7b1b5bb3a93508256acf2777", 0x6f, 0x1}, {&(0x7f0000000540)="6c5edf205004688c7da16a5c53be802e4ec37b141a806222e7bc3342899368cb7e20620e3dcef64669563fb7d33eeec7d8e785578989c086c261d72c45ea782ac552703a6023082da1ec01802ce59089024b6c87d4b5161680ef41b34e68d6add2f0166f075f31a9fc87755c2383d68c04e2fa7ed8689c0171e67cc00e75034c7a", 0x81, 0x1}, {&(0x7f0000000600)="81ced8f5d72cd9cf8a426a6dad88cd0ceb2ce236d104d4cec4e88d0c7d03dea317e6d4a5d322354a04c52d43a0b8d1eb5f74168ceb5a402e772af573dc359c05ab72130b93a57fe0ff773aa245c3c5cba566418786fc76cd6a55ddd4b11af1d0cb96de0aeeef8af8f32fda0c72c51f946e29c218291dfc6b983ac9f51e638e2ac2c371434519ff033af3c9ed06ccb44ae99a256a565c6cc1d775d630aecc2599c4ccfd0f11a0f0c027e67e3c6da8a194198428893c47a6c91ee706099b90aa48c2d9e6b1885e97def0b09df14c331bb93bdf3f5a8f3da1418ae0fe0bd376852400379369f83c56", 0xe7, 0xb93}, {&(0x7f0000000700)="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", 0x1000, 0x74b}], 0x60000, &(0x7f0000001980)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}, {@bsddf='bsddf'}, {@sb={'sb', 0x3d, 0x1}}, {@dax='dax'}], [{@euid_lt={'euid<', r3}}, {@seclabel='seclabel'}, {@dont_appraise='dont_appraise'}, {@euid_lt={'euid<', r4}}, {@euid_eq={'euid', 0x3d, r5}}]}) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280), 0x12) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file1\x00', 0x0) setsockopt$inet6_tcp_buf(r2, 0x6, 0xb, &(0x7f0000000400)="7367da570f1e83430620883c1685d95c18ac65c5eb4b8111d2f8b10d3e53580f10bbb000deb39e4ca1d00deab7a32844ededcf36ee0f21edb6629a50b4a01896a5ef4b5db2a325ce6d6cfb3f8b1552dbde9074c3663707649337d6c5e5ad1626f85aadef9a049964d70b365ef93906cc8f12b9994bc78fc7033f366a1a80d69261feca49", 0x84) 15:10:53 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8000, 0x40) setsockopt$inet_mreq(r1, 0x0, 0x27, &(0x7f0000000180)={@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x7}, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) keyctl$dh_compute(0x17, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={'streebog256\xee(4\x18\x8d\xe7\fH\x00'}}) [ 296.135200] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 296.143398] SELinux: Context u:r:untrusted_app:s0:c512,c768 is not valid (left unmapped). [ 296.148861] FAT-fs (loop2): Filesystem has been set read-only [ 296.162328] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 296.175088] FAT-fs (loop3): Filesystem has been set read-only 15:10:53 executing program 5: r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @dev}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000100)={0x0, 0xffffffffffff7da3, 0x3, [0x9, 0x124, 0x9]}, &(0x7f0000000140)=0xe) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000180)={0x0, 0x8000}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000002c0)={r1, 0x0, 0xc65d, 0x1000, 0x1f, 0x72, 0x100000001, 0xd1ac, {r2, @in6={{0xa, 0x4e23, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x88f}}, 0xfffffffffffffffd, 0x4f, 0x4, 0xffffffff, 0xfffffffffffff000}}, &(0x7f0000000200)=0xb0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps_rollup\x00') ioctl$VIDIOC_CROPCAP(r3, 0xc02c563a, &(0x7f0000000380)={0x6, {0x3, 0xfffffffffffffffe, 0xfff, 0x6}, {0xffffffffffffffff, 0x2, 0x7be5, 0x6}, {0x7}}) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000240)=0x620) truncate(&(0x7f0000000280)='./bus\x00', 0x0) 15:10:53 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000040)={0x0, 0x40}, 0x8) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x1f004, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000340)='/dev/hwrng\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r3, @ANYBLOB="000000000000000000000500000014000500080001006962000008000100657468006c00050044000200080002000300000008000300030000000800020000000000080004000000000008000300520700000800020002000000080004000000000008000400000000001c00020008000400070000000800030005001000080002000000000008000100657468003c000100380004001400010002000000000000000010000000000000200002000a0000000000000000000000000000000000ffffe000000100000000"], 0xd0}}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000140)=0xb, 0x1) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)) ioctl$PPPIOCSMRRU(r2, 0x4004743b, &(0x7f0000000000)=0x9) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 296.183550] audit: type=1400 audit(1565190653.169:131): avc: denied { relabelto } for pid=16512 comm="syz-executor.0" name="TCP" dev="sockfs" ino=55021 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 15:10:53 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat$rtc(0xffffffffffffff9c, &(0x7f0000000fc0)='/dev/rtc0\x00', 0x0, 0x0) dup(r0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x10000014c) connect$inet6(0xffffffffffffffff, &(0x7f0000419000)={0xa, 0x0, 0x0, @empty}, 0x1c) socket$caif_seqpacket(0x25, 0x5, 0x3) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0), 0xc, 0x0}, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x100000001, 0x8, r2, 0x7, [], 0x0, r1}, 0x3c) r4 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r4) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15:10:53 executing program 4: r0 = epoll_create1(0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x1, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000040)={0x1, 0x5, [@empty, @remote, @dev={[], 0x17}, @remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}]}) tee(r0, r0, 0x0, 0xc) r2 = epoll_create1(0x0) close(r0) r3 = syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x2, 0x3) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e20, @remote}}, 0x7, 0x0, 0x4, 0x2, 0x6}, &(0x7f0000000140)=0x98) getsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000180)=@assoc_value={r4, 0x101}, &(0x7f00000001c0)=0x8) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r2, &(0x7f0000000200)={0x4}) [ 296.309048] could not allocate digest TFM handle streebog256î(4ç H [ 296.383390] could not allocate digest TFM handle streebog256î(4ç H 15:10:53 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x10000002, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0, 0xfffffffffffffce2}, {0x0, 0x15e}, {0x0, 0x2c3}, {&(0x7f0000000280)=ANY=[@ANYBLOB="b80332d9001d941305fe5787689d000000df72d5ac00bf95f1964277762f45609143000000050000000000002a92eed2aeda2ed54807023e19fe17e48ff97121952000e9"], 0x9c}], 0x4}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x4) r1 = syz_open_dev$dmmidi(&(0x7f0000000180)='/dev/dmmidi#\x00', 0x6, 0x20000) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000100)=0x3, 0x4) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000080), &(0x7f0000000300)=0x40) ptrace$cont(0x7, r0, 0x0, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) getsockopt$bt_hci(r2, 0x0, 0x1, &(0x7f00000001c0)=""/154, &(0x7f0000000140)=0x9a) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f0000000040)) r3 = syz_open_procfs(r0, &(0x7f0000000000)='uid_map\x00') ioctl$MON_IOCT_RING_SIZE(r3, 0x9204, 0x79d62) [ 296.439686] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 296.522305] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 296.536695] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock 15:10:53 executing program 4: r0 = epoll_create1(0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000000)) fcntl$addseals(r0, 0x409, 0x2) r1 = epoll_create1(0x0) close(r0) r2 = syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x2, 0x3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0x2, 0x7fffffff}) [ 296.575576] EXT4-fs error (device loop1): ext4_iget:4703: inode #2: comm syz-executor.1: root inode unallocated 15:10:53 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x102000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="26640f48d16626660f388103660fc73366b8c70000000f23d80f21f86635000000900f23f8262e0f08f00fab9569fff4650fc734ba200066ed67dc5ca002", 0x3e}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x73, 0x0, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000000c0)={0x40001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x0, 0x0) getsockopt$sock_timeval(r3, 0x1, 0x42, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r6 = request_key(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000280)={'syz', 0x2}, &(0x7f00000002c0)='\x00', 0xfffffffffffffff8) keyctl$describe(0x6, r6, &(0x7f0000000300)=""/126, 0x7e) [ 296.669415] EXT4-fs (loop1): get root inode failed [ 296.690683] EXT4-fs (loop1): mount failed 15:10:53 executing program 1: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000081, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x0, 0x0, 0x0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vga_arbiter\x00', 0x40000, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000600)='TIPC\x00') umount2(0x0, 0x4) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(0xffffffffffffffff, 0xc0405519, 0x0) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00') ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth0_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'hwsim0\x00', 0x0}) accept4(r3, &(0x7f00000002c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000340)=0x80, 0x800) getsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000500)={@dev, 0x0}, &(0x7f0000000540)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000200)={'vcan0\x00', r7}) getsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f0000000700)={@initdev, @rand_addr, 0x0}, &(0x7f0000000740)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000800)={'team0\x00', 0x0}) getsockname$packet(r0, &(0x7f0000000c40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000c80)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000cc0)={{{@in6=@remote, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000dc0)=0xe8) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000e00)={0x0, @dev, @multicast2}, &(0x7f0000000e40)=0xc) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000013c0)={0x0, @rand_addr, @remote}, &(0x7f0000001400)=0xc) sendmsg$TEAM_CMD_NOOP(r3, &(0x7f00000018c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10010000}, 0xc, &(0x7f0000001880)={&(0x7f0000001440)={0x414, r4, 0x404, 0x70bd29, 0x25dfdbfc, {}, [{{0x8, 0x1, r5}, {0xb8, 0x2, [{0x7c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x4c, 0x4, [{0x6, 0x7ff, 0x7fff, 0x4}, {0x3, 0x5, 0x3, 0x91}, {0x1, 0x10001, 0x5, 0x6}, {0x3, 0x0, 0x6, 0x3}, {0x2, 0x400, 0x0, 0x2}, {0x0, 0xfff, 0x200, 0x7}, {0x5, 0x9, 0xd3b9, 0x1}, {0x6b, 0x1ff, 0x40, 0xd76}, {0x89, 0x5, 0xfffffffffffffffb, 0x8}]}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x1000}}}]}}, {{0x8, 0x1, r6}, {0x1f4, 0x2, [{0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r8}}, {0x8}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0xc, 0x4, 'random\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0xc, 0x4, [{0x1, 0x0, 0x9, 0x6d3}]}}}]}}, {{0x8, 0x1, r11}, {0xb8, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r13}}}]}}, {{0x8, 0x1, r14}, {0x7c, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x86}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r15}}}]}}]}, 0x414}, 0x1, 0x0, 0x0, 0x80}, 0x40000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140), 0x0) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@broadcast, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0xc, 0x4, 0x0, 0x0, 0x0, 0x0, {0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4002, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x10, 0x0, 0x0, 0x0, [{[@rand_addr]}, {}]}]}}}}}}}, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f00000001c0)=0x80000000, 0x4) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/mls\x00', 0x0, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x800) 15:10:53 executing program 2: syz_emit_ethernet(0x3e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaa5aaaaaa00000017471aa2580189f99c800000000000000000000000bbfe72fe0000000000aa0000883e00089078b1ecbdd294af7c89a7526fd167cd9bad0c047d81a596113bdf02a8f63a5cf109"], 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x6, 0xfa662706952e804e) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f00000000c0)={r1, 0xe9e}) 15:10:53 executing program 4: r0 = epoll_create1(0x0) epoll_create1(0x7ffff) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) close(r0) r1 = syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x2, 0x3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x2002}) [ 297.045255] FAT-fs (loop1): bogus number of reserved sectors [ 297.061944] FAT-fs (loop1): Can't find a valid FAT filesystem [ 297.177047] FAT-fs (loop1): bogus number of reserved sectors [ 297.186701] audit: type=1804 audit(1565190654.169:132): pid=16552 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir525748567/syzkaller.UwknhR/207/file0/file0" dev="loop3" ino=288 res=1 [ 297.231791] FAT-fs (loop1): Can't find a valid FAT filesystem 15:10:54 executing program 3: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xfff, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r0, 0x8020, 0x80, 0x369e5d84) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280), 0x12) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x240) 15:10:54 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8200003) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)=0x4008) r1 = shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x1000) openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0xe0803, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000080)={0xb810, 0x7fff}) shmdt(r1) fallocate(r0, 0x200000000000008, 0x5, 0x10000) 15:10:54 executing program 4: r0 = epoll_create1(0x0) epoll_create1(0x0) close(r0) r1 = syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x2, 0x3) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x30000004}) 15:10:54 executing program 5: syz_emit_ethernet(0xba, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff0800450000700000000000019078ac2314bbac1414110402907800000000450000002000000000320000ac2314aaac141400084000000000000000000000e000000200000000e000000100000000000000007f00000100000000ffffffff00000000e000000100000000ac14140000000000178746e1e3a9b6075a872c2a9b2cc3efb465da314a077f40b98fb804a9"], 0x0) r0 = open(&(0x7f0000000600)='./file0\x00', 0x4041, 0x82) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)=0x0) sendmsg$nl_netfilter(r0, &(0x7f00000005c0)={&(0x7f0000000100), 0xc, &(0x7f0000000580)={&(0x7f0000000240)={0x30c, 0x6, 0x0, 0xa00, 0x70bd2d, 0x25dfdbfc, {0xcf8a748f8b3ce618, 0x0, 0x3}, [@generic="c6f7e42c0c1cb42ef2391667cfa7dc276f24a41dfa6fb755a2dbdec11dceb7df270221dd22fef752c30880fd4a8a82a12d103021137eb9bf8c6ab06b50e76a31c40ca0956f8220ff4fa6c249d22e65e6383f466914", @nested={0x204, 0x7c, [@generic="f13d4f4acac8ed21d24874ab1164d97076d48388d033c74027fc64e69534c2c50cd649fc9f0fb9b857e2a99029b7680272449d0520d1776a6f4007a00cfcb882e52558c3c06172035a54c810664018d7e35a6d73ab65d6f1a6a668811a1d18a4ecba0853261b6adf16db0ebd84b0188faf35e6ea99c04b8393b1877eae5bd1a20106b97f91200a16f8ef8b2d4dbf20d7bfc6c9297aa296ba46039ff59361d0faed36216ee9ca7ca8c0de74", @generic="f6062bbbb11ea072f5a8a9f1ed357b5a56173497364a1bf02177b7691d48051a0ef0179020149a1aded6eff48d0e92e2626ad5f63d4e66f733106f9501c9ce14d2f58cab40bc11f4f74f640f6e85ad2f4d0f9958b3ed59fe2a56efd58e406bc0d96ec579c720df7b75961a6bc0013ca0ee1e656b25d033cc5498a41fa11b3dcdd66f9a350289d8f5c908", @typed={0x18, 0x72, @str='vmnet1mime_type$\x00'}, @typed={0x8, 0x7d, @uid=r1}, @generic="1f21086e04553abc6a4a9c57ada8528ce82fa37c00f3d8afe4b5d07cd94a04a077b4125a4108d99fd865f64e8b172101198e006074cac01d5377b858e8ece4c6732ca35bc4aa15fbff9358fa3dfb6dd11544a8de06dabb030423715e13d45e13e3460e7d46da", @typed={0x8, 0x8f, @pid=r2}, @generic="80c72738f422d2e93163331dd4cb07029ab0e3c82af465d631406bbf926e3a0b38685e6a98ed71d84dd8c523e9897a763e2d8a56bd333d75ad5c1053cd"]}, @generic="ac0f239f0170e757ea1ed7cd389f9b690a8bbe421c2e958d394fec8ce002558bf203a7fe9a7c3aca720bf9f418af97d798494846d0bc0a98042d195579dd8fc744f394a820ac51fd359acf0668e633a91c9f086f8c60eaa7f23c36457d362150dfd01a72b529d6e5cfb335b94bbb5875de87e4dcbc483e7dd4e4d1ab7819a67871f3070efd465add4f62d3782415e664ddf970c0cf3e33", @generic="32b650bc6481ad76"]}, 0x30c}, 0x1, 0x0, 0x0, 0x20000000}, 0x81) 15:10:54 executing program 1: r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000003c0)=@nat={'nat\x00', 0x1b, 0x5, 0x518, 0x0, 0x480, 0x348, 0x1d8, 0x1d8, 0x480, 0x480, 0x480, 0x480, 0x480, 0x5, &(0x7f0000000000), {[{{@uncond, 0x0, 0x98, 0xe0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x8, @ipv4=@empty, @ipv4=@local, @gre_key=0x52, @port=0x4e22}}}, {{@uncond, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@icmp={0x28, 'icmp\x00', 0x0, {0xc, 0x2, 0x100}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x6, @multicast1, @multicast2, @icmp_id=0x64, @port=0x4e20}}}}, {{@uncond, 0x0, 0x138, 0x170, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz1\x00', 0x9, 0x0, 0x2, 0x2}}, @common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x1, 0x0, 0x3}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @remote, @gre_key=0x786, @icmp_id=0x67}}}}, {{@ip={@loopback, @dev={0xac, 0x14, 0x14, 0x13}, 0xffffffff, 0xff000000, 'gretap0\x00', 'erspan0\x00', {0xff}, {0xff}, 0xb7833ce8bfeba64, 0x2, 0x41}, 0x0, 0xd8, 0x138, 0x0, {}, [@common=@set={0x40, 'set\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x67ee, 0x3, 0x10000, 0x7e5e7f1c, 0xed], 0x1, 0x4}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x8, [0x5, 0x400, 0x200, 0x5be, 0x6, 0x7], 0x1, 0x100000001}, {0xa1, [0x2491, 0x12, 0x8, 0x0, 0x5, 0x100000000], 0x2, 0xb2}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x578) r1 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000080)={0xac21, 0x0, {0x3, 0x3, 0x8, 0x2, 0x70}}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000300)={0x3f, 0x0, 'client0\x00', 0x0, "b9fc64e2cfcb0ea9", "0d8b00a8a20012dba3308712ee6f84d64a6e3ad4311d9745cc7ac1ca166ac971"}) 15:10:54 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2b, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x2100, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 297.345143] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 297.368077] FAT-fs (loop3): Filesystem has been set read-only 15:10:54 executing program 2: mknod$loop(&(0x7f0000001880)='./file0\x00', 0x10020006002, 0x1) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@local}}, &(0x7f00000000c0)=0xe8) getgroups(0x5, &(0x7f0000000100)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xee00, 0x0]) lchown(&(0x7f0000000040)='./file0\x00', r1, r2) ioctl(r0, 0x1000008912, &(0x7f0000000180)="f010ada3142b3da98de966b0da8838c2") clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000000)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000200)='./file0\x00', &(0x7f0000000140)='hfsplus\x00', 0x0, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x80800) getsockopt$inet_tcp_buf(r3, 0x6, 0x1f, &(0x7f0000000340)=""/183, &(0x7f00000001c0)=0xb7) 15:10:54 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x800000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) r2 = syz_open_dev$vcsa(0x0, 0x6, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x404e23, 0xffffffffffffffff, @loopback}, 0x1c) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={0x0, r2, 0x0, 0x16, &(0x7f0000000300)='/proc/capi/capi20ncci\x00'}, 0x30) r4 = getpgrp(r3) process_vm_readv(r4, &(0x7f0000000800)=[{&(0x7f0000000200)=""/228, 0xe4}, {0x0}, {&(0x7f00000003c0)=""/108, 0x6c}, {&(0x7f0000000440)=""/69, 0x45}, {&(0x7f00000004c0)=""/233, 0xe9}, {&(0x7f00000005c0)=""/191, 0xbf}, {&(0x7f0000000680)=""/219, 0xdb}, {&(0x7f0000000780)=""/86, 0x56}], 0x8, &(0x7f0000000b00)=[{0x0}, {0x0}, {&(0x7f00000009c0)=""/133, 0x85}, {&(0x7f0000000a80)=""/88, 0x58}], 0x4, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000000c0)={0x8, 0x0, 0x1, 0xffffffff, 0x6, 0x9, 0xfffffffffffffffa, 0x412f}, 0x20) r5 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ioctl$KDGKBMETA(r5, 0x4b62, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000000)={0x6, 0x7fffffff, 0x8, 0x8, 0x0, 0x2, 0x0, 0x5, 0x0, 0xd0, 0x4}, 0xb) ftruncate(r5, 0x200004) getgid() ioctl$sock_bt_cmtp_CMTPCONNADD(r5, 0x400443c8, &(0x7f0000000380)={r1, 0x7f}) sendfile(r0, r5, 0x0, 0x80001d00c0d0) open(&(0x7f0000000100)='./bus\x00', 0x1, 0xa4) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20ncci\x00', 0x40800, 0x0) [ 297.477965] dccp_invalid_packet: invalid packet type 15:10:54 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000080)=@generic={0x3, 0x7f, 0x400}) rt_sigprocmask(0x0, &(0x7f0000000000)={0xfffefffffffffffa}, 0x0, 0x8) r2 = gettid() ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'hsr0\x00', &(0x7f0000000140)=@ethtool_sset_info={0x37, 0x5, 0x1, [0x0, 0x0, 0xfff, 0x4, 0xc7, 0xfa4, 0xfffffffffffffffa, 0x4]}}) timer_create(0x2, &(0x7f0000000100)={0x0, 0x17, 0x4, @tid=r2}, &(0x7f0000000040)) timer_settime(0x0, 0x1, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) ppoll(0x0, 0x0, &(0x7f0000000200)={0x0, 0x989680}, &(0x7f0000000240), 0x8) 15:10:54 executing program 2: socket(0xa, 0x0, 0x1) r0 = socket(0x10, 0x800000000000803, 0x0) sendto(r0, &(0x7f0000000100)="120000001600e70d017b00000000008e15844d997b20cb2c8e0a7f5f496f5c8e284b735895f844f70fcdfc54eef062dc45570c1f4e955a441b75d17f72a568e8cb2e6100d8966ccec81f6198227cdcf5", 0x50, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000004e00), 0x27b, 0x6, 0x0) 15:10:54 executing program 4: r0 = epoll_create1(0x0) fcntl$dupfd(r0, 0x406, r0) r1 = epoll_create1(0x0) close(r0) fdatasync(r1) syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x2, 0x3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) [ 297.508861] audit: type=1804 audit(1565190654.489:133): pid=16641 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir525748567/syzkaller.UwknhR/208/file0/file0" dev="loop3" ino=290 res=1 15:10:54 executing program 3: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xfff, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r2, 0x1, 0x0, 0x369e5d84) fcntl$getownex(r1, 0x10, &(0x7f0000000100)) getpgid(0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, r1, 0x0, 0xc, &(0x7f0000000200)=':trusted}\\^\x00'}, 0x30) write$cgroup_pid(r0, &(0x7f00000002c0)=r3, 0xfffffffffffffe3d) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file2\x00', 0x8) 15:10:54 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x4bf7) 15:10:54 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='trusted.overlay.upper\x00', &(0x7f0000000340)={0x0, 0xfb, 0x62, 0x3, 0x0, "914b0492cf337d90776b01a164bbc09f", "0e1d224befd36e0c55373702e32d7b3b219e270f8f6dc0bb2d92bbf50b3f4b2f8000b50248639daed38dbaad855d5f21d081a330eb1e29f7325967092ea5a7bee65ad25135dbccf3a3aadec521"}, 0x62, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000180)={0x28, 0x0, 0xffffffff, @reserved}, 0x10, 0x800) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000200)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4d, r2}) connect$vsock_stream(r3, &(0x7f00000001c0)={0x28, 0x0, 0xffffffff, @host}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x200000000000000, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="740000002a800b05000000000200000000000000", @ANYRES32=r2, @ANYBLOB="00000500f1ffffffffffffff080001007366710048000e7ae104deccbbbde735b9a00000000000000000000000000033cc3598c9aa8178bdf1000000000000000000000000de7f4687000000000000000000000000009900007c24f1583940ea0e363002e94564838f54825863fe646c248656cb5d845549c5ceffcfeaab4260fca524afef20c0034fbd32262c96f3771603fd386dc70a77398a632bd950e808d63007d6c6683e251ac28f6b621f863af067671514a292528d7d2bef3b8444b64c875270810633f2eb7d7a89d0f3cf2074bb2e180772593cd728026dfe7b7bc2cbc705ed95700983ea22eefa47c53252758e28ba53f2e15a86aff40a0cb6088e18f3326fa3a5e6332cb951da688b87961591b4671e40cf37feaa14dd0000000000000000"], 0x74}}, 0x0) 15:10:54 executing program 0: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340)='TIPC\x00') bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xc0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=0x7, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x3, 0x5}, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x5, 0x5, 0xff}, &(0x7f00000001c0)=0x7, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=0x3}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=r1, 0x4) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r0}, 0x1c}}, 0x0) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000000dc", 0xfffffffffffffc91}], 0x5, 0x0) [ 297.783130] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32810 sclass=netlink_route_socket pig=16673 comm=syz-executor.1 15:10:54 executing program 2: r0 = socket$inet(0x2, 0x3, 0x2) openat$md(0xffffffffffffff9c, &(0x7f0000000240)='/dev/md0\x00', 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$VT_WAITACTIVE(r1, 0x5607) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, 0x0, 0xff70) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x119) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)=0x0) ptrace$getregset(0x4204, r2, 0x203, &(0x7f0000000200)={&(0x7f00000001c0)=""/12, 0xc}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000240)='./file0\x00', 0x0, 0x7a04, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000000c0), 0x7) socket$kcm(0x29, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, 0x0, &(0x7f0000000040)) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, "99a543db8223b3797124ef89e768b7fb04c0d95ae8a0a9c8d5c435b687ed7f3a72bce1fe37d427a70303a7d222b5dbfd030091ff44a816e5b2779ca1022a6eeb", "edde0d0786df0193e609d059b9ed6a06f142182d9588a1b38cd45e403d99d8883aa25907e45a255423abf0cc6b6957e04eb56fc2a9c301035ee1877670f1d39e", "f9f85894a539f3fa5f63eb3f2391890a8b24b7e1b6e4c2d517166d720310233f", [0x5, 0x92]}) 15:10:54 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x8000, 0x0) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x101040, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000080)={0x3, r3}) getsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000000c0), &(0x7f0000000100)=0x4) close(r0) syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x2, 0x3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) [ 297.959166] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32810 sclass=netlink_route_socket pig=16687 comm=syz-executor.1 15:10:55 executing program 1: r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/exec\x00', 0x2, 0x0) close(r0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x3) 15:10:55 executing program 2: capset(&(0x7f00000fc000)={0x19980330}, &(0x7f0000000440)) r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x1) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000040)={0x0, {0x9, 0x6, 0x0, 0xc7b}, {0x7fff, 0xbb67, 0x7ee9, 0x1}, {0x9, 0x7ff}}) truncate(&(0x7f0000000100)='./file0\x00', 0x8) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x1000008b0e, &(0x7f0000000080)="17555b9c5f757c13e8ecf363e248397331930ba4ec4d2f0613ecfcda0417") [ 298.185341] capability: warning: `syz-executor.2' uses 32-bit capabilities (legacy support in use) [ 298.198302] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted 15:10:55 executing program 5: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x2080, 0x0) setresuid(0x0, 0xee01, 0x0) setfsuid(0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/173, 0xad}], 0x1) syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') 15:10:55 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r1) r2 = syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x2, 0x3) write$cgroup_int(r2, &(0x7f0000000000)=0x20000, 0x12) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) 15:10:55 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x14, 0x2000) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000300)=""/84) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) r2 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, r1) r3 = add_key$user(&(0x7f0000000400)='user\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000ec0)="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", 0x192, r2) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000001080)="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", 0x1000, r1) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r4, r3, r4}, &(0x7f0000000700)=""/243, 0xf3, &(0x7f0000000040)={&(0x7f0000000580)={'poly1305-simd\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x02\x00\x00\x00\x0f\x00@\x00\x00\x01\x00'}}) 15:10:55 executing program 0: r0 = creat(&(0x7f0000000140)='./file0\x00', 0x10) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r0, 0x40045731, &(0x7f0000000180)=0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/0\x00yFAtz\x9b\x88\xb3\x04\x04\xd7a7\x1a\xb2h-ex\xb4\x13\x89\xc1\xc6_\xd9\xb3<^\xfe\b\x10\f\xad\xf6\xd6J\th\xeb;!o\xa2\xcf\xc18)\xa29\xca#9\xbc$\xfd\xef~\x12\x81\xd4\xc5~c\b\xb1\xb091\xbe\xe0%k\x83\xeen\xa6R\xab`:{\x97rg\xd3.\x13\x10\xaf]\xc1\xf7\xec\xcdz\xb2\x00W\xd5G\xff\x9c\xa4Z\xac\x85n\xcc\x00') fcntl$setpipe(r1, 0x407, 0x8) [ 298.587874] audit: type=1804 audit(1565190655.569:134): pid=16726 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir525748567/syzkaller.UwknhR/209/file0/file0" dev="loop3" ino=291 res=1 [ 298.619169] audit: type=1804 audit(1565190655.569:135): pid=16728 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir525748567/syzkaller.UwknhR/209/file0/file0" dev="loop3" ino=291 res=1 15:10:55 executing program 1: r0 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x80) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000100)) r1 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000080)={0xc0000000000, 0x2, 0x6, 0xff, 0x9, 0xfffffffffffff001, 0xd8}) capset(&(0x7f00002d0ff8)={0x20080522}, &(0x7f0000cc0000)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb}, 0x2c) fsetxattr(r2, &(0x7f0000000140)=@known='system.sockprotoname\x00', &(0x7f0000000180)='/dev/video#\x00', 0xc, 0x3) 15:10:55 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netstat\x00') ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000040)=0x5) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, 0x0) 15:10:55 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x3, 0x300) r3 = fcntl$dupfd(r1, 0x406, r0) accept$alg(r3, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x4000000028, 0x0, 0x0, 0xfffff01c}, {0x80000006}]}, 0x10) 15:10:55 executing program 3: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xfff, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r1, 0x1, 0x0, 0x369e5d84) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280), 0x12) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x21) 15:10:55 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x4800, 0x0) preadv(r0, &(0x7f0000000940)=[{&(0x7f00000005c0)=""/70, 0x46}, {&(0x7f0000000640)=""/94, 0x5e}, {&(0x7f00000006c0)=""/153, 0x99}, {&(0x7f00000007c0)=""/72, 0x48}, {&(0x7f0000000840)=""/204, 0xcc}, {&(0x7f00000001c0)=""/22, 0x16}, {&(0x7f0000000440)=""/24, 0x18}, {&(0x7f0000000dc0)=""/4096, 0x1000}, {&(0x7f0000002340)=""/4096, 0x1000}], 0x9, 0x3) ioctl$KVM_RUN(r1, 0xae80, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, &(0x7f00000003c0)=0x7f, 0x4) clone(0x802122001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/load\x00', 0x2, 0x0) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000d00)='/selinux/avc/cache_stats\x00', 0x0, 0x0) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000400)) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000d80)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$VT_GETSTATE(r5, 0x5603, &(0x7f0000000d40)={0x7, 0x10, 0x800000000000b}) ioctl$TUNSETPERSIST(r5, 0x400454cb, 0x1) ftruncate(r2, 0x0) getsockopt$sock_buf(r2, 0x1, 0x1f, &(0x7f00000004c0)=""/224, &(0x7f0000000240)=0xe0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000280)='reno\x00', 0x5) syz_open_dev$audion(&(0x7f0000000a00)='/dev/audio#\x00', 0x40, 0x1) bind$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @remote}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x220007fd, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f00000002c0)={0x4, 0x0, {0x2, 0x3, 0x10001, 0x2, 0x1}}) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000100)=0x5, 0x4) recvmsg(r3, &(0x7f0000000380)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xb330}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) 15:10:55 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x3, 0x3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) 15:10:55 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) ioctl$void(r1, 0x5450) syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x2, 0x3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) 15:10:55 executing program 2: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xfff, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r2, 0x1, 0x0, 0x369e5d84) fcntl$getownex(r1, 0x10, &(0x7f0000000100)) getpgid(0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, r1, 0x0, 0xc, &(0x7f0000000200)=':trusted}\\^\x00'}, 0x30) write$cgroup_pid(r0, &(0x7f00000002c0)=r3, 0xfffffffffffffe3d) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file2\x00', 0x8) [ 298.803774] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000641a) 15:10:55 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000001c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x200, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x44, r1, 0x0, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8e}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x61a6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1f}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x40) syz_mount_image$ext4(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f0000000080)=ANY=[@ANYBLOB="646174613d6a2f75726e613e8c29c64c6c2c00"]) [ 298.847857] FAT-fs (loop3): Filesystem has been set read-only 15:10:55 executing program 5: listen(0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000000c0)={0x43, 0x2}, 0x10) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f00000009c0)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x602209, 0x5, 0x4002011, r1, 0x0) add_key(0x0, &(0x7f0000000200)={'syz'}, &(0x7f0000000240)="c565f98b4b42558f20697bf12194f9cc455288d14539c9fb4d4e7d9ced614a40b27ccaaf6c670c422829b2431d22b5fd27138eaa6e2be2d04b8781fb3808df4e434a6e4ae00a538cceaa74e2599cd702e53e94fb31b2155da5dedc8b7d20f03d42f4da2800cb507fd12f58d18607c1776eeed4eb31b05489a9e2e833a415b5aa53d9ea29a8a1c8526f43", 0x8a, 0xffffffffffffffff) lstat(0x0, 0x0) getuid() stat(&(0x7f0000000600)='./bus\x00', 0x0) getgroups(0x1, &(0x7f0000000840)=[0xee01]) getresgid(&(0x7f0000000880), &(0x7f00000008c0), &(0x7f0000000900)) 15:10:55 executing program 1: ioctl(0xffffffffffffffff, 0x2ab8d183, 0x0) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002440)='/selinux/mls\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/zero\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x6) gettid() keyctl$KEYCTL_PKEY_SIGN(0x1b, 0x0, 0x0, 0x0, 0x0) mkdir(0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) socket$inet6(0xa, 0x100000000000001, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="0180c2000000aaaaaaaac1aa0806040008000604000120a98e1fc212000000000180c2000000ac2414aad5eb2a8e3912ef6718f077598a5750f2814f6ff9f296911fa4c71d3e09abeaae4df2e050225cf5411b4b4a703bfd183600072964dd4c19cf4ecb8df0bfe647c380594127c34ddde8231e"], 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000003ac0), 0x0) 15:10:56 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) r3 = syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x2, 0x3) ioctl$KDGETMODE(r3, 0x4b3b, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) [ 299.021919] audit: type=1804 audit(1565190655.999:136): pid=16769 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir560633117/syzkaller.SlpYOK/398/file0/bus" dev="ramfs" ino=57369 res=1 15:10:56 executing program 1: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x4) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x20000000000803) clone(0x200000007fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x3) write$FUSE_BMAP(r0, &(0x7f0000000080)={0x18, 0x0, 0x4, {0xffffffff00000000}}, 0x18) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='9p\x00', 0xfffffffffffffffd, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@privport='privport'}]}}) [ 299.178025] audit: type=1804 audit(1565190656.049:137): pid=16769 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir560633117/syzkaller.SlpYOK/398/file0/bus" dev="ramfs" ino=57369 res=1 15:10:56 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x400000000000005, 0x7, 0x7, 0x8000000001}, 0xe) r1 = socket(0x0, 0x6, 0x6) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f0000000080)={0x0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x14}}, {0x2, 0x4e21, @remote}, {0x2, 0x4e21, @loopback}, 0x120, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)='veth0\x00', 0x9, 0x7, 0xfffffffffffffff9}) bpf$MAP_CREATE(0x2, &(0x7f0000000000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r0, &(0x7f0000000440), 0x0}, 0x18) [ 299.238422] EXT4-fs (sda1): Unrecognized mount option "data=j/urna>Œ)ÆLl" or missing value 15:10:56 executing program 4: r0 = epoll_create1(0x80000) r1 = epoll_create1(0x0) close(r0) syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x2, 0x3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) 15:10:56 executing program 0: syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x3ff, 0x20000) r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x40880, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000000c0)={0x7, 0x0, [{0x80000008, 0x7, 0x101, 0xb2c, 0xffffffff}, {0x4, 0xd0a7, 0x5, 0x8, 0x1}, {0x8000001b, 0x9, 0x2, 0x7fffffff, 0xad}, {0xc000000b, 0x0, 0x800, 0x6, 0x80000001}, {0xa, 0x2, 0x200, 0x400, 0x20}, {0xb, 0x3, 0x6, 0x7fffffff, 0x40}, {0xb, 0x9, 0x3, 0xffffffff7fffffff, 0x40}]}) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) r3 = socket$unix(0x1, 0x2, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x6d, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) setsockopt$inet_sctp6_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f0000000000)=0x6, 0x4) r6 = dup2(r0, r5) dup3(r6, r1, 0x0) [ 299.374776] audit: type=1400 audit(1565190656.069:138): avc: denied { map } for pid=16762 comm="syz-executor.5" path="/root/syzkaller-testdir560633117/syzkaller.SlpYOK/398/file0/bus" dev="ramfs" ino=57369 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:ramfs_t:s0 tclass=file permissive=1 [ 299.761054] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 299.769072] kauditd_printk_skb: 1 callbacks suppressed [ 299.769083] audit: type=1804 audit(1565190656.749:140): pid=16772 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir525748567/syzkaller.UwknhR/210/file0/file0" dev="loop3" ino=295 res=1 [ 299.804151] FAT-fs (loop2): Filesystem has been set read-only 15:10:56 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0xfffffffffffffee4, 0xfffffffffffffffe) openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x21, 0x0) prctl$PR_SVE_SET_VL(0x32, 0x30a5c) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000004c0)={0x1000000a, 0xfffbffffffffffff, 0x1, 0xffffffffffffffff}) mmap(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x6, 0x811, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x40180, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') ioctl$VT_SETMODE(r2, 0x5602, 0x0) sendmsg$TIPC_CMD_GET_LINKS(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x24, r3, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, 0x0, 0x4, 0x0, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40800) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$cgroup_type(r5, &(0x7f00000002c0)='threaded\x00', 0xfffffd95) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7fff}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='trusted.overlay.u\xe0per\x00', 0x0, 0x0, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") ioctl$TCGETX(r2, 0x5432, &(0x7f0000000040)) ustat(0xffffffffc8fa80f8, &(0x7f00000000c0)) bind$isdn(0xffffffffffffffff, &(0x7f0000000400)={0x22, 0x9, 0xfffffffffffffff8}, 0x6) 15:10:56 executing program 3: prctl$PR_SET_SECUREBITS(0x1c, 0x8) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xfff, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r1, 0x1, 0x0, 0x369e5d84) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280), 0x12) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file1\x00', 0x0) 15:10:56 executing program 4: r0 = epoll_create1(0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x101, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f00000000c0)={0x1, 0x80000000}, 0x2) r2 = epoll_create1(0x0) close(r0) r3 = syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x2, 0x3) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000040)=0x4) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000780)) 15:10:56 executing program 0: clone(0x2000000c00ffff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000005c0)={{{@in=@local, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@broadcast}}, &(0x7f00000004c0)=0xe8) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r0, r1, r2) r3 = gettid() tkill(r3, 0x25) r4 = inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$sndpcmc(&(0x7f00000003c0)='/dev/snd/pcmC#D#c\x00', 0x87, 0xfcac9ebd322a5b47) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000400)) r6 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/policy\x00', 0x0, 0x0) ioctl$KDGKBSENT(r6, 0x4b48, 0x0) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x440840, 0x0) inotify_rm_watch(r7, r4) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$DRM_IOCTL_MARK_BUFS(r7, 0x40206417, &(0x7f0000000300)={0x401, 0x7c, 0x2, 0x401, 0x1c}) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000000)="0a5bb44c5c93a1979ddf7f2a4333f5fd9996c784d0d500731a55d65f0b619a908244b888d897895120963f13f35889bb92de1010c09e3f82212021ef902dc6fb0780507991567c8baefcba3b4eafe00fc747d5ad2b627dac201689b1d4464ab04b0ef0fb0338a246eb61d16c935936cc9a063b4e3b9c9bd2f3d9c7bfdd7757aa22c3284a42d5d7341124aeffcfc31aefcb3ee2f457cc063b2cc9952e49e70b030b4ee771ffc019b2a35393efea8e00608fa150596da33eed7f5e8571c9ff34743708a3056054cd8ed533dd154f993940ba042351d963da963bb057deea3d9db2e502ad9e770cbe080530baa26bb5233f3c96b338c5a6082018566f009083c234") clone(0x2102801ff7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ptrace$setopts(0x4206, r3, 0x0, 0x0) r8 = request_key(&(0x7f0000000140)='cifs.idmap\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000001c0)=']%em1wlan1\xdb\x00', 0xffffffffffffffff) keyctl$update(0x2, r8, &(0x7f0000000200)="cf457c7a236815d15d6e02303069134e14ab0d0cf604b5dd8dcdf037d9f1b77d31154b35e35b3dc0d5dbed4158cc3c03530a8337aa547f17bd1bacbf2061afc6982fe0a2d33b5e07c721201c1a2fc5696900415a4da7482dde1aed650b860765375796f4a5d4ccaf941c78c4f0f8bc1e146614189817589c98e0d7f9ef484da0e9f497f5b622b066c3faf6ee340f35a758142c06c511aefa2718504636aa25508444accd703d4fcee6f5f5e99ac388f8", 0xb0) 15:10:56 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000280)=0x6) read(r0, &(0x7f00003fefff)=""/1, 0x1) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000cd8000)=""/1, 0x2e171c03}], 0x1) ioctl$int_in(r2, 0x5452, &(0x7f00000003c0)=0x6) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f00000000c0)=[{r3}], 0x1, 0xffffffffffbffff8) ioctl$TIOCNXCL(r0, 0x540d) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) r4 = dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x16) sendmsg$alg(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="d244e433c1c9be46c877ea08908f72914cb304cdd994cb8a6f0983afa2a5a272a1ebf4ec5f1bdb013316944fb2edf7e3b47d13ec0fa7e83eb27b158a231faa1cfd5496253c90e73ee3d2bc5367ce9191591ea3de1b4ad289e142f1689caf70b7fc0f0ca70634967b9223b44c368e09e92d2bf885ccef1cdd6db5388feb09b02ff8e2bc0754458ff8c17256fcabccb00afe2ac09f0e6cffa6b02ca5c4ddaf60c1195203bd1ea73dfcc139870c8a5b4d75acb62b87b835d68718b4eb5a36a2dbdf00e4ee05097498c80cc3845be5400178", 0xd0}], 0x1, &(0x7f0000000300)=[@assoc={0x18, 0x117, 0x4, 0x2d}, @assoc={0x18, 0x117, 0x4, 0x4}, @assoc={0x18, 0x117, 0x4, 0x3f}, @assoc={0x18, 0x117, 0x4, 0x8}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}], 0x90, 0x20000000}, 0x0) open$dir(&(0x7f0000000400)='./file0\x00', 0x62000, 0x80) 15:10:56 executing program 2: r0 = socket(0x400000000000010, 0x802, 0x0) write(r0, &(0x7f00000002c0)="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", 0xfec7) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_bond\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gretap0\x00', r1}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e23, 0x7b4, @loopback, 0x6}}, [0x2, 0x3f, 0x3, 0x20, 0x1a, 0x9553, 0x7fff, 0x10000, 0xe, 0xff, 0x0, 0x800000000, 0x5, 0x9, 0x52]}, &(0x7f0000000180)=0x100) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f00000001c0)={r2, 0x3}, 0x8) [ 299.955576] netlink: 1024 bytes leftover after parsing attributes in process `syz-executor.2'. [ 299.973853] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 299.987771] netlink: 1024 bytes leftover after parsing attributes in process `syz-executor.2'. 15:10:57 executing program 0: syz_extract_tcp_res$synack(&(0x7f0000000100), 0x1, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000040)=""/170) [ 299.988933] ptrace attach of ""[16821] was attempted by "/root/syz-executor.0"[16818] [ 300.004602] FAT-fs (loop3): Filesystem has been set read-only 15:10:57 executing program 2: perf_event_open(&(0x7f0000000180)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x02roup.stap\x00', 0x2761, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r1, &(0x7f0000000140)}, 0xfffffffffffffc5d) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000080)=ANY=[@ANYBLOB="00ffffffff"]) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000040)={0x2, 0x0, 0x9, 0x2}, 0x14) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0xc0c0583b, 0x20000001) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, 0x0) write$cgroup_subtree(r1, &(0x7f0000000280)={[{0x2b, 'rdma'}, {0x2b, 'io'}]}, 0xa) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x313) openat$cgroup_ro(r0, 0x0, 0x7a05, 0x1700) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.net/syz1\x00', 0x200002, 0x0) socket$kcm(0xa, 0x0, 0x11) r2 = openat$cgroup_ro(r1, &(0x7f00000002c0)='cpuacct.usage_all\x00', 0x0, 0x0) openat$cgroup_int(r2, 0x0, 0x2, 0x0) 15:10:57 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = syz_open_dev$vcsn(&(0x7f00000004c0)='/dev/vcs#\x00', 0x4, 0x480000) getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, &(0x7f0000000500)={'ah\x00'}, &(0x7f0000000540)=0x1e) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) umount2(&(0x7f0000000100)='./file0\x00', 0xe) bind$unix(r3, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') ioctl$SCSI_IOCTL_PROBE_HOST(r3, 0x5385, &(0x7f0000000400)={0x81, ""/129}) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f00000003c0)) sendmsg$IPVS_CMD_SET_DEST(r3, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="a8000056", @ANYRES16=r4, @ANYRES32=r3], 0x3}, 0x1, 0x0, 0x0, 0x1}, 0x80) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000032000503d25a80648c6356c10324fc00050000000a000800053582c1b0acea8b09000380feff0000d1bd", 0x2e}], 0x1}, 0x0) ioctl$TIOCGPKT(r2, 0x80045438, &(0x7f0000000080)) 15:10:57 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000004c0)={[{0x0, 0x2, 0x0, 0x4, 0x0, 0x9, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x70}, {0x3, 0xffffffffd927d9bc, 0x0, 0x7fff, 0x0, 0xfffffffffffffe01, 0x62c, 0x3, 0x0, 0x0, 0x0, 0x0, 0x100000000}, {0x82, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x2, 0x0, 0x5}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB="f0"], 0x1}}, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f0000000440)={&(0x7f0000000180), 0xc, &(0x7f00000002c0)={&(0x7f0000000780)={0x168, r5, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80}]}, @TIPC_NLA_MEDIA={0x98, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x66}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x264}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}]}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffffffffffc}]}, @TIPC_NLA_MEDIA={0x74, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1a12}]}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x10}, 0x841) [ 300.435421] audit: type=1400 audit(1565190657.419:141): avc: denied { setattr } for pid=16860 comm="syz-executor.2" path="socket:[57433]" dev="sockfs" ino=57433 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 15:10:57 executing program 2: ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x40085511, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}) r0 = syz_open_dev$audion(&(0x7f0000000300)='/dev/audio#\x00', 0x1, 0x1) perf_event_open(&(0x7f0000000140)={0x4, 0x70, 0x10001, 0x729e, 0x40, 0x80000000, 0x0, 0x7, 0x1004, 0x2, 0x9c, 0xffffffffffffff63, 0x7fff, 0x73e, 0x5, 0x65, 0x7ff, 0x40, 0x5, 0x84, 0x7, 0x4, 0xab6, 0x3, 0x4, 0x5, 0x9, 0x7, 0x1, 0x1, 0xfffffffe000000, 0x6562, 0x0, 0x2, 0x6, 0x9, 0x7, 0x6, 0x0, 0x20000, 0x2, @perf_bp={&(0x7f0000000100), 0x4}, 0x1000, 0x0, 0x80000000, 0xf, 0x0, 0x4032, 0x80000000}, 0x0, 0x0, r0, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x32}, 0x2, @in=@loopback, 0x0, 0x4}}, 0xe8) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) 15:10:57 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f00000000c0)={0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0xffffffffffffffbf, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x117}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000200)='/dev/audio#\x00', 0x7, 0x20403f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)) r3 = getpid() getpgrp(r3) socket(0x2000000000000021, 0x2, 0x10000000000002) r4 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0xfffffffffffffd81) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, 0x0) bind$alg(r5, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'tgr160\x00'}, 0x58) r6 = accept$alg(r5, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x167, &(0x7f0000000100)=[@op={0x18}], 0x18}], 0x1, 0x0) listen(r4, 0xfffffffb) r7 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r7, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r8 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg(r8, &(0x7f0000003d40), 0x4000094, 0x0) [ 301.252900] audit: type=1804 audit(1565190658.239:142): pid=16846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir525748567/syzkaller.UwknhR/211/file0/file0" dev="loop3" ino=297 res=1 [ 301.384688] audit: type=1804 audit(1565190658.239:143): pid=16878 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir525748567/syzkaller.UwknhR/211/file0/file0" dev="loop3" ino=297 res=1 15:10:59 executing program 0: set_mempolicy(0xc003, 0x0, 0x0) iopl(0x7fff) 15:10:59 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000200)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x3, 0x80000) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x4, 0x1000, 0x5}}, 0x30) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {0x0, 0x6}, 0x800000000008, 0x100000001}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) 15:10:59 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x8000, 0x0) fsetxattr$security_smack_transmute(r2, &(0x7f0000000100)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000140)='TRUE', 0x4, 0x2) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x0, 0x0) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000000c0)={r3, 0x8000, 0xffffffffffffffff, r4}) syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x2, 0x3) write$P9_RRENAMEAT(r4, &(0x7f0000000180)={0x7, 0x4b, 0x2}, 0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) 15:10:59 executing program 2: ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x40085511, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}) r0 = syz_open_dev$audion(&(0x7f0000000300)='/dev/audio#\x00', 0x1, 0x1) perf_event_open(&(0x7f0000000140)={0x4, 0x70, 0x10001, 0x729e, 0x40, 0x80000000, 0x0, 0x7, 0x1004, 0x2, 0x9c, 0xffffffffffffff63, 0x7fff, 0x73e, 0x5, 0x65, 0x7ff, 0x40, 0x5, 0x84, 0x7, 0x4, 0xab6, 0x3, 0x4, 0x5, 0x9, 0x7, 0x1, 0x1, 0xfffffffe000000, 0x6562, 0x0, 0x2, 0x6, 0x9, 0x7, 0x6, 0x0, 0x20000, 0x2, @perf_bp={&(0x7f0000000100), 0x4}, 0x1000, 0x0, 0x80000000, 0xf, 0x0, 0x4032, 0x80000000}, 0x0, 0x0, r0, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x32}, 0x2, @in=@loopback, 0x0, 0x4}}, 0xe8) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) 15:10:59 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 15:10:59 executing program 3: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xfff, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r2, 0x1, 0x0, 0x369e5d84) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280), 0x12) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000100)={0x0, 0x7ff}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000200)={r3, 0x1}, &(0x7f0000000240)=0x8) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000002c0)='./file1\x00', 0x100) write$binfmt_aout(r1, &(0x7f0000000400)={{0x1cf, 0x401, 0x0, 0x69, 0x3cf, 0x7, 0x29, 0x4}, "c869729edc266824690c40dfc4d945e9522097e554b4996ec5aa50db3de3d56a2e87f3b916c8bc99fa5933ef8d0e1793c909e08d0e583883fb0910ecdc20d3615fb8eb2e18a2e4bda9375e5848839fe009c4bfbcd314fcd6282e30553f79db91948ceca0950100e51870cb96f0180ec71046c9d38ff38bd0b75462177037438b8e060cf8b1e4c4e978c2f2587b92c8edd7e5dd86b25b76ae30ce8262ec85f1bc3db212ed8520085a2d547be7d8eb41d2600e4f4a93555b377b941a263bdc7df1c03f98deab519f15555e9d6ea7376fbec57848da3b17f179ce77f0aaa208a256297185d39623d44037182bab284eb08f87d73ea2af"}, 0x115) creat(&(0x7f00000003c0)='./file1\x00', 0x0) 15:10:59 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000040), 0x4) r2 = perf_event_open(&(0x7f00000001c0)={0x800000000002, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x2000)=nil, 0x2000, 0x0, 0x4011, r2, 0x0) mincore(&(0x7f00001c0000/0x2000)=nil, 0x2000, &(0x7f0000000080)=""/228) 15:10:59 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(r0, &(0x7f0000000000), 0x0, 0x0, 0x0) 15:10:59 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x2, 0x23) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) 15:10:59 executing program 1: r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$KDSETMODE(r0, 0x4b3a, 0x2) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_init1(0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000600)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @rand_addr=0x1f}, @ib={0x1b, 0x0, 0x0, {"23ce0e9d9488c12f0a77bd74dd38fca2"}, 0x4a7, 0x6, 0xfffffffffffffffc}}}, 0x118) syz_open_dev$usb(0x0, 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) keyctl$search(0xa, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x0) syz_mount_image$minix(0x0, &(0x7f0000000540)='./file0\x00', 0x756, 0x0, 0x0, 0x2020002, 0x0) add_key(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000500)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) socket$unix(0x1, 0x5, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) [ 302.605651] audit: type=1804 audit(1565190659.589:144): pid=16904 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir525748567/syzkaller.UwknhR/212/file0/file0" dev="sda1" ino=17041 res=1 15:10:59 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000280)='/dev/input/mouse#\x00', 0x3808, 0x20000) prctl$PR_CAPBSET_DROP(0x18, 0x1e) ioctl$TIOCSERGETLSR(r1, 0x5459, &(0x7f00000002c0)) close(0xffffffffffffffff) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x0, 0x0) ioctl$PIO_UNIMAPCLR(r2, 0x4b68, &(0x7f00000000c0)={0x10000, 0x4, 0x101}) r3 = syz_open_dev$usbmon(&(0x7f0000000180)='/dev/usbmon#\x00', 0x8, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000200), &(0x7f0000000240)=0x4) syz_read_part_table(0x8001, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="02006800000f00000000000c000000008128b14700000000d59863d20000000002000f2020cc00000000ff0700690000000000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c000", 0x5d, 0x1a0}]) ioctl$KDGETLED(r2, 0x4b31, &(0x7f0000000100)) sendfile(r3, 0xffffffffffffffff, 0x0, 0x80000000000e) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f00000001c0)="cdbd4b74298ba409ebdd896d4788eacf3cf7e941a8097f4e7e0131d7893df07b60ee") 15:10:59 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 15:10:59 executing program 3: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xfff, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000002c0)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000380)={0x7, 0x8, 0xfa00, {r2, 0x6}}, 0x10) fchdir(r1) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r3, 0x1, 0x0, 0x369e5d84) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000017c0)={0x0, 0x0}, &(0x7f0000001800)=0xc) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000001840)={0x0, 0x0}, &(0x7f0000001880)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000018c0)={0x0, 0x0}, &(0x7f0000001900)=0xc) r7 = getuid() syz_mount_image$hfsplus(&(0x7f0000000400)='hfsplus\x00', &(0x7f0000000440)='./file1\x00', 0x68000000, 0x4, &(0x7f0000001740)=[{&(0x7f0000000480)="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", 0x1000, 0xffffffffffffffa9}, {&(0x7f0000001480)="f30227a773494913ef4dc7f0c7f63c3dd21a1a8e6f13c5c4c8c9973a263d4dce5dd84586a6773903a3ab72a39e6f475d824b0da67a70369017f9c89ba51ba3e4948d6ba0056000587902c16ae4571f6c21a48d509b04396649cc3bff7b3f358c46f3e3973e2fd2b471d792039abf47ebcd9be8118a081d4e18ec4989b0af152850909af91a3d4e8db2eda5b9492012d4dd68dfc929e4822fe79720893a63d6db51bb8a1df182ef5d60bd38bcbe6b09dcf6d04369c118c67fbe7c8fd714524e6ec58c1c4a0de7d8dc713a80b3450f753203fb65b97f19e4869a1678c1647a43a22b0c", 0xe2, 0x8}, {&(0x7f0000001580)="2e696af2a05085dbc6e01b61f59191933ab4848e91b0599fdc8e901750445687aea42601761895c95a30dc3d9ff511991b81f2c6a346df3b6a0b8a6ad4fa96ddff47908f8efdfaba3cf6c439502a8ae5cae01cf2599db1a1ae7c365d004dcfec175b54e1d26417c3860caff44de18d6ee0a422c8222ef759ffcfef6a298fb671338f4b4def2762e63dbc67766b44069170d7c7fa270f06a3e43ab4d4faf65bdebf13e77b6e8bf2e6eae0ef3170bfc2019a", 0xb1, 0x200}, {&(0x7f0000001640)="507dbe48a1f305489f6eafa0453553632649420b2d67ffd25998d61601b78e69852841a6802a558ff7ba1f263bf0865b74276dfcb3a7f7c5976fd12d1a0014d0a326f75cacb853b74f2d2dfe013161107a09da3cc6a7827d80fb89079d0ec0ecbddcaef8dd21e91f1df850cdaed9f97f6f369f33c5d669f5dd5dc3ea086387a0bfb8f294c17c5eda8165facf0d412a734f5725f4af0cd39cf1e528a3a9c4bd027ff3480956ec893b0ba377eebda6d2fddb024136e31975e0f858d4b5581aeb2e7ff83e61d0db35d06b1905600112738e3f0330ed5780096eb6899abd853a2bc363dfaf6ee7b20414753641849252b08bb5", 0xf1, 0x3ff30b0e}], 0x3, &(0x7f0000001940)=ANY=[@ANYBLOB="73657373696f6e3d3078303030303030303030303030303030372c747970653dc89db3612c626172726965722c6465636f6d706f73652c736d61636b66737472616e736d7574653d23766d6e6574305d2c7365636c6162656c2c657569643e", @ANYRESDEC=r4, @ANYBLOB=',fowner=', @ANYRESDEC=r5, @ANYBLOB=',uid=', @ANYRESDEC=r6, @ANYBLOB=',defcontext=user_u,fowner>', @ANYRESDEC=r7, @ANYBLOB="8900"]) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r3) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280), 0x12) r8 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={0xffffffffffffffff}, 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000200)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x4, @remote, 0xf055}, r9}}, 0x30) creat(&(0x7f00000003c0)='./file1\x00', 0x0) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000240)={{0xfffffffffffff86c, 0xfffffffffffffff8}, 0x10}, 0x10) [ 302.769945] Unknown ioctl 19304 [ 302.879564] Unknown ioctl 19249 15:10:59 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f0000000040)) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x9, 0xf0ffff02000000}]}}}]}, 0x3c}}, 0x0) 15:10:59 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0xac400, 0x0) ioctl$EVIOCGSW(r2, 0x8040451b, &(0x7f00000000c0)=""/74) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x10200, 0x0) ioctl$RTC_ALM_SET(r3, 0x40247007, &(0x7f0000000040)={0xd, 0xd, 0x8, 0x1, 0x8, 0x1f, 0x5, 0xd1, 0xffffffffffffffff}) syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x2, 0x3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) 15:11:00 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000280)='/dev/input/mouse#\x00', 0x3808, 0x20000) prctl$PR_CAPBSET_DROP(0x18, 0x1e) ioctl$TIOCSERGETLSR(r1, 0x5459, &(0x7f00000002c0)) close(0xffffffffffffffff) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x0, 0x0) ioctl$PIO_UNIMAPCLR(r2, 0x4b68, &(0x7f00000000c0)={0x10000, 0x4, 0x101}) r3 = syz_open_dev$usbmon(&(0x7f0000000180)='/dev/usbmon#\x00', 0x8, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000200), &(0x7f0000000240)=0x4) syz_read_part_table(0x8001, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="02006800000f00000000000c000000008128b14700000000d59863d20000000002000f2020cc00000000ff0700690000000000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c000", 0x5d, 0x1a0}]) ioctl$KDGETLED(r2, 0x4b31, &(0x7f0000000100)) sendfile(r3, 0xffffffffffffffff, 0x0, 0x80000000000e) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f00000001c0)="cdbd4b74298ba409ebdd896d4788eacf3cf7e941a8097f4e7e0131d7893df07b60ee") [ 303.075956] (unnamed net_device) (uninitialized): option arp_validate: invalid value (33554432) [ 303.084112] Unknown ioctl 19249 15:11:00 executing program 1: mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x20) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1']) chdir(&(0x7f0000000280)='./file0\x00') mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000100)='./file1\x00', 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/enforce\x00', 0x101000, 0x0) 15:11:00 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x3ff, 0x4) bind$inet(r1, &(0x7f0000001440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000001600)='bbr\x00', 0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x200, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) recvmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") 15:11:00 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000080)=0x1000, 0x4) r2 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x800) ioctl$TCGETX(r2, 0x5432, &(0x7f0000000140)) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000], 0xf}}, 0x1b) 15:11:00 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x2, 0x3) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x10000, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) [ 303.261689] Unknown ioctl 19304 15:11:00 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x100, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000000)=0x1ff) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x5406, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, 0x0, 0x100000009b4b62b}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x16}) r2 = syz_open_dev$swradio(&(0x7f0000000580)='/dev/swradio#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000005c0)={0x0, 0xffffffff}, &(0x7f0000003700)=0xc) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000080)={0x1f, 0x8, 0x316ffa5a, 0x5, 0x0, 0x44, 0x7, 0xfff, 0x4, 0x4, 0xffffffff, 0x101}) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000003740)={r3, 0x8, 0x2, 0x6, 0x9, 0xf}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@broadcast, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f00000003c0)=0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x18, 0xa, &(0x7f0000000140)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x9}, @exit, @map={0x18, 0xd, 0x1, 0x0, r2}, @alu={0x7, 0x3, 0xd, 0x7, 0x7, 0xffffffffffffffc1, 0xfffffffffffffff0}, @generic={0x5, 0x9, 0x8, 0xa4, 0x400}, @generic={0xffffffffffffff9b, 0x20, 0x4d5, 0xea3, 0x20}, @call={0x85, 0x0, 0x0, 0x60}, @exit], &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f0000000200)=""/143, 0x41f00, 0x4, [], r4, 0x0, r2, 0x8, &(0x7f0000000400)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000440)={0x4, 0xd, 0x5}, 0x10}, 0x70) [ 303.345524] Unknown ioctl 19249 15:11:00 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="240000006b000b07031dfffd946fa2830020200a000900010000000000000081a20400cac295e60000110affffba010000000009b356da5a80d18be34c8546c8243929db06b20cd37ed01cc007fc2ca560303e016a212748ce33e6285ab2a92bb82e586bd6e2828812b311dd63f12d3f7c34d907153fe50e3728b158b8a73da7384e7604c70c59a15dc76d9bf099b9ad1077", 0xfffffffffffffeb1}], 0x1}, 0x0) 15:11:00 executing program 4: r0 = epoll_create1(0x0) close(0xffffffffffffffff) syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x2, 0x3) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000780)) 15:11:00 executing program 0: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x4, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2000004e20}, 0x1c) r1 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x1c6, 0x323280) ioctl$KVM_DEASSIGN_PCI_DEVICE(r1, 0x4040ae72, &(0x7f0000000180)={0x1, 0x1, 0x90, 0x1, 0x2e}) readv(r1, &(0x7f0000001580)=[{&(0x7f00000001c0)=""/124, 0xffffffffffffff88}, {&(0x7f0000000240)=""/117, 0x75}, {&(0x7f00000002c0)=""/4096, 0x13aa}, {&(0x7f00000012c0)=""/26, 0x1a}, {&(0x7f0000001300)}, {&(0x7f0000001340)=""/244, 0xf4}, {&(0x7f0000001440)=""/146, 0x92}], 0x7) syz_emit_ethernet(0x74, &(0x7f0000000100)={@local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 15:11:00 executing program 3: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xfff, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) renameat2(r1, &(0x7f0000000100)='./file2\x00', r0, &(0x7f00000001c0)='./file0\x00', 0x2) fchdir(r1) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r2, 0x1, 0x0, 0x369e5d84) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280), 0x12) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file1\x00', 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c) 15:11:00 executing program 5: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x8, 0x1) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000200)=0x1, 0x4) clock_gettime(0x0, &(0x7f0000000000)) clock_nanosleep(0x9, 0x0, &(0x7f00000001c0), &(0x7f00000000c0)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(0x0, 0x1000000000014) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x801}) [ 303.684902] audit: type=1804 audit(1565190660.669:145): pid=16949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir525748567/syzkaller.UwknhR/213/file0/file0" dev="loop3" ino=325 res=1 15:11:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5455e0bcfe46bf070") r1 = socket$inet6(0xa, 0x800000000000002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x90000, 0x0) ioctl$EVIOCGKEYCODE(r2, 0x80084504, &(0x7f0000000200)=""/2) ioctl$TCSETXF(r2, 0x5434, &(0x7f00000000c0)={0x5, 0x59, [0xb61, 0x2, 0x0, 0xff, 0x9], 0x9}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x5}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000180)={r3, 0x2, 0x42}, 0x8) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) ioctl$sock_inet_SIOCGIFBRDADDR(r2, 0x8919, &(0x7f00000001c0)={'team0\x00', {0x2, 0x4e24, @broadcast}}) 15:11:00 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) clone(0x2102001ff2, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_ifreq(r1, 0x89b1, &(0x7f0000000000)={'vlan0\x00', @ifru_hwaddr=@remote}) 15:11:00 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x7, 0x410000) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f00000000c0), 0x493) syz_open_procfs(0x0, &(0x7f0000000080)='coredump_filter\x00') keyctl$session_to_parent(0x12) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES64, @ANYRESDEC=0x0, @ANYRES64, @ANYRESHEX, @ANYRES16, @ANYBLOB="7ca02ebe44f959c9fa5862d66cac1ca0c1522498b6e65eb39686dc93cbb08b7f843d53488472c9960afb1b32cfa5c8cd0e11c943c12abd109ee312fcb5db8708907f5f6ea35f9b4487a25b5f0fa381a6ad8449714edfe285577bd9c0b8a7b75e4df54fd3ce2b8af8d1ffb44e4d54c228d48338715d8552883eeeb62603184de83fb32ac52c34d8c79a1bfa1bf061d08bfe1728d0248ea5f55173b122a8cc404e3c35"], @ANYRESDEC, @ANYRES32], 0xfffffe60) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) 15:11:00 executing program 4: r0 = epoll_create1(0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x200, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f00000000c0)={0x1}) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) r2 = epoll_create1(0x0) close(r0) write$vnet(r1, &(0x7f0000000240)={0x1, {&(0x7f0000000100)=""/118, 0x76, &(0x7f0000000180)=""/150, 0x3, 0x4}}, 0x68) syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x2, 0x3) init_module(&(0x7f0000000000)='/dev/midi#\x00', 0xb, &(0x7f0000000040)='\x00') epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000780)) 15:11:00 executing program 5: socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xaf32, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000300)) close(r1) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x40040, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r3, 0x5, 0x0, 0x0, 0x0, @ib={0x1b, 0xefa, 0x100000001, {"59dfb6191d7de89d245ff0166b36813c"}, 0x2, 0x4, 0x800}, @ib={0x1b, 0x7ff, 0x8, {"a311e618df56a4cf7255f05f91b47e48"}, 0x6, 0x3, 0x51afb4e1}}}, 0x118) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x200004) sendfile(r1, r4, 0x0, 0x8000fffffffe) 15:11:00 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0x25}, 0x45c) r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 303.793654] audit: type=1400 audit(1565190660.769:146): avc: denied { wake_alarm } for pid=17010 comm="syz-executor.5" capability=35 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=capability2 permissive=1 15:11:00 executing program 1: r0 = memfd_create(&(0x7f00000000c0)='cpuset{ke\x80ring\x00', 0x4) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x100000000}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='pids.current\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x1ac, @remote, 0xffffffffffffff01}, 0x1c) 15:11:00 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132}) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_mr\xc9\xd3if\x04') r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x20000000000, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f00000000c0)='trusted.overlay.nlink\x00', &(0x7f0000000140)={'U+', 0x200}, 0x28, 0x3) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000080), 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x2f, &(0x7f0000000040)={@rand_addr, @remote}, &(0x7f0000000200)=0xc) syz_open_dev$vbi(&(0x7f0000001840)='/dev/vbi#\x00', 0x1, 0x2) close(r0) 15:11:00 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000140)=0x3) r1 = dup(r0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000)=0x3, 0x4) read(r0, &(0x7f0000000040)=""/11, 0xb) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 15:11:01 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x2, 0x3) ioctl$sock_bt_cmtp_CMTPCONNADD(r2, 0x400443c8, &(0x7f0000000000)={r2}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) [ 303.984845] audit: type=1800 audit(1565190660.969:147): pid=17037 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed" comm="syz-executor.5" name="bus" dev="sda1" ino=16849 res=0 [ 304.037725] audit: type=1804 audit(1565190661.009:148): pid=17035 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir525748567/syzkaller.UwknhR/214/file0/file0" dev="sda1" ino=16563 res=1 15:11:01 executing program 3: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xfff, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r2, 0x1, 0x0, 0x369e5d84) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280), 0x12) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f00000001c0)='team\x00') getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000200)={0x0, @rand_addr, @multicast1}, &(0x7f0000000240)=0xc) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f00000002c0)={@multicast2, @empty, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@initdev}}, &(0x7f0000000580)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000005c0)={{{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@remote}}, &(0x7f00000006c0)=0xe8) getsockname$packet(r0, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000800)=0x14) getsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000840)={@multicast1, @initdev, 0x0}, &(0x7f0000000880)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000002080)={{{@in6=@mcast2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f0000002180)=0xe8) getpeername$packet(r2, &(0x7f00000021c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000002200)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000002300)={{{@in, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@multicast2}}, &(0x7f0000002400)=0xe8) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f00000009c0)={0xa, @capture={0x1000, 0x1, {0x100000000, 0x401}, 0x9048000000000000, 0x40}}) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000002440)={@initdev, @loopback, 0x0}, &(0x7f0000002480)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000024c0)={'team0\x00', 0x0}) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f00000008c0)={'filter\x00', 0xb9, "e83aecbc0f2945d7800ecb6ffcb64bf18b1aef4dc457b240db9f2c55e4083987c75957c31a82aa234a9ab2ef876ea37228dfb0e844933fabe5439c2318e7bdf8b67b9930a755c339c6d18715d30a389e4f6c529fd2b3d1cda4b792485204ad8b196708641706c571d6defd38b3f63db991666ad7e941139be38893a8fa62c53991cd1ae1a386f4d2a519f9d34573f608343d31d26f4e818c703d4ac4c8a7499dde97dae9b5d81f12c3cbdf886f69e941de02ab0c866cb958e2"}, &(0x7f0000000380)=0xdd) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000028c0)={'team0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000002900)={{{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @initdev}}, 0x0, @in=@multicast1}}, &(0x7f0000002a00)=0xe8) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000002a40)={0x0, @initdev, @broadcast}, &(0x7f0000002a80)=0xc) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000002f80)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8008000}, 0xc, &(0x7f0000002f40)={&(0x7f0000002ac0)={0x444, r3, 0x100, 0x70bd28, 0x25dfdbfd, {}, [{{0x8, 0x1, r4}, {0x40, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r6}, {0x168, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x7fffffff}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x7fff}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x400}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r10}, {0x7c, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x3ff}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r11}}}]}}, {{0x8, 0x1, r12}, {0x1ec, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x7fff}}, {0x8, 0x6, r14}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r15}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r16}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xea139e6}}, {0x8, 0x6, r17}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0xc9}}}]}}]}, 0x444}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) creat(&(0x7f00000003c0)='./file1\x00', 0x0) 15:11:01 executing program 5: sendmsg$key(0xffffffffffffffff, &(0x7f0000008c80)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="02"], 0x1}}, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xa0) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_tables_names\x00') preadv(r1, &(0x7f00000017c0), 0x1be, 0x4000) [ 304.086405] device nr0 entered promiscuous mode 15:11:01 executing program 5: r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$PPPOEIOCDFWD(r0, 0xb101, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x6000, 0x0) ioctl$KVM_GET_XCRS(r2, 0x8188aea6, &(0x7f0000000100)={0x4, 0x545d4e32, [{0x2, 0x0, 0x81}, {0x7, 0x0, 0x767}, {0x4, 0x0, 0x9}, {0x7, 0x0, 0x7fffffff}]}) readv(r1, &(0x7f0000002300)=[{&(0x7f0000000080)=""/126, 0x7e}], 0x1) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r2, 0x80045700, &(0x7f0000000680)) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000040)=""/26, 0x1a}, {&(0x7f0000000180)=""/71, 0x47}, {&(0x7f0000000200)=""/214, 0xd6}, {&(0x7f0000000300)=""/31, 0x1f}, {&(0x7f0000000340)=""/200, 0xc8}, {&(0x7f0000000440)=""/39, 0x27}, {&(0x7f0000000480)=""/183, 0xb7}, {&(0x7f0000000540)=""/168, 0xa8}], 0x8) [ 304.204036] device nr0 entered promiscuous mode 15:11:01 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) mknodat(r1, &(0x7f0000000040)='./file0\x00', 0xc001, 0x5) write(r0, &(0x7f0000000200)="260000001300abf1eb14c1f8000322ff001000e313000000090000680000000006000300124b", 0x26) connect$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x1c) [ 304.368274] K: renamed from caif0 [ 304.477851] audit: type=1804 audit(1565190661.459:149): pid=17074 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir525748567/syzkaller.UwknhR/215/file0/file0" dev="loop3" ino=327 res=1 [ 304.506175] A link change request failed with some changes committed already. Interface K may have been left with an inconsistent configuration, please check. 15:11:01 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dca50d5e0bcfe47bf070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getsockopt$sock_int(r1, 0x1, 0x23, &(0x7f000059dffc), &(0x7f0000000100)=0x4) 15:11:01 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = syz_open_dev$rtc(&(0x7f0000000340)='/dev/rtc#\x00', 0xb7f, 0x3d) ioctl$RTC_WIE_OFF(r1, 0x7010) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f00000001c0)={0x660, 0x7, 0x1, 0x7ff, 0x4, 0xbb1, 0x40, 0x8, 0x6, 0x1, 0x7, 0x7f}) r3 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x0, 0x10302) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000080)) fgetxattr(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="736563757269f479a49c2ff3d45ceb"], &(0x7f0000000280)=""/7, 0x7) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}}, 0x90) 15:11:01 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x80010) close(r0) syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x2, 0x3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) 15:11:01 executing program 3: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000500)='/proc/self/net/pfkey\x00', 0x109000, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000540)='/dev/zero\x00', 0x80000, 0x0) connect$l2tp(r0, &(0x7f00000005c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x4, 0x3, 0x2, 0x4, {0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, [], 0xb}, 0x3}}}, 0x3a) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xfff, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000740)={0x0, 0x0}, &(0x7f0000000700)=0x5e8fc3d7b9c28390) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f00000002c0)=0x7, 0x4) quotactl(0x5, &(0x7f0000000100)='./file1\x00', r3, &(0x7f0000000240)="d64f00088b1f327a3100974889bed9d2504d5d90822f9f3417ad9dc831ee75ade408fae58e49652a119f126bd99a01851e0a7d") ioctl$VIDIOC_QUERY_EXT_CTRL(r2, 0xc0e85667, &(0x7f0000000400)={0x80000000, 0x2, "8914e117f6cade55c53f8224501a7ac8a212049b1e79b58bc72989b642aaa156", 0x9, 0x8, 0x200, 0x100000000, 0x100000000, 0x3, 0x614, 0x3ff, [0x3ff, 0xcbdd, 0x8, 0x3]}) r4 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r5 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r5, 0x1, 0x0, 0x369e5d84) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r4, 0xc008551c, &(0x7f0000000580)={0x46f, 0x6, [0x100064d38f76, 0x7]}) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280), 0x12) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file1\x00', 0x0) get_mempolicy(&(0x7f0000000340), &(0x7f0000000380), 0x7fffffff, &(0x7f0000ffb000/0x3000)=nil, 0x2) 15:11:01 executing program 0: 15:11:01 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@can_delroute={0x2c, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_MOD_OR={0x18, 0x3, {{{}, 0x0, 0x0, 0x0, 0x0, "fb746902870a0a1e"}, 0x2}}]}, 0x2c}}, 0x0) 15:11:01 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open$dir(&(0x7f0000000080)='./file1\x00', 0x81fe, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00U\x00']) 15:11:01 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dca50d5e0bcfe47bf070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f000059dffc), &(0x7f0000000100)=0x4) 15:11:01 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dca50d5e0bcfe47bf070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getsockopt$sock_int(r1, 0x1, 0xd, &(0x7f000059dffc), &(0x7f0000000100)=0x4) 15:11:01 executing program 3: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xfff, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x2000, 0x0) fchdir(r1) fcntl$dupfd(r0, 0x0, r1) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r2, 0x1, 0x0, 0x369e5d84) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280), 0x12) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 15:11:01 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dca50d5e0bcfe47bf070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getsockopt$sock_int(r1, 0x1, 0x2b, &(0x7f000059dffc), &(0x7f0000000100)=0x4) 15:11:01 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0, 0x0) bind$nfc_llcp(r2, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x3, 0xfffffffffffffff8, 0x9, "dbbd02c12a71b4e0a300cd6de212f2fff3919f591620f2a8a2554ed53137a4afe93107d1dfe5b5638dc28acabf9cde776ec10a819e348854c52baaf83f33c0", 0x3f}, 0x60) ioctl$SIOCRSGL2CALL(r2, 0x89e5, &(0x7f0000000200)=@bcast) close(r0) r3 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_RMID(r3, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000100)={0x0, 0x0}) sched_rr_get_interval(r4, &(0x7f0000000140)) r5 = syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x2, 0x3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r5, &(0x7f0000000000)={0x80000000}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) write$evdev(r2, &(0x7f00000001c0)=[{{r6, r7/1000+10000}, 0x1f, 0x2, 0x2ce4}, {{0x0, 0x2710}, 0x17, 0x3, 0x50000000}], 0x30) 15:11:01 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1}, {@in6=@loopback, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff}, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x13c}}, 0x0) 15:11:01 executing program 5: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x80084504, &(0x7f0000ffcffc)) 15:11:01 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) ioctl$EVIOCSCLOCKID(r0, 0x40084503, &(0x7f0000ffcffc)) [ 304.934768] QAT: Invalid ioctl 15:11:01 executing program 2: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x40084503, &(0x7f0000ffcffc)=0xfa000000) [ 305.020933] QAT: Invalid ioctl 15:11:02 executing program 5: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x80084504, &(0x7f0000ffcffc)) 15:11:02 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1}, {@in6=@loopback, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff}, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x13c}}, 0x0) 15:11:02 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x2, 0x3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) 15:11:02 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) ioctl$EVIOCSCLOCKID(r0, 0x40084503, &(0x7f0000ffcffc)) 15:11:02 executing program 2: socket$inet(0x2, 0x0, 0x0) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCDELDLCI(r1, 0x8982, 0x0) ptrace(0x10, r0) wait4(0x0, 0x0, 0x0, 0x0) [ 305.410942] audit: type=1804 audit(1565190662.399:150): pid=17186 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir525748567/syzkaller.UwknhR/217/file0/file0" dev="loop3" ino=329 res=1 15:11:02 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") wait4(0x0, 0x0, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r1, 0x0, 0x0) 15:11:02 executing program 5: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x80084504, &(0x7f0000ffcffc)) 15:11:02 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) ioctl$EVIOCSCLOCKID(r0, 0x40084503, &(0x7f0000ffcffc)) 15:11:02 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000d000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f0000000040)="b9fc0a00000f32b9800200000f3266ba2000b000ee9af80000000901b9c70a00000f320fc77698360f01c8650f2169660fc772ae650fc769b2", 0x39}], 0x1, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x40000, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000004cb, 0x0, 0x0, 0x0, 0x0, 0x1]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 15:11:02 executing program 3: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xfff, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r0, 0x1, 0x100000, 0x87) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280), 0x12) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r2, 0x320, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x28, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xf5b000000000000}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) creat(&(0x7f00000003c0)='./file1\x00', 0x0) 15:11:02 executing program 4: r0 = semget(0x2, 0x0, 0x2) semctl$IPC_RMID(r0, 0x0, 0x0) r1 = epoll_create1(0x0) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$KVM_GET_TSC_KHZ(r2, 0xaea3) r3 = epoll_create1(0x0) close(r1) syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0xfffffffffffffffe, 0x3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000780)) [ 305.569837] syz-executor.0: vmalloc: allocation failure: 0 bytes, mode:0x14000c0(GFP_KERNEL), nodemask=(null) [ 305.594338] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 305.609762] FAT-fs (loop3): Filesystem has been set read-only 15:11:02 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) ioctl$EVIOCSCLOCKID(r0, 0x40084503, &(0x7f0000ffcffc)) 15:11:02 executing program 4: chdir(&(0x7f0000000080)='./file0\x00') r0 = epoll_create1(0x0) rt_sigreturn() r1 = epoll_create1(0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x8000, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r2, 0x12, 0x2, &(0x7f0000000100)=""/106, &(0x7f0000000180)=0x6a) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x2, 0xfffffffeffffffff, 0x5203, 0x5, 0x21, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x4}, 0x3c) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x9f40fda54040ecea, 0x81, 0x100000001, 0xeda, 0x10, r3, 0xfffffffffffffffe, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) close(r0) syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x2, 0x3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) [ 305.616456] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 305.655387] CPU: 0 PID: 17189 Comm: syz-executor.0 Not tainted 4.14.137 #33 [ 305.662919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 305.672494] Call Trace: [ 305.675095] dump_stack+0x138/0x19c [ 305.678745] warn_alloc.cold+0x96/0x1af [ 305.682735] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 305.687591] ? lock_downgrade+0x6e0/0x6e0 [ 305.691859] ? avc_has_perm+0x2df/0x4b0 [ 305.695859] __vmalloc_node_range+0x3be/0x6a0 [ 305.700720] ? trace_hardirqs_on+0x10/0x10 [ 305.704964] vmalloc+0x46/0x50 [ 305.708166] ? sel_write_load+0x1a0/0x1050 [ 305.712423] sel_write_load+0x1a0/0x1050 [ 305.716504] ? save_trace+0x290/0x290 [ 305.720320] ? sel_read_bool+0x240/0x240 [ 305.724389] ? trace_hardirqs_on+0x10/0x10 [ 305.728636] ? save_trace+0x290/0x290 [ 305.732459] __vfs_write+0x105/0x6b0 [ 305.736265] ? __lock_is_held+0xb6/0x140 [ 305.740350] ? sel_read_bool+0x240/0x240 [ 305.744429] ? kernel_read+0x120/0x120 [ 305.748422] ? __lock_is_held+0xb6/0x140 [ 305.752488] ? check_preemption_disabled+0x3c/0x250 [ 305.757691] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 305.763159] ? rcu_read_lock_sched_held+0x110/0x130 [ 305.768211] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 305.773066] ? __sb_start_write+0x153/0x2f0 [ 305.777532] vfs_write+0x198/0x500 [ 305.781190] SyS_write+0xfd/0x230 [ 305.784650] ? SyS_read+0x230/0x230 [ 305.788381] ? do_syscall_64+0x53/0x640 [ 305.792366] ? SyS_read+0x230/0x230 [ 305.796012] do_syscall_64+0x1e8/0x640 [ 305.800088] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 305.805044] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 305.810246] RIP: 0033:0x459829 [ 305.813467] RSP: 002b:00007fdaa3659c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 305.821191] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459829 [ 305.828476] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 305.835775] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 305.843078] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdaa365a6d4 [ 305.850620] R13: 00000000004c9a25 R14: 00000000004e1060 R15: 00000000ffffffff [ 305.859290] Mem-Info: [ 305.861931] active_anon:165919 inactive_anon:692 isolated_anon:0 [ 305.861931] active_file:12893 inactive_file:11533 isolated_file:0 [ 305.861931] unevictable:4100 dirty:174 writeback:0 unstable:0 [ 305.861931] slab_reclaimable:12838 slab_unreclaimable:108915 [ 305.861931] mapped:58985 shmem:258 pagetables:2005 bounce:0 [ 305.861931] free:1085065 free_pcp:227 free_cma:0 15:11:02 executing program 5: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x80084504, &(0x7f0000ffcffc)) [ 305.906811] Node 0 active_anon:661552kB inactive_anon:2768kB active_file:51428kB inactive_file:46132kB unevictable:16400kB isolated(anon):0kB isolated(file):0kB mapped:235940kB dirty:692kB writeback:0kB shmem:1032kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 190464kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 305.958401] Node 1 active_anon:0kB inactive_anon:0kB active_file:144kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no 15:11:03 executing program 4: r0 = epoll_create1(0x0) r1 = add_key(&(0x7f0000000000)='pkcs7_test\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="3959d5319d65355a24e88b977e46b9181e3993d634a57f4977", 0x19, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_QUERY(0x18, r1, 0x0, &(0x7f00000000c0)='/dev/midi#\x00', &(0x7f0000000100)) r2 = epoll_create1(0x0) close(r0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x20000, 0x0) r4 = getuid() stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r3, &(0x7f0000000180)='./file0\x00', r4, r5, 0x800) syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x2, 0x3) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000780)) [ 306.006665] audit: type=1804 audit(1565190662.989:151): pid=17214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir525748567/syzkaller.UwknhR/218/file0/file0" dev="loop3" ino=331 res=1 15:11:03 executing program 3: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xfff, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r1, 0x1, 0x0, 0x369e5d84) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280), 0x12) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f00000003c0)='./file1\x00', 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000400)={0x1, 0x0, @ioapic={0x0, 0x3, 0x9, 0x1, 0x0, [{0x90, 0x3, 0x3, [], 0x1a3e}, {0x3, 0x6, 0x9}, {0x0, 0x0, 0x2, [], 0xd}, {0x200, 0x99b, 0x7, [], 0x7}, {0x8000, 0x7fff, 0x0, [], 0xfffffffffffffff8}, {0x7, 0x1, 0xfff, [], 0x6b}, {0x7, 0xff8, 0x100, [], 0x3}, {0x5, 0x0, 0xcca, [], 0x200}, {0x5ea96a3c, 0x1, 0x9, [], 0x4}, {0x4, 0xffff, 0x4}, {0x2, 0x4, 0x2, [], 0x8}, {0x3ff, 0x689, 0x8, [], 0xffffffffffffff90}, {0x3f, 0x3, 0x7, [], 0x8}, {0x72, 0xd1e4, 0x1, [], 0x912b}, {0x200, 0x8, 0xa49b, [], 0x8000000}, {0x7, 0x7, 0x0, [], 0x5}, {0x4, 0x4, 0x40, [], 0x5}, {0x6, 0x4, 0x1, [], 0xfffffffffffffffe}, {0x3, 0x8, 0x20, [], 0x100000000}, {0xffffffff, 0x7f, 0x0, [], 0xffffffffffffffff}, {0x3b, 0x8001, 0x0, [], 0x8}, {0x1, 0x8001, 0x0, [], 0x7}, {0x7, 0x7275, 0x800, [], 0xf9f}, {0x278, 0x0, 0xcf6d, [], 0x800}]}}) 15:11:03 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x40084503, &(0x7f0000ffcffc)) [ 306.016882] Node 0 DMA free:15908kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 306.084600] lowmem_reserve[]: 0 2580 2580 2580 [ 306.089648] Node 0 DMA32 free:536924kB min:36468kB low:45584kB high:54700kB active_anon:663868kB inactive_anon:2756kB active_file:51412kB inactive_file:46164kB unevictable:16400kB writepending:692kB present:3129332kB managed:2644892kB mlocked:16400kB kernel_stack:8672kB pagetables:8048kB bounce:0kB free_pcp:668kB local_pcp:540kB free_cma:0kB [ 306.128972] lowmem_reserve[]: 0 0 0 0 [ 306.170286] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 306.269981] lowmem_reserve[]: 0 0 0 0 [ 306.289812] Node 1 Normal free:3785976kB min:53420kB low:66772kB high:80124kB active_anon:0kB inactive_anon:0kB active_file:144kB inactive_file:0kB unevictable:0kB writepending:4kB present:3932160kB managed:3870208kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 306.325393] lowmem_reserve[]: 0 0 0 0 [ 306.332308] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 306.349384] Node 0 DMA32: 662*4kB (UME) 4*8kB (ME) 6*16kB (UE) 490*32kB (UM) 1043*64kB (UM) 149*128kB (UME) 144*256kB (UM) 74*512kB (UME) 3*1024kB (ME) 2*2048kB (M) 86*4096kB (UM) = 538456kB [ 306.368437] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 306.389252] Node 1 Normal: 58*4kB (UME) 348*8kB (UE) 255*16kB (UM) 60*32kB (UME) 15*64kB (UM) 8*128kB (U) 8*256kB (UME) 3*512kB (UE) 3*1024kB (UME) 4*2048kB (ME) 918*4096kB (M) = 3785976kB [ 306.409640] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 306.421443] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 306.430812] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 306.441101] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 306.449837] 24684 total pagecache pages [ 306.454394] 0 pages in swap cache [ 306.458256] Swap cache stats: add 0, delete 0, find 0/0 [ 306.464277] Free swap = 0kB [ 306.467423] Total swap = 0kB [ 306.470969] 1965979 pages RAM 15:11:03 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") wait4(0x0, 0x0, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r1, 0x0, 0x0) 15:11:03 executing program 5: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x80084504, &(0x7f0000ffcffc)) 15:11:03 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x40084503, &(0x7f0000ffcffc)) 15:11:03 executing program 2: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = inotify_init1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x86000210) inotify_rm_watch(r0, r2) inotify_add_watch(r0, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) utime(&(0x7f0000000040)='./file0\x00', 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/88, 0x58}], 0x1) 15:11:03 executing program 4: r0 = epoll_create1(0x80000) r1 = epoll_create1(0x80000) close(r0) r2 = syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x2, 0x3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0505350, &(0x7f0000000000)={{0x1f, 0xffffffffffffff65}, {0x1, 0x5}, 0x1, 0x0, 0x4}) [ 306.474193] 0 pages HighMem/MovableOnly [ 306.478297] 333227 pages reserved [ 306.482697] 0 pages cma reserved [ 306.534797] syz-executor.0: vmalloc: allocation failure: 0 bytes, mode:0x14000c0(GFP_KERNEL), nodemask=(null) [ 306.559847] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 306.568930] CPU: 1 PID: 17245 Comm: syz-executor.0 Not tainted 4.14.137 #33 [ 306.576261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 306.585877] Call Trace: [ 306.588519] dump_stack+0x138/0x19c [ 306.592162] warn_alloc.cold+0x96/0x1af [ 306.596183] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 306.602227] ? lock_downgrade+0x6e0/0x6e0 [ 306.606716] ? avc_has_perm+0x2df/0x4b0 [ 306.610911] __vmalloc_node_range+0x3be/0x6a0 [ 306.615440] ? trace_hardirqs_on+0x10/0x10 [ 306.619909] vmalloc+0x46/0x50 [ 306.623264] ? sel_write_load+0x1a0/0x1050 [ 306.627788] sel_write_load+0x1a0/0x1050 [ 306.632493] ? save_trace+0x290/0x290 [ 306.636536] ? sel_read_bool+0x240/0x240 [ 306.640673] ? trace_hardirqs_on+0x10/0x10 [ 306.645030] ? save_trace+0x290/0x290 [ 306.648875] __vfs_write+0x105/0x6b0 [ 306.652626] ? __lock_is_held+0xb6/0x140 [ 306.656733] ? sel_read_bool+0x240/0x240 [ 306.661095] ? kernel_read+0x120/0x120 [ 306.665278] ? __lock_is_held+0xb6/0x140 [ 306.671460] ? check_preemption_disabled+0x3c/0x250 [ 306.679429] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 306.684932] ? rcu_read_lock_sched_held+0x110/0x130 [ 306.690871] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 306.695752] ? __sb_start_write+0x153/0x2f0 [ 306.700333] vfs_write+0x198/0x500 [ 306.704169] SyS_write+0xfd/0x230 [ 306.707992] ? SyS_read+0x230/0x230 [ 306.711726] ? do_syscall_64+0x53/0x640 [ 306.717028] ? SyS_read+0x230/0x230 [ 306.720730] do_syscall_64+0x1e8/0x640 [ 306.725385] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 306.730507] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 306.735803] RIP: 0033:0x459829 [ 306.739000] RSP: 002b:00007fdaa3659c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 306.746735] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459829 [ 306.754611] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 306.762603] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 306.770940] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdaa365a6d4 15:11:03 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") wait4(0x0, 0x0, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r1, 0x0, 0x0) 15:11:03 executing program 5: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x80084504, &(0x7f0000ffcffc)) [ 306.778595] R13: 00000000004c9a25 R14: 00000000004e1060 R15: 00000000ffffffff [ 306.799005] audit: type=1804 audit(1565190663.779:152): pid=17232 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir525748567/syzkaller.UwknhR/219/file0/file0" dev="loop3" ino=333 res=1 15:11:03 executing program 2: r0 = socket(0x200000000000011, 0x3, 0x0) setsockopt$packet_int(r0, 0x107, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) r2 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x0, 0x406101) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_DMA(r2, 0xc0406429, &(0x7f0000000340)={r3, 0x2, &(0x7f0000000140)=[0xad, 0x80], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="65ed59501ed8"}, 0x14) msync(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x6) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 15:11:03 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x40084503, &(0x7f0000ffcffc)) [ 306.849227] syz-executor.0: vmalloc: allocation failure: 0 bytes, mode:0x14000c0(GFP_KERNEL), nodemask=(null) 15:11:03 executing program 4: r0 = epoll_create1(0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x204a00, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) clone(0x803102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x2, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="28000000320001830000000066f3069a08f8e3ab14000100100001000800010000000000c3000000c9614be54eb7f66879dee9fe1519c0c4c73a0e5a44971c76f00677c58b8c13f6d77b4461361deab89298a0aa4136fcfc750bdabda0380268b3aeff4a4125b04b6200282992b7c541d1"], 0x28}}, 0x0) ioctl$sock_ifreq(r2, 0x891c, &(0x7f0000000040)={'netdevsim0\x00', @ifru_map}) epoll_create1(0x80000) close(r0) r4 = syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x2, 0x83) clock_nanosleep(0x0, 0x0, &(0x7f0000000180)={0x77359400}, &(0x7f00000001c0)) getsockname$llc(r4, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000040)=0x10) getsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000100), &(0x7f0000000140)=0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f00000000c0)={0x20000}) 15:11:03 executing program 3: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xfff, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r1, 0x1, 0x0, 0x369e5d84) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280), 0x12) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, 0x0, 0xffffffffffffff8e) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file1\x00', 0x0) 15:11:03 executing program 5: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x80084504, &(0x7f0000ffcffc)) [ 306.955638] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 306.978331] CPU: 0 PID: 17254 Comm: syz-executor.0 Not tainted 4.14.137 #33 15:11:04 executing program 1: mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x40084503, &(0x7f0000ffcffc)) [ 306.994220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 307.007694] Call Trace: [ 307.007719] dump_stack+0x138/0x19c [ 307.007734] warn_alloc.cold+0x96/0x1af [ 307.007747] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 307.007761] ? lock_downgrade+0x6e0/0x6e0 [ 307.007778] ? avc_has_perm+0x2df/0x4b0 [ 307.007792] __vmalloc_node_range+0x3be/0x6a0 [ 307.007803] ? trace_hardirqs_on+0x10/0x10 [ 307.007816] vmalloc+0x46/0x50 [ 307.007827] ? sel_write_load+0x1a0/0x1050 [ 307.007836] sel_write_load+0x1a0/0x1050 15:11:04 executing program 2: getpid() sched_setscheduler(0x0, 0x5, &(0x7f00000002c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000d000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f0000000040)="b9fc0a00000f32b9800200000f3266ba2000b000ee9af80000000901b9c70a00000f320fc77698360f01c8650f2169660fc772ae650fc769b2", 0x39}], 0x1, 0x0, 0x0, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xa, 0x7, 0x2, {0x1, '-'}}, 0xa) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000000)={0x9, 0x8}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000004cb]}) [ 307.007846] ? save_trace+0x290/0x290 [ 307.007859] ? sel_read_bool+0x240/0x240 [ 307.007873] ? trace_hardirqs_on+0x10/0x10 [ 307.032680] ? save_trace+0x290/0x290 [ 307.032699] __vfs_write+0x105/0x6b0 [ 307.032711] ? __lock_is_held+0xb6/0x140 [ 307.032725] ? sel_read_bool+0x240/0x240 [ 307.032733] ? kernel_read+0x120/0x120 [ 307.032741] ? __lock_is_held+0xb6/0x140 [ 307.032753] ? check_preemption_disabled+0x3c/0x250 15:11:04 executing program 1: mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x40084503, &(0x7f0000ffcffc)) [ 307.032767] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 307.032779] ? rcu_read_lock_sched_held+0x110/0x130 [ 307.032789] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 307.032799] ? __sb_start_write+0x153/0x2f0 [ 307.032811] vfs_write+0x198/0x500 [ 307.032823] SyS_write+0xfd/0x230 [ 307.032835] ? SyS_read+0x230/0x230 [ 307.032845] ? do_syscall_64+0x53/0x640 [ 307.032855] ? SyS_read+0x230/0x230 [ 307.032867] do_syscall_64+0x1e8/0x640 [ 307.032877] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 307.032895] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 307.032904] RIP: 0033:0x459829 [ 307.032909] RSP: 002b:00007fdaa3659c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 307.045238] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459829 [ 307.045245] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 307.045250] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 15:11:04 executing program 5: mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x80084504, &(0x7f0000ffcffc)) 15:11:04 executing program 1: mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x40084503, &(0x7f0000ffcffc)) [ 307.045256] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdaa365a6d4 [ 307.045261] R13: 00000000004c9a25 R14: 00000000004e1060 R15: 00000000ffffffff [ 307.079485] warn_alloc_show_mem: 1 callbacks suppressed [ 307.079491] Mem-Info: [ 307.134168] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 307.198475] active_anon:168196 inactive_anon:691 isolated_anon:0 [ 307.198475] active_file:12893 inactive_file:11551 isolated_file:0 [ 307.198475] unevictable:4100 dirty:203 writeback:0 unstable:0 [ 307.198475] slab_reclaimable:12838 slab_unreclaimable:108980 [ 307.198475] mapped:58992 shmem:258 pagetables:2111 bounce:0 [ 307.198475] free:1082473 free_pcp:207 free_cma:0 [ 307.297898] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 307.460866] Node 0 active_anon:670804kB inactive_anon:2760kB active_file:51428kB inactive_file:46204kB unevictable:16400kB isolated(anon):0kB isolated(file):0kB mapped:236152kB dirty:812kB writeback:0kB shmem:1032kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 194560kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 307.508762] Node 1 active_anon:0kB inactive_anon:0kB active_file:144kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 307.544281] Node 0 DMA free:15908kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 307.575750] lowmem_reserve[]: 0 2580 2580 2580 [ 307.588164] Node 0 DMA32 free:531880kB min:36468kB low:45584kB high:54700kB active_anon:668588kB inactive_anon:2760kB active_file:51428kB inactive_file:46204kB unevictable:16400kB writepending:812kB present:3129332kB managed:2644892kB mlocked:16400kB kernel_stack:8608kB pagetables:8380kB bounce:0kB free_pcp:1284kB local_pcp:632kB free_cma:0kB [ 307.623336] lowmem_reserve[]: 0 0 0 0 [ 307.627797] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 307.654049] lowmem_reserve[]: 0 0 0 0 [ 307.658187] Node 1 Normal free:3785976kB min:53420kB low:66772kB high:80124kB active_anon:0kB inactive_anon:0kB active_file:144kB inactive_file:0kB unevictable:0kB writepending:4kB present:3932160kB managed:3870208kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 307.660136] audit: type=1804 audit(1565190664.639:153): pid=17302 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir525748567/syzkaller.UwknhR/220/file0/file0" dev="loop3" ino=335 res=1 [ 307.687452] lowmem_reserve[]: 0 0 0 0 [ 307.719524] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 307.734200] Node 0 DMA32: 656*4kB (UME) 7*8kB (UME) 17*16kB (UME) 443*32kB (UM) 1043*64kB (UM) 155*128kB (UME) 144*256kB (UM) 74*512kB (UME) 3*1024kB (ME) 1*2048kB (M) 85*4096kB (UM) = 531752kB [ 307.752916] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 307.764443] Node 1 Normal: 58*4kB (UME) 348*8kB (UE) 255*16kB (UM) 60*32kB (UME) 15*64kB (UM) 8*128kB (U) 8*256kB (UME) 3*512kB (UE) 3*1024kB (UME) 4*2048kB (ME) 918*4096kB (M) = 3785976kB [ 307.783049] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 307.793363] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 307.802130] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB 15:11:04 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") wait4(0x0, 0x0, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r1, 0x0, 0x0) 15:11:04 executing program 5: mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x80084504, &(0x7f0000ffcffc)) 15:11:04 executing program 1: r0 = syz_open_dev$evdev(0x0, 0x2, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) ioctl$EVIOCSCLOCKID(r0, 0x40084503, &(0x7f0000ffcffc)) 15:11:04 executing program 4: r0 = epoll_create1(0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) r2 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xc00) prctl$PR_SET_TSC(0x1a, 0x1) inotify_rm_watch(r1, r2) r3 = epoll_create1(0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000080)=0x2, 0x4) close(r0) write$FUSE_INIT(r1, &(0x7f00000000c0)={0x50, 0xfffffffffffffffe, 0x2, {0x7, 0x1f, 0x5, 0x400, 0xffff, 0x100000000, 0x3, 0x8}}, 0x50) syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x2, 0x3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000780)) 15:11:04 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000300)={0x0, 'syz1\x00', 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00y\b\x8c\xfa3\x90\xc8\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00K\xf7\xa42\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x11c) write$UHID_DESTROY(r0, &(0x7f0000000000), 0xfc90) write$UHID_CREATE(r0, &(0x7f00000004c0)={0x0, 'syz1\x00', 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x80\xff\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x11\x00', 'syz1\x00', 0x0, 0x2c2}, 0x11c) r1 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 15:11:04 executing program 3: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xfff, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r1, 0x1, 0x0, 0x369e5d84) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000100), 0x4) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280), 0x12) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file1\x00', 0x0) 15:11:04 executing program 1: r0 = syz_open_dev$evdev(0x0, 0x2, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) ioctl$EVIOCSCLOCKID(r0, 0x40084503, &(0x7f0000ffcffc)) [ 307.811464] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 307.820202] 24693 total pagecache pages [ 307.824190] 0 pages in swap cache [ 307.824196] Swap cache stats: add 0, delete 0, find 0/0 [ 307.824200] Free swap = 0kB [ 307.824204] Total swap = 0kB [ 307.824210] 1965979 pages RAM [ 307.824217] 0 pages HighMem/MovableOnly [ 307.824220] 333227 pages reserved [ 307.824223] 0 pages cma reserved 15:11:04 executing program 5: mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x80084504, &(0x7f0000ffcffc)) [ 307.862366] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 307.869570] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 307.900016] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 307.927859] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 307.955018] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 307.966615] syz-executor.0: vmalloc: allocation failure: 0 bytes, mode:0x14000c0(GFP_KERNEL), nodemask=(null) 15:11:04 executing program 1: r0 = syz_open_dev$evdev(0x0, 0x2, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) ioctl$EVIOCSCLOCKID(r0, 0x40084503, &(0x7f0000ffcffc)) 15:11:04 executing program 5: r0 = syz_open_dev$evdev(0x0, 0x2, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x80084504, &(0x7f0000ffcffc)) [ 307.984182] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 307.994457] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 308.030695] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 308.038370] CPU: 0 PID: 17329 Comm: syz-executor.0 Not tainted 4.14.137 #33 [ 308.045510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 308.055511] Call Trace: [ 308.058125] dump_stack+0x138/0x19c [ 308.061864] warn_alloc.cold+0x96/0x1af [ 308.065858] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 308.070798] ? lock_downgrade+0x6e0/0x6e0 [ 308.074973] ? avc_has_perm+0x2df/0x4b0 15:11:05 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x40000, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'team0\x00', 0x0}) connect$packet(r2, &(0x7f0000001ac0)={0x11, 0x4, r3, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) ioctl$SG_GET_ACCESS_COUNT(r2, 0x2289, &(0x7f0000000080)) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/attr/current\x00', 0x2, 0x0) syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x2, 0x3) ioctl$sock_SIOCDELDLCI(r2, 0x8981, &(0x7f00000000c0)={'gre0\x00', 0x9e21}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) 15:11:05 executing program 5: r0 = syz_open_dev$evdev(0x0, 0x2, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x80084504, &(0x7f0000ffcffc)) [ 308.078964] __vmalloc_node_range+0x3be/0x6a0 [ 308.083475] ? trace_hardirqs_on+0x10/0x10 [ 308.087724] vmalloc+0x46/0x50 [ 308.091025] ? sel_write_load+0x1a0/0x1050 [ 308.091036] sel_write_load+0x1a0/0x1050 [ 308.091047] ? save_trace+0x290/0x290 [ 308.091061] ? sel_read_bool+0x240/0x240 [ 308.091071] ? trace_hardirqs_on+0x10/0x10 [ 308.091081] ? save_trace+0x290/0x290 [ 308.091096] __vfs_write+0x105/0x6b0 [ 308.091105] ? __lock_is_held+0xb6/0x140 [ 308.091113] ? sel_read_bool+0x240/0x240 [ 308.091123] ? kernel_read+0x120/0x120 [ 308.091132] ? __lock_is_held+0xb6/0x140 [ 308.091145] ? check_preemption_disabled+0x3c/0x250 [ 308.091159] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 308.091172] ? rcu_read_lock_sched_held+0x110/0x130 [ 308.091184] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 308.141687] ? __sb_start_write+0x153/0x2f0 [ 308.141703] vfs_write+0x198/0x500 [ 308.141715] SyS_write+0xfd/0x230 [ 308.141726] ? SyS_read+0x230/0x230 [ 308.141737] ? do_syscall_64+0x53/0x640 [ 308.141748] ? SyS_read+0x230/0x230 [ 308.141759] do_syscall_64+0x1e8/0x640 [ 308.141767] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 308.141785] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 308.141793] RIP: 0033:0x459829 [ 308.141798] RSP: 002b:00007fdaa3659c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 308.141814] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459829 [ 308.165073] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 308.165080] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 308.165086] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdaa365a6d4 [ 308.165093] R13: 00000000004c9a25 R14: 00000000004e1060 R15: 00000000ffffffff [ 308.187093] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 308.253528] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 308.260434] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 308.267255] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 308.280395] Mem-Info: [ 308.284133] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz1 [ 308.293340] active_anon:168805 inactive_anon:687 isolated_anon:0 [ 308.293340] active_file:12889 inactive_file:11563 isolated_file:0 [ 308.293340] unevictable:4100 dirty:222 writeback:0 unstable:0 [ 308.293340] slab_reclaimable:12838 slab_unreclaimable:109083 [ 308.293340] mapped:59005 shmem:253 pagetables:2144 bounce:0 [ 308.293340] free:1081668 free_pcp:360 free_cma:0 [ 308.374928] Node 0 active_anon:671248kB inactive_anon:2748kB active_file:51412kB inactive_file:46252kB unevictable:16400kB isolated(anon):0kB isolated(file):0kB mapped:236020kB dirty:884kB writeback:0kB shmem:1012kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 200704kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 308.411901] Node 1 active_anon:0kB inactive_anon:0kB active_file:144kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 308.446940] Node 0 DMA free:15908kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 308.474049] lowmem_reserve[]: 0 2580 2580 2580 [ 308.478746] Node 0 DMA32 free:529172kB min:36468kB low:45584kB high:54700kB active_anon:671348kB inactive_anon:2748kB active_file:51412kB inactive_file:46252kB unevictable:16400kB writepending:884kB present:3129332kB managed:2644892kB mlocked:16400kB kernel_stack:8640kB pagetables:8280kB bounce:0kB free_pcp:1156kB local_pcp:576kB free_cma:0kB [ 308.512558] lowmem_reserve[]: 0 0 0 0 [ 308.517122] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 308.543340] lowmem_reserve[]: 0 0 0 0 [ 308.549202] Node 1 Normal free:3785976kB min:53420kB low:66772kB high:80124kB active_anon:0kB inactive_anon:0kB active_file:144kB inactive_file:0kB unevictable:0kB writepending:4kB present:3932160kB managed:3870208kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 308.582696] lowmem_reserve[]: 0 0 0 0 [ 308.589061] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 308.603747] Node 0 DMA32: 586*4kB (UME) 136*8kB (UME) 29*16kB (UME) 429*32kB (UM) 1043*64kB (UM) 155*128kB (UME) 144*256kB (UM) 74*512kB (UME) 3*1024kB (ME) 2*2048kB (M) 84*4096kB (UM) = 530200kB [ 308.621771] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 308.633765] audit: type=1804 audit(1565190665.619:154): pid=17355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir525748567/syzkaller.UwknhR/221/file0/file0" dev="loop3" ino=337 res=1 [ 308.637663] Node 1 Normal: 58*4kB (UME) 348*8kB (UE) 255*16kB (UM) 60*32kB (UME) 15*64kB (UM) 8*128kB (U) 8*256kB (UME) 3*512kB (UE) 3*1024kB (UME) 4*2048kB (ME) 918*4096kB (M) = 3785976kB [ 308.690155] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 308.699204] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 308.708031] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 308.717190] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 15:11:05 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") wait4(0x0, 0x0, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$selinux_load(0xffffffffffffffff, 0x0, 0x0) 15:11:05 executing program 5: r0 = syz_open_dev$evdev(0x0, 0x2, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x80084504, &(0x7f0000ffcffc)) 15:11:05 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) ioctl$EVIOCSCLOCKID(r0, 0x40084503, &(0x7f0000ffcffc)) 15:11:05 executing program 4: r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f0000000000)=[{}, {}, {}], 0x3, 0x81, &(0x7f0000000040)={0xffff}, 0x8) r1 = epoll_create1(0x0) close(r0) syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x4, 0x2) syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x2, 0x3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) 15:11:05 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f00000000c0)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000007602000020feffff7a0af0fff8ffffff79a4f0ff00000000b70600000018d1fe2d640500000000004504000000ffffffb504000000000000b704000010000020620700fe00000000850000002e000000b7000000000000009500000000000000"], &(0x7f0000000280)='\xc2\x06m\xd6D\xec\x01\xd7Rg\x7f\x9c-_\xd0\xe7\xfa=2\x00='}, 0x48) [ 308.726015] 24718 total pagecache pages [ 308.730420] 0 pages in swap cache [ 308.734029] Swap cache stats: add 0, delete 0, find 0/0 [ 308.739554] Free swap = 0kB [ 308.742774] Total swap = 0kB [ 308.745921] 1965979 pages RAM [ 308.749131] 0 pages HighMem/MovableOnly [ 308.753300] 333227 pages reserved [ 308.756895] 0 pages cma reserved 15:11:05 executing program 5: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x80084504, &(0x7f0000ffcffc)) 15:11:05 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") wait4(0x0, 0x0, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$selinux_load(0xffffffffffffffff, 0x0, 0x0) 15:11:05 executing program 2: request_key(&(0x7f0000000680)='keyring\x00', &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0) 15:11:05 executing program 3: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000240)=0x2, 0x4) syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xfff, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r2, 0x4, 0x0, 0x369e5d84) recvfrom$llc(r2, &(0x7f0000000400)=""/251, 0xfb, 0x40000000, &(0x7f00000002c0)={0x1a, 0x0, 0xc5d1, 0xfffffffffffffffd, 0x2, 0x3ff, @local}, 0x10) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000100)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280), 0x12) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = creat(&(0x7f00000003c0)='./file1\x00', 0x0) fsetxattr$trusted_overlay_upper(r3, &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x58, 0x2) 15:11:05 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) ioctl$EVIOCSCLOCKID(r0, 0x40084503, &(0x7f0000ffcffc)) 15:11:05 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") wait4(0x0, 0x0, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$selinux_load(0xffffffffffffffff, 0x0, 0x0) 15:11:05 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") wait4(0x0, 0x0, 0x0, 0x0) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r1, 0x0, 0x0) 15:11:06 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) ioctl$EVIOCSCLOCKID(r0, 0x40084503, &(0x7f0000ffcffc)) [ 308.982855] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF 15:11:06 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x2, @broadcast}, 0x10) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x100000000000006) sendto$inet(r0, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)='>', 0x1}], 0x1}, 0x81) 15:11:06 executing program 5: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x80084504, &(0x7f0000ffcffc)) [ 309.027391] syz-executor.0: vmalloc: allocation failure: 0 bytes, mode:0x14000c0(GFP_KERNEL), nodemask=(null) [ 309.035973] FAT-fs (loop3): Filesystem has been set read-only [ 309.081312] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 309.087102] CPU: 1 PID: 17391 Comm: syz-executor.0 Not tainted 4.14.137 #33 [ 309.094211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 309.103579] Call Trace: [ 309.103602] dump_stack+0x138/0x19c [ 309.103617] warn_alloc.cold+0x96/0x1af [ 309.103629] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 309.103642] ? lock_downgrade+0x6e0/0x6e0 [ 309.103660] ? avc_has_perm+0x2df/0x4b0 [ 309.103675] __vmalloc_node_range+0x3be/0x6a0 [ 309.131540] ? trace_hardirqs_on+0x10/0x10 [ 309.135799] vmalloc+0x46/0x50 [ 309.135817] ? sel_write_load+0x1a0/0x1050 [ 309.135830] sel_write_load+0x1a0/0x1050 [ 309.143269] ? save_trace+0x290/0x290 [ 309.143289] ? sel_read_bool+0x240/0x240 [ 309.143298] ? trace_hardirqs_on+0x10/0x10 [ 309.143308] ? save_trace+0x290/0x290 [ 309.143324] __vfs_write+0x105/0x6b0 [ 309.143335] ? __lock_is_held+0xb6/0x140 [ 309.171406] ? sel_read_bool+0x240/0x240 [ 309.175604] ? kernel_read+0x120/0x120 [ 309.179510] ? __lock_is_held+0xb6/0x140 [ 309.183595] ? check_preemption_disabled+0x3c/0x250 [ 309.190403] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 309.196328] ? rcu_read_lock_sched_held+0x110/0x130 [ 309.196341] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 309.196351] ? __sb_start_write+0x153/0x2f0 [ 309.196365] vfs_write+0x198/0x500 [ 309.196378] SyS_write+0xfd/0x230 [ 309.206391] ? SyS_read+0x230/0x230 [ 309.206405] ? do_syscall_64+0x53/0x640 [ 309.206415] ? SyS_read+0x230/0x230 [ 309.206428] do_syscall_64+0x1e8/0x640 [ 309.233237] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 309.238110] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 309.243312] RIP: 0033:0x459829 [ 309.246521] RSP: 002b:00007fdaa3659c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 309.254607] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459829 [ 309.261903] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 15:11:06 executing program 4: r0 = epoll_create1(0x7fffe) epoll_create1(0x0) close(r0) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x7fff, 0xa0041) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000080)=@gcm_128={{0x303}, "d98c619e6aa37fce", "4a687b9941e1ed23640f6da038b3743c", "fc2b2718", "8d477b8fa1090778"}, 0xfe3a) syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x2, 0x3) mount$9p_rdma(&(0x7f0000000040)='127.0.0.1\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x10084, &(0x7f0000000140)={'trans=rdma,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@sq={'sq', 0x3d, 0x5}}, {@common=@mmap='mmap'}, {@timeout={'timeout', 0x3d, 0xf828}}, {@common=@cachetag={'cachetag', 0x3d, '/dev/vcs#\x00'}}, {@timeout={'timeout', 0x3d, 0x3f}}, {@rq={'rq', 0x3d, 0x7ae}}, {@common=@aname={'aname', 0x3d, '/dev/midi#\x00'}}], [{@dont_appraise='dont_appraise'}, {@obj_role={'obj_role', 0x3d, '/dev/vcs#\x00'}}, {@seclabel='seclabel'}, {@appraise='appraise'}, {@subj_user={'subj_user', 0x3d, 'wlan0-self)-vmnet0{@'}}]}}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000002c0)={0xfffffffffffffffd}) [ 309.262857] audit: type=1804 audit(1565190666.069:155): pid=17407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir525748567/syzkaller.UwknhR/222/file0/file0" dev="loop3" ino=339 res=1 [ 309.269286] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 309.269293] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdaa365a6d4 [ 309.269298] R13: 00000000004c9a25 R14: 00000000004e1060 R15: 00000000ffffffff [ 309.309702] Mem-Info: [ 309.321106] active_anon:169524 inactive_anon:681 isolated_anon:0 15:11:06 executing program 3: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)}], 0x0, 0x0) r0 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xfff, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x401) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r2, 0x1, 0x0, 0x369e5d84) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280), 0x12) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file1\x00', 0x0) 15:11:06 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x8000000000001, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) write$binfmt_aout(r0, &(0x7f0000000f40)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000ec686ef9d0713b96af18afae3d588f8016f9ef9f3f592c1f4181cab9671c7c943f94c82232e275471c1526ec9cee3d2be8616a8030e811a64df00548b06057a439301037320a831aa35a24a07b1b08bd72efe0b7f5cbe0619379539eda542b7b1ef2600f3277ae1300"/181], 0xb5) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000080)={0x12}) 15:11:06 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x40084503, &(0x7f0000ffcffc)) [ 309.321106] active_file:12885 inactive_file:11570 isolated_file:0 [ 309.321106] unevictable:4100 dirty:234 writeback:1 unstable:0 [ 309.321106] slab_reclaimable:12823 slab_unreclaimable:109417 [ 309.321106] mapped:58992 shmem:258 pagetables:2162 bounce:0 [ 309.321106] free:1080516 free_pcp:215 free_cma:0 15:11:06 executing program 2: prctl$PR_SET_TIMERSLACK(0x1d, 0xfffffffffffff5c3) prctl$PR_GET_FP_MODE(0x1e) [ 309.393481] Node 0 active_anon:678328kB inactive_anon:2760kB active_file:51416kB inactive_file:46304kB unevictable:16400kB isolated(anon):0kB isolated(file):0kB mapped:236084kB dirty:960kB writeback:4kB shmem:1024kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 204800kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no 15:11:06 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1840}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="000129bd7000fcdbdf250e000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040) ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f0000000180)={0x4, 0x2f, 0x7, 0x4, 0x1ec, 0x0, 0x4, 0xfa, 0x1}) syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x2, 0x3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) [ 309.423672] Node 1 active_anon:0kB inactive_anon:0kB active_file:144kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 309.450374] Node 0 DMA free:15908kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 309.477042] lowmem_reserve[]: 0 2580 2580 2580 15:11:06 executing program 5: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x80084504, &(0x7f0000ffcffc)) 15:11:06 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x40084503, &(0x7f0000ffcffc)) [ 309.481997] Node 0 DMA32 free:523384kB min:36468kB low:45584kB high:54700kB active_anon:676328kB inactive_anon:2744kB active_file:51396kB inactive_file:46300kB unevictable:16400kB writepending:964kB present:3129332kB managed:2644892kB mlocked:16400kB kernel_stack:8832kB pagetables:8628kB bounce:0kB free_pcp:1092kB local_pcp:376kB free_cma:0kB [ 309.582544] lowmem_reserve[]: 0 0 0 0 [ 309.589031] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 309.623416] lowmem_reserve[]: 0 0 0 0 [ 309.627448] Node 1 Normal free:3785976kB min:53420kB low:66772kB high:80124kB active_anon:0kB inactive_anon:0kB active_file:144kB inactive_file:0kB unevictable:0kB writepending:4kB present:3932160kB managed:3870208kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 309.660710] FAT-fs (loop3): bogus number of reserved sectors [ 309.669228] FAT-fs (loop3): Can't find a valid FAT filesystem [ 309.703018] lowmem_reserve[]: 0 0 0 0 [ 309.706900] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 309.731625] Node 0 DMA32: 458*4kB (UME) 3*8kB (E) 2*16kB (E) 348*32kB (UM) 1043*64kB (UM) 165*128kB (UME) 144*256kB (UM) 74*512kB (UME) 3*1024kB (ME) 2*2048kB (M) 83*4096kB (UM) = 522784kB [ 309.767167] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 309.783804] FAT-fs (loop3): bogus number of reserved sectors [ 309.789896] FAT-fs (loop3): Can't find a valid FAT filesystem [ 309.793517] Node 1 Normal: 58*4kB (UME) 348*8kB (UE) 255*16kB (UM) 60*32kB (UME) 15*64kB (UM) 8*128kB (U) 8*256kB (UME) 3*512kB (UE) 3*1024kB (UME) 4*2048kB (ME) 918*4096kB (M) = 3785976kB [ 309.815139] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 309.825330] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 309.837565] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 309.846362] audit: type=1804 audit(1565190666.829:156): pid=17440 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir525748567/syzkaller.UwknhR/223/file0/file0" dev="sda1" ino=17137 res=1 [ 309.880758] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 309.894390] 24713 total pagecache pages [ 309.898513] 0 pages in swap cache [ 309.904808] Swap cache stats: add 0, delete 0, find 0/0 15:11:06 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") wait4(0x0, 0x0, 0x0, 0x0) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r1, 0x0, 0x0) 15:11:06 executing program 2: socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 15:11:06 executing program 5: syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x80084504, &(0x7f0000ffcffc)) 15:11:06 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x40084503, &(0x7f0000ffcffc)) 15:11:06 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000340)=0xffffffff80000000, 0x4) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x40a100, 0x0) ioctl$RTC_PLL_SET(r1, 0x40207012, &(0x7f0000000040)={0x5, 0x3, 0x5, 0x20, 0x6, 0x100000000, 0x80000000}) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) close(r2) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000080)=0x6) syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x2, 0x3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000780)) 15:11:06 executing program 3: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xfff, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'erspan0\x00', 0x1200}) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) r4 = epoll_create(0x1) epoll_pwait(r4, &(0x7f0000000040)=[{}], 0x1, 0x7f, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000000)) shutdown(r3, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) fallocate(r2, 0x1, 0x0, 0x369e5d84) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280), 0x12) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file1\x00', 0x0) [ 309.922161] Free swap = 0kB [ 309.925574] Total swap = 0kB [ 309.934896] 1965979 pages RAM [ 309.938163] 0 pages HighMem/MovableOnly [ 309.942461] 333227 pages reserved [ 309.946001] 0 pages cma reserved 15:11:07 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') sendfile(r0, r1, &(0x7f0000000240)=0x4201, 0x4000000000dc) 15:11:07 executing program 1: syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x40084503, &(0x7f0000ffcffc)) [ 310.008270] syz-executor.0: vmalloc: allocation failure: 0 bytes, mode:0x14000c0(GFP_KERNEL), nodemask=(null) [ 310.033209] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 310.048829] CPU: 1 PID: 17461 Comm: syz-executor.0 Not tainted 4.14.137 #33 [ 310.056069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 310.065615] Call Trace: [ 310.068444] dump_stack+0x138/0x19c [ 310.072106] warn_alloc.cold+0x96/0x1af [ 310.076196] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 310.081081] ? lock_downgrade+0x6e0/0x6e0 [ 310.085266] ? avc_has_perm+0x2df/0x4b0 [ 310.089349] __vmalloc_node_range+0x3be/0x6a0 [ 310.093951] ? trace_hardirqs_on+0x10/0x10 [ 310.098215] vmalloc+0x46/0x50 [ 310.101434] ? sel_write_load+0x1a0/0x1050 15:11:07 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x161, 0x11, 0x10}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 310.105691] sel_write_load+0x1a0/0x1050 [ 310.109771] ? save_trace+0x290/0x290 [ 310.113606] ? sel_read_bool+0x240/0x240 [ 310.117685] ? trace_hardirqs_on+0x10/0x10 [ 310.121945] ? save_trace+0x290/0x290 [ 310.125948] __vfs_write+0x105/0x6b0 [ 310.129700] ? __lock_is_held+0xb6/0x140 [ 310.133908] ? sel_read_bool+0x240/0x240 [ 310.137990] ? kernel_read+0x120/0x120 [ 310.141901] ? __lock_is_held+0xb6/0x140 [ 310.146011] ? check_preemption_disabled+0x3c/0x250 [ 310.151410] ? rcu_lockdep_current_cpu_online+0xf2/0x140 15:11:07 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={'\x00\xacs\x00\x00\x00\x00\x00\xec\x97?\x82\x0f|@\x00', 0xc201}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0}, 0x28) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x8955, &(0x7f0000000000)=0x2) [ 310.157140] ? rcu_read_lock_sched_held+0x110/0x130 [ 310.162178] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 310.166953] ? __sb_start_write+0x153/0x2f0 [ 310.172001] vfs_write+0x198/0x500 [ 310.175675] SyS_write+0xfd/0x230 [ 310.179152] ? SyS_read+0x230/0x230 [ 310.182915] ? do_syscall_64+0x53/0x640 [ 310.186923] ? SyS_read+0x230/0x230 [ 310.190595] do_syscall_64+0x1e8/0x640 [ 310.194588] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 310.199665] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 310.204972] RIP: 0033:0x459829 15:11:07 executing program 5: syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x80084504, &(0x7f0000ffcffc)) [ 310.204978] RSP: 002b:00007fdaa3659c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 310.204990] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459829 [ 310.204996] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 310.205002] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 310.205008] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdaa365a6d4 [ 310.205015] R13: 00000000004c9a25 R14: 00000000004e1060 R15: 00000000ffffffff 15:11:07 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") wait4(0x0, 0x0, 0x0, 0x0) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r1, 0x0, 0x0) 15:11:07 executing program 1: syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x40084503, &(0x7f0000ffcffc)) 15:11:07 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x2, 0x3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={r2, 0xc0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=0x5, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x6, 0x5}, 0x0, 0x0, &(0x7f00000000c0)={0x4, 0x3, 0x1, 0x7}, &(0x7f0000000100)=0x10001, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x9}}, 0x10) syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000000)={0x8c, 0x1, 0x4, 0x2, 0xfffffffffffffffc, 0x6}) [ 310.371811] syz-executor.0: vmalloc: allocation failure: 0 bytes, mode:0x14000c0(GFP_KERNEL), nodemask=(null) 15:11:07 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000400)="390000001100090468fe0720000000000700ff3f03000000450001070000001419001a001500000007000054369e00"/57, 0x39}], 0x1) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 15:11:07 executing program 5: syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x80084504, &(0x7f0000ffcffc)) [ 310.418900] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 310.478195] CPU: 1 PID: 17488 Comm: syz-executor.0 Not tainted 4.14.137 #33 [ 310.485541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 310.495395] Call Trace: [ 310.498041] dump_stack+0x138/0x19c [ 310.501799] warn_alloc.cold+0x96/0x1af [ 310.506001] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 310.511593] ? lock_downgrade+0x6e0/0x6e0 [ 310.515859] ? avc_has_perm+0x2df/0x4b0 [ 310.519866] __vmalloc_node_range+0x3be/0x6a0 [ 310.525088] ? trace_hardirqs_on+0x10/0x10 [ 310.529345] vmalloc+0x46/0x50 [ 310.532566] ? sel_write_load+0x1a0/0x1050 [ 310.536825] sel_write_load+0x1a0/0x1050 [ 310.540909] ? save_trace+0x290/0x290 [ 310.544771] ? sel_read_bool+0x240/0x240 [ 310.550296] ? trace_hardirqs_on+0x10/0x10 [ 310.554652] ? save_trace+0x290/0x290 [ 310.558464] __vfs_write+0x105/0x6b0 [ 310.562176] ? __lock_is_held+0xb6/0x140 [ 310.576230] ? sel_read_bool+0x240/0x240 [ 310.589214] ? kernel_read+0x120/0x120 [ 310.593195] ? __lock_is_held+0xb6/0x140 [ 310.597381] ? check_preemption_disabled+0x3c/0x250 [ 310.603032] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 310.608622] ? rcu_read_lock_sched_held+0x110/0x130 [ 310.613812] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 310.618674] ? __sb_start_write+0x153/0x2f0 [ 310.622993] vfs_write+0x198/0x500 [ 310.626523] SyS_write+0xfd/0x230 [ 310.629985] ? SyS_read+0x230/0x230 [ 310.633658] ? do_syscall_64+0x53/0x640 [ 310.637631] ? SyS_read+0x230/0x230 [ 310.642221] do_syscall_64+0x1e8/0x640 [ 310.646139] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 310.651161] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 310.657015] RIP: 0033:0x459829 [ 310.660200] RSP: 002b:00007fdaa3659c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 310.668571] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459829 [ 310.675867] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 310.685469] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 310.692842] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdaa365a6d4 [ 310.700458] R13: 00000000004c9a25 R14: 00000000004e1060 R15: 00000000ffffffff [ 310.712324] warn_alloc_show_mem: 1 callbacks suppressed [ 310.712328] Mem-Info: 15:11:07 executing program 1: syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x40084503, &(0x7f0000ffcffc)) [ 310.724515] audit: type=1804 audit(1565190667.709:157): pid=17471 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir525748567/syzkaller.UwknhR/224/file0/file0" dev="loop3" ino=341 res=1 [ 310.755515] active_anon:169678 inactive_anon:692 isolated_anon:0 [ 310.755515] active_file:12894 inactive_file:11589 isolated_file:0 [ 310.755515] unevictable:4100 dirty:269 writeback:0 unstable:0 [ 310.755515] slab_reclaimable:12789 slab_unreclaimable:108929 [ 310.755515] mapped:59015 shmem:259 pagetables:2192 bounce:0 [ 310.755515] free:1080982 free_pcp:224 free_cma:0 15:11:07 executing program 3: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xfff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000100)={0x0, 0x200, 0x30, 0x3, 0x2}, &(0x7f00000001c0)=0x18) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000200)={0x8, 0x8, 0x202b3, 0x1, r1}, &(0x7f0000000240)=0xffffffad) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280), 0x12) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0xfffffffffffffffe) 15:11:07 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer2\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer2\x00', 0x0, 0x0) 15:11:07 executing program 5: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x80084504, 0x0) [ 310.845105] Node 0 active_anon:676544kB inactive_anon:2768kB active_file:51432kB inactive_file:46356kB unevictable:16400kB isolated(anon):0kB isolated(file):0kB mapped:236060kB dirty:1072kB writeback:0kB shmem:1036kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 208896kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no 15:11:07 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x802000}) close(r0) syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x2, 0x3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) [ 310.886496] Node 1 active_anon:0kB inactive_anon:0kB active_file:144kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 310.912761] Node 0 DMA free:15908kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 15:11:07 executing program 2: mknod(&(0x7f00000007c0)='./file0\x00', 0x200ff4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000080)=[&(0x7f0000000540)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9.%\xd1\xec\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa4\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4B\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\x95\xdb\x052\xbf\xa8#\x83\a\t\xcb\x04\x1f\x1e8\xe2\xa11\x8f\xbe\xe4o\xaf\xe6\xb2z\x11\xa9\xae\xaa\xc2Wi\xa8\x9aQ7\xea\x1b\x02\xf0\x82~=\x017\xa8\xaaF\xe6\x80t\xd8\xc7\xff\x9f\aT\xc4\x94\x9a\xe9\ty\x16)\x9b>\xca;\xf4\x94\x8a\x9f{a\xe0\x86\xf0\xffp\xfcXs\xf1F\x9a\xab\xf4\xf0\x80\x1e\x9cA\x95X\xf9\x10@\xa4\x89gp;\t\b\xa7\x87n\xc7\x93\x9e\x80!R:N\x82\x00'/597, &(0x7f0000001480)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac', &(0x7f0000001040)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac', &(0x7f0000000100)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xe1b|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5\n\x9f\xeb\xebt\xc3l\xf2\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xf9H\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]\x80\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1d\xa8\x9f\xcaxccU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xd2@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06j\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac\x00\x00\x00\x00\x00\x00', &(0x7f0000000340)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9\xd6\xde\x93\xc4\xb9G\xf2\xef\xc3\x0f~\x1c\xddBJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x0fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa4X\xc2\xd5QY=8\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$i\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb2\x91\xa1\xd4\xf36\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xb4\t\xe5PJ\xdb\xb7X\x13e\x8fM\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\x031\x00\x00\x00\x00\x00\x00\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3h\xdbx\x85\xb7\xa3U[\xd0\x9el\r$\xbf9\"', &(0x7f0000001680)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<\xbaC\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9dB_A\xec>k*\x13\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac', 0x0]) 15:11:07 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) ioctl$EVIOCSCLOCKID(r0, 0x40084503, 0x0) [ 310.942933] lowmem_reserve[]: 0 2580 2580 2580 [ 310.952137] Node 0 DMA32 free:523992kB min:36468kB low:45584kB high:54700kB active_anon:676560kB inactive_anon:2768kB active_file:51432kB inactive_file:46356kB unevictable:16400kB writepending:1072kB present:3129332kB managed:2644892kB mlocked:16400kB kernel_stack:8768kB pagetables:8620kB bounce:0kB free_pcp:1072kB local_pcp:448kB free_cma:0kB [ 310.985816] lowmem_reserve[]: 0 0 0 0 [ 310.989687] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 311.015282] lowmem_reserve[]: 0 0 0 0 [ 311.019185] Node 1 Normal free:3785976kB min:53420kB low:66772kB high:80124kB active_anon:0kB inactive_anon:0kB active_file:144kB inactive_file:0kB unevictable:0kB writepending:4kB present:3932160kB managed:3870208kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 311.047332] lowmem_reserve[]: 0 0 0 0 [ 311.052963] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 311.067037] Node 0 DMA32: 524*4kB (UME) 222*8kB (UME) 13*16kB (UE) 304*32kB (UM) 1043*64kB (UM) 175*128kB (UME) 144*256kB (UM) 74*512kB (UME) 3*1024kB (ME) 2*2048kB (M) 83*4096kB (UM) = 524848kB [ 311.120273] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 311.167832] Node 1 Normal: 58*4kB (UME) 348*8kB (UE) 255*16kB (UM) 60*32kB (UME) 15*64kB (UM) 8*128kB (U) 8*256kB (UME) 3*512kB (UE) 3*1024kB (UME) 4*2048kB (ME) 918*4096kB (M) = 3785976kB [ 311.219802] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 311.230699] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 311.239904] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 311.250988] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 311.260532] 24731 total pagecache pages [ 311.265206] 0 pages in swap cache [ 311.268870] Swap cache stats: add 0, delete 0, find 0/0 [ 311.297096] Free swap = 0kB [ 311.313109] audit: type=1804 audit(1565190668.299:158): pid=17542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir525748567/syzkaller.UwknhR/225/file0/file0" dev="loop3" ino=343 res=1 [ 311.315334] Total swap = 0kB 15:11:08 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r1, 0x0, 0x0) 15:11:08 executing program 5: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x80084504, 0x0) 15:11:08 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0xa4800, 0x0) close(r2) syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x2, 0x3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) 15:11:08 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) ioctl$EVIOCSCLOCKID(r0, 0x40084503, 0x0) 15:11:08 executing program 2: mknod(&(0x7f00000007c0)='./file0\x00', 0x200ff4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000080)=[&(0x7f0000000540)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9.%\xd1\xec\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa4\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4B\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\x95\xdb\x052\xbf\xa8#\x83\a\t\xcb\x04\x1f\x1e8\xe2\xa11\x8f\xbe\xe4o\xaf\xe6\xb2z\x11\xa9\xae\xaa\xc2Wi\xa8\x9aQ7\xea\x1b\x02\xf0\x82~=\x017\xa8\xaaF\xe6\x80t\xd8\xc7\xff\x9f\aT\xc4\x94\x9a\xe9\ty\x16)\x9b>\xca;\xf4\x94\x8a\x9f{a\xe0\x86\xf0\xffp\xfcXs\xf1F\x9a\xab\xf4\xf0\x80\x1e\x9cA\x95X\xf9\x10@\xa4\x89gp;\t\b\xa7\x87n\xc7\x93\x9e\x80!R:N\x82\x00'/597, &(0x7f0000001480)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac', &(0x7f0000001040)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac', &(0x7f0000000100)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xe1b|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5\n\x9f\xeb\xebt\xc3l\xf2\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xf9H\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]\x80\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1d\xa8\x9f\xcaxccU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xd2@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06j\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac\x00\x00\x00\x00\x00\x00', &(0x7f0000000340)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9\xd6\xde\x93\xc4\xb9G\xf2\xef\xc3\x0f~\x1c\xddBJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x0fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa4X\xc2\xd5QY=8\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$i\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb2\x91\xa1\xd4\xf36\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xb4\t\xe5PJ\xdb\xb7X\x13e\x8fM\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\x031\x00\x00\x00\x00\x00\x00\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3h\xdbx\x85\xb7\xa3U[\xd0\x9el\r$\xbf9\"', &(0x7f0000001680)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<\xbaC\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9dB_A\xec>k*\x13\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac']) 15:11:08 executing program 3: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xfff, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x4, 0x3, 0x8000}, 0x4) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r2, 0x1, 0x0, 0x369e5d84) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280), 0x12) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200)={0xffffffffffffffff}, 0x117, 0x7}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f00000001c0), r3, 0x0, 0x2, 0x4}}, 0x20) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r4, r2, 0x80000) creat(&(0x7f00000003c0)='./file1\x00', 0x0) [ 311.354879] audit: type=1804 audit(1565190668.339:159): pid=17545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir525748567/syzkaller.UwknhR/225/file0/file0" dev="loop3" ino=343 res=1 [ 311.363033] 1965979 pages RAM [ 311.386885] 0 pages HighMem/MovableOnly [ 311.391395] 333227 pages reserved [ 311.394977] 0 pages cma reserved [ 311.461319] syz-executor.0: vmalloc: allocation failure: 0 bytes, mode:0x14000c0(GFP_KERNEL), nodemask=(null) [ 311.494216] syz-executor.0 cpuset=syz0 mems_allowed=0-1 15:11:08 executing program 2: [ 311.505227] CPU: 1 PID: 17559 Comm: syz-executor.0 Not tainted 4.14.137 #33 [ 311.512479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 311.525072] Call Trace: [ 311.527685] dump_stack+0x138/0x19c [ 311.531427] warn_alloc.cold+0x96/0x1af [ 311.535687] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 311.540663] ? lock_downgrade+0x6e0/0x6e0 [ 311.544927] ? avc_has_perm+0x2df/0x4b0 [ 311.549114] __vmalloc_node_range+0x3be/0x6a0 [ 311.553668] ? trace_hardirqs_on+0x10/0x10 [ 311.558397] vmalloc+0x46/0x50 15:11:08 executing program 2: 15:11:08 executing program 2: r0 = socket(0x10000000002, 0x2, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1023, 0x0, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1023, &(0x7f0000000000), 0x12b) [ 311.561888] ? sel_write_load+0x1a0/0x1050 [ 311.566265] sel_write_load+0x1a0/0x1050 [ 311.571321] ? save_trace+0x290/0x290 [ 311.575522] ? sel_read_bool+0x240/0x240 [ 311.579774] ? trace_hardirqs_on+0x10/0x10 [ 311.584056] ? save_trace+0x290/0x290 [ 311.587970] __vfs_write+0x105/0x6b0 [ 311.591710] ? __lock_is_held+0xb6/0x140 [ 311.596137] ? sel_read_bool+0x240/0x240 [ 311.600267] ? kernel_read+0x120/0x120 [ 311.604268] ? __lock_is_held+0xb6/0x140 15:11:08 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000280)={0x7a, 0x0, [0x3a, 0x1], [0xc1]}) [ 311.608441] ? check_preemption_disabled+0x3c/0x250 [ 311.613596] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 311.619196] ? rcu_read_lock_sched_held+0x110/0x130 [ 311.624417] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 311.629205] ? __sb_start_write+0x153/0x2f0 [ 311.633668] vfs_write+0x198/0x500 [ 311.637253] SyS_write+0xfd/0x230 [ 311.640774] ? SyS_read+0x230/0x230 [ 311.644529] ? do_syscall_64+0x53/0x640 [ 311.649553] ? SyS_read+0x230/0x230 [ 311.653203] do_syscall_64+0x1e8/0x640 [ 311.657146] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 311.662015] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 311.667234] RIP: 0033:0x459829 [ 311.670530] RSP: 002b:00007fdaa3659c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 311.670543] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459829 [ 311.670548] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 311.670553] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 311.670558] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdaa365a6d4 15:11:08 executing program 5: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x80084504, 0x0) 15:11:08 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) ioctl$EVIOCSCLOCKID(r0, 0x40084503, 0x0) [ 311.670563] R13: 00000000004c9a25 R14: 00000000004e1060 R15: 00000000ffffffff [ 311.776510] Mem-Info: [ 311.779491] active_anon:170840 inactive_anon:693 isolated_anon:0 [ 311.779491] active_file:12892 inactive_file:11602 isolated_file:0 [ 311.779491] unevictable:4100 dirty:275 writeback:0 unstable:0 [ 311.779491] slab_reclaimable:12787 slab_unreclaimable:108996 [ 311.779491] mapped:59042 shmem:256 pagetables:2227 bounce:0 [ 311.779491] free:1079581 free_pcp:221 free_cma:0 [ 311.848905] Node 0 active_anon:679076kB inactive_anon:2772kB active_file:51424kB inactive_file:46408kB unevictable:16400kB isolated(anon):0kB isolated(file):0kB mapped:236068kB dirty:1096kB writeback:0kB shmem:1024kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 198656kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 311.890583] Node 1 active_anon:0kB inactive_anon:0kB active_file:144kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 311.927895] Node 0 DMA free:15908kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 311.969918] lowmem_reserve[]: 0 2580 2580 2580 [ 311.975711] Node 0 DMA32 free:526648kB min:36468kB low:45584kB high:54700kB active_anon:674856kB inactive_anon:2772kB active_file:51424kB inactive_file:46408kB unevictable:16400kB writepending:1096kB present:3129332kB managed:2644892kB mlocked:16400kB kernel_stack:8704kB pagetables:8464kB bounce:0kB free_pcp:1228kB local_pcp:616kB free_cma:0kB [ 312.007070] lowmem_reserve[]: 0 0 0 0 [ 312.018173] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 312.048693] lowmem_reserve[]: 0 0 0 0 [ 312.058545] Node 1 Normal free:3785976kB min:53420kB low:66772kB high:80124kB active_anon:0kB inactive_anon:0kB active_file:144kB inactive_file:0kB unevictable:0kB writepending:4kB present:3932160kB managed:3870208kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 312.123131] lowmem_reserve[]: 0 0 0 0 [ 312.127156] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 312.145059] Node 0 DMA32: 628*4kB (UME) 41*8kB (UME) 69*16kB (UME) 277*32kB (UM) 1043*64kB (UM) 175*128kB (UME) 144*256kB (UM) 74*512kB (UME) 3*1024kB (ME) 3*2048kB (M) 83*4096kB (UM) = 525896kB [ 312.164292] audit: type=1804 audit(1565190669.129:160): pid=17579 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir525748567/syzkaller.UwknhR/226/file0/file0" dev="loop3" ino=344 res=1 [ 312.192814] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 312.204608] Node 1 Normal: 58*4kB (UME) 348*8kB (UE) 255*16kB (UM) 60*32kB (UME) 15*64kB (UM) 8*128kB (U) 8*256kB (UME) 3*512kB (UE) 3*1024kB (UME) 4*2048kB (ME) 918*4096kB (M) = 3785976kB [ 312.223192] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 312.232165] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 312.241138] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 312.250215] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 312.258914] 24754 total pagecache pages [ 312.262987] 0 pages in swap cache [ 312.266448] Swap cache stats: add 0, delete 0, find 0/0 15:11:09 executing program 1: r0 = socket$inet(0x10, 0x3, 0x20000000006) sendmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="24000000150007031dfffd946fa2830002200a0009000f00741d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 15:11:09 executing program 2: r0 = socket(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x9d, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000000)="1c0000001a009b8a14e5f4070009042400000000ff0000e5816ae200", 0x1c) 15:11:09 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x10200) r2 = syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x2, 0x3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) ioctl$KDDELIO(r2, 0x4b35, 0x8) 15:11:09 executing program 5: 15:11:09 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, 0x0, 0x0) 15:11:09 executing program 3: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xfff, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r1, 0x1, 0x0, 0x369e5d84) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280), 0x12) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file1\x00', 0x0) [ 312.271894] Free swap = 0kB [ 312.274924] Total swap = 0kB [ 312.277957] 1965979 pages RAM [ 312.281110] 0 pages HighMem/MovableOnly [ 312.285091] 333227 pages reserved [ 312.288814] 0 pages cma reserved 15:11:09 executing program 5: [ 312.346905] syz-executor.0: vmalloc: allocation failure: 0 bytes, mode:0x14000c0(GFP_KERNEL), nodemask=(null) [ 312.367731] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 312.393974] CPU: 1 PID: 17606 Comm: syz-executor.0 Not tainted 4.14.137 #33 [ 312.401118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 312.410486] Call Trace: [ 312.413639] dump_stack+0x138/0x19c [ 312.417385] warn_alloc.cold+0x96/0x1af [ 312.421385] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 312.426950] ? lock_downgrade+0x6e0/0x6e0 [ 312.432062] ? avc_has_perm+0x2df/0x4b0 [ 312.436126] __vmalloc_node_range+0x3be/0x6a0 [ 312.440673] ? trace_hardirqs_on+0x10/0x10 [ 312.445019] vmalloc+0x46/0x50 [ 312.448422] ? sel_write_load+0x1a0/0x1050 [ 312.453387] sel_write_load+0x1a0/0x1050 [ 312.457517] ? save_trace+0x290/0x290 [ 312.461382] ? sel_read_bool+0x240/0x240 [ 312.465466] ? trace_hardirqs_on+0x10/0x10 [ 312.469804] ? save_trace+0x290/0x290 [ 312.473634] __vfs_write+0x105/0x6b0 [ 312.477457] ? __lock_is_held+0xb6/0x140 [ 312.481635] ? sel_read_bool+0x240/0x240 [ 312.485720] ? kernel_read+0x120/0x120 [ 312.489673] ? __lock_is_held+0xb6/0x140 [ 312.494121] ? check_preemption_disabled+0x3c/0x250 [ 312.499252] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 312.504742] ? rcu_read_lock_sched_held+0x110/0x130 [ 312.509965] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 312.514831] ? __sb_start_write+0x153/0x2f0 [ 312.519185] vfs_write+0x198/0x500 [ 312.522838] SyS_write+0xfd/0x230 [ 312.526313] ? SyS_read+0x230/0x230 [ 312.529957] ? do_syscall_64+0x53/0x640 [ 312.533962] ? SyS_read+0x230/0x230 [ 312.537667] do_syscall_64+0x1e8/0x640 [ 312.541578] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 312.547865] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 312.553081] RIP: 0033:0x459829 [ 312.556278] RSP: 002b:00007fdaa3659c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 312.564181] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459829 [ 312.571555] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 312.578856] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 15:11:09 executing program 1: [ 312.586135] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdaa365a6d4 [ 312.604904] R13: 00000000004c9a25 R14: 00000000004e1060 R15: 00000000ffffffff 15:11:09 executing program 1: 15:11:09 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x2, 0x3) connect$rds(r2, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) ioctl$KVM_GET_CLOCK(r2, 0x8030ae7c, &(0x7f0000000000)) 15:11:09 executing program 5: 15:11:09 executing program 1: 15:11:09 executing program 1: [ 312.927895] Mem-Info: [ 312.933765] audit: type=1804 audit(1565190669.919:161): pid=17614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir525748567/syzkaller.UwknhR/227/file0/file0" dev="loop3" ino=346 res=1 15:11:10 executing program 2: 15:11:10 executing program 5: [ 312.982001] active_anon:169281 inactive_anon:684 isolated_anon:0 [ 312.982001] active_file:12886 inactive_file:11610 isolated_file:0 [ 312.982001] unevictable:4100 dirty:283 writeback:0 unstable:0 [ 312.982001] slab_reclaimable:12790 slab_unreclaimable:108762 [ 312.982001] mapped:59017 shmem:258 pagetables:2189 bounce:0 [ 312.982001] free:1081437 free_pcp:325 free_cma:0 [ 313.061386] Node 0 active_anon:677232kB inactive_anon:2760kB active_file:51424kB inactive_file:46456kB unevictable:16400kB isolated(anon):0kB isolated(file):0kB mapped:236136kB dirty:1188kB writeback:0kB shmem:1032kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 200704kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 313.115576] Node 1 active_anon:0kB inactive_anon:0kB active_file:144kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 313.149648] Node 0 DMA free:15908kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 313.181818] lowmem_reserve[]: 0 2580 2580 2580 [ 313.186462] Node 0 DMA32 free:524592kB min:36468kB low:45584kB high:54700kB active_anon:677168kB inactive_anon:2756kB active_file:51436kB inactive_file:46464kB unevictable:16400kB writepending:1188kB present:3129332kB managed:2644892kB mlocked:16400kB kernel_stack:8608kB pagetables:8552kB bounce:0kB free_pcp:1380kB local_pcp:688kB free_cma:0kB [ 313.221910] lowmem_reserve[]: 0 0 0 0 [ 313.225796] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 313.252445] lowmem_reserve[]: 0 0 0 0 [ 313.256321] Node 1 Normal free:3785976kB min:53420kB low:66772kB high:80124kB active_anon:0kB inactive_anon:0kB active_file:144kB inactive_file:0kB unevictable:0kB writepending:4kB present:3932160kB managed:3870208kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 313.286602] lowmem_reserve[]: 0 0 0 0 [ 313.290792] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 313.305351] Node 0 DMA32: 789*4kB (UME) 41*8kB (UME) 87*16kB (UME) 276*32kB (UM) 1043*64kB (UM) 177*128kB (UME) 144*256kB (UM) 74*512kB (UME) 3*1024kB (ME) 3*2048kB (M) 83*4096kB (UM) = 527052kB [ 313.323661] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 313.334914] Node 1 Normal: 58*4kB (UME) 348*8kB (UE) 255*16kB (UM) 60*32kB (UME) 15*64kB (UM) 8*128kB (U) 8*256kB (UME) 3*512kB (UE) 3*1024kB (UME) 4*2048kB (ME) 918*4096kB (M) = 3785976kB [ 313.338528] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 313.352387] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 313.365578] FAT-fs (loop3): Filesystem has been set read-only [ 313.370165] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 313.370175] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 313.370183] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 313.370189] 24770 total pagecache pages [ 313.370202] 0 pages in swap cache [ 313.411040] Swap cache stats: add 0, delete 0, find 0/0 15:11:10 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, 0x0, 0x0) 15:11:10 executing program 1: 15:11:10 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) setsockopt$inet_int(r2, 0x0, 0x2, &(0x7f0000000040)=0x3, 0x4) close(r0) syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x2, 0x3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) 15:11:10 executing program 5: 15:11:10 executing program 2: 15:11:10 executing program 3: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xfff, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x100) fallocate(r1, 0x1, 0x0, 0x369e5d84) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280), 0x12) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) shutdown(r1, 0x1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file1\x00', 0x0) [ 313.416420] Free swap = 0kB [ 313.419426] Total swap = 0kB [ 313.422535] 1965979 pages RAM [ 313.425793] 0 pages HighMem/MovableOnly [ 313.429768] 333227 pages reserved [ 313.433710] 0 pages cma reserved 15:11:10 executing program 2: 15:11:10 executing program 5: 15:11:10 executing program 1: [ 313.524354] syz-executor.0: vmalloc: allocation failure: 0 bytes, mode:0x14000c0(GFP_KERNEL), nodemask=(null) 15:11:10 executing program 2: 15:11:10 executing program 5: [ 313.595578] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 313.634272] CPU: 0 PID: 17648 Comm: syz-executor.0 Not tainted 4.14.137 #33 [ 313.641433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 313.650982] Call Trace: [ 313.653598] dump_stack+0x138/0x19c [ 313.657260] warn_alloc.cold+0x96/0x1af [ 313.661512] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 313.666368] ? lock_downgrade+0x6e0/0x6e0 [ 313.670539] ? avc_has_perm+0x2df/0x4b0 [ 313.674544] __vmalloc_node_range+0x3be/0x6a0 [ 313.679242] ? trace_hardirqs_on+0x10/0x10 [ 313.683510] vmalloc+0x46/0x50 [ 313.686818] ? sel_write_load+0x1a0/0x1050 [ 313.691191] sel_write_load+0x1a0/0x1050 [ 313.695297] ? save_trace+0x290/0x290 [ 313.699832] ? sel_read_bool+0x240/0x240 [ 313.705060] ? trace_hardirqs_on+0x10/0x10 [ 313.709409] ? save_trace+0x290/0x290 [ 313.713238] __vfs_write+0x105/0x6b0 [ 313.716963] ? __lock_is_held+0xb6/0x140 [ 313.721577] ? sel_read_bool+0x240/0x240 [ 313.726012] ? kernel_read+0x120/0x120 [ 313.729921] ? __lock_is_held+0xb6/0x140 [ 313.734150] ? check_preemption_disabled+0x3c/0x250 [ 313.739189] ? rcu_lockdep_current_cpu_online+0xf2/0x140 15:11:10 executing program 2: [ 313.744751] ? rcu_read_lock_sched_held+0x110/0x130 [ 313.749961] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 313.754907] ? __sb_start_write+0x153/0x2f0 [ 313.754922] vfs_write+0x198/0x500 [ 313.754937] SyS_write+0xfd/0x230 [ 313.754950] ? SyS_read+0x230/0x230 [ 313.754963] ? do_syscall_64+0x53/0x640 [ 313.754975] ? SyS_read+0x230/0x230 [ 313.763037] do_syscall_64+0x1e8/0x640 [ 313.763047] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 313.763064] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 313.763073] RIP: 0033:0x459829 15:11:10 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, 0x0, 0x0) 15:11:10 executing program 5: 15:11:10 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0xffffffffffdffffe) close(r0) r2 = syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x2, 0x3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r3, 0x800, 0x70bd2c, 0x25dfdbfc, {{}, 0x0, 0x4108, 0x0, {0x4c, 0x18, {0x6, @link='syz0\x00'}}}, ["", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 15:11:10 executing program 1: [ 313.763078] RSP: 002b:00007fdaa3659c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 313.763088] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459829 [ 313.763093] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 313.763098] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 313.763104] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdaa365a6d4 [ 313.763110] R13: 00000000004c9a25 R14: 00000000004e1060 R15: 00000000ffffffff 15:11:10 executing program 5: [ 313.873877] syz-executor.0: vmalloc: allocation failure: 0 bytes, mode:0x14000c0(GFP_KERNEL), nodemask=(null) [ 313.912560] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 313.927922] CPU: 0 PID: 17671 Comm: syz-executor.0 Not tainted 4.14.137 #33 [ 313.935061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 313.944521] Call Trace: [ 313.947260] dump_stack+0x138/0x19c [ 313.950909] warn_alloc.cold+0x96/0x1af [ 313.954924] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 313.960058] ? lock_downgrade+0x6e0/0x6e0 [ 313.964235] ? avc_has_perm+0x2df/0x4b0 [ 313.968427] __vmalloc_node_range+0x3be/0x6a0 [ 313.973198] ? trace_hardirqs_on+0x10/0x10 [ 313.977457] vmalloc+0x46/0x50 [ 313.980675] ? sel_write_load+0x1a0/0x1050 [ 313.984915] sel_write_load+0x1a0/0x1050 [ 313.988987] ? save_trace+0x290/0x290 [ 313.989008] ? sel_read_bool+0x240/0x240 [ 313.989021] ? trace_hardirqs_on+0x10/0x10 [ 314.001213] ? save_trace+0x290/0x290 [ 314.001230] __vfs_write+0x105/0x6b0 [ 314.001240] ? __lock_is_held+0xb6/0x140 [ 314.001254] ? sel_read_bool+0x240/0x240 [ 314.001265] ? kernel_read+0x120/0x120 [ 314.001275] ? __lock_is_held+0xb6/0x140 [ 314.001287] ? check_preemption_disabled+0x3c/0x250 [ 314.001302] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 314.001317] ? rcu_read_lock_sched_held+0x110/0x130 [ 314.008853] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 314.008865] ? __sb_start_write+0x153/0x2f0 [ 314.008878] vfs_write+0x198/0x500 [ 314.020898] SyS_write+0xfd/0x230 [ 314.020910] ? SyS_read+0x230/0x230 [ 314.020923] ? do_syscall_64+0x53/0x640 [ 314.020933] ? SyS_read+0x230/0x230 [ 314.020944] do_syscall_64+0x1e8/0x640 [ 314.020953] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 314.020970] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 314.020979] RIP: 0033:0x459829 [ 314.020989] RSP: 002b:00007fdaa3659c78 EFLAGS: 00000246 [ 314.030404] ORIG_RAX: 0000000000000001 [ 314.030411] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459829 [ 314.030417] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 314.030423] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 314.030429] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdaa365a6d4 [ 314.030434] R13: 00000000004c9a25 R14: 00000000004e1060 R15: 00000000ffffffff [ 314.044080] warn_alloc_show_mem: 1 callbacks suppressed [ 314.044085] Mem-Info: [ 314.081890] active_anon:170405 inactive_anon:683 isolated_anon:0 [ 314.081890] active_file:12887 inactive_file:11630 isolated_file:0 [ 314.081890] unevictable:4100 dirty:301 writeback:0 unstable:0 [ 314.081890] slab_reclaimable:12811 slab_unreclaimable:108822 [ 314.081890] mapped:59022 shmem:249 pagetables:2180 bounce:0 [ 314.081890] free:1080190 free_pcp:353 free_cma:0 [ 314.114129] Node 0 active_anon:681632kB inactive_anon:2764kB active_file:51440kB inactive_file:46516kB unevictable:16400kB isolated(anon):0kB isolated(file):0kB mapped:236012kB dirty:1236kB writeback:0kB shmem:1032kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 206848kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 314.137326] Node 1 active_anon:0kB inactive_anon:0kB active_file:144kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 314.185831] audit: type=1804 audit(1565190671.169:162): pid=17677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir525748567/syzkaller.UwknhR/228/file0/file0" dev="loop3" ino=348 res=1 [ 314.254370] Node 0 DMA free:15908kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 314.360888] lowmem_reserve[]: 0 2580 2580 2580 [ 314.368284] Node 0 DMA32 free:520272kB min:36468kB low:45584kB high:54700kB active_anon:679800kB inactive_anon:2764kB active_file:51440kB inactive_file:46516kB unevictable:16400kB writepending:1236kB present:3129332kB managed:2644892kB mlocked:16400kB kernel_stack:8736kB pagetables:8728kB bounce:0kB free_pcp:1284kB local_pcp:684kB free_cma:0kB [ 314.405334] lowmem_reserve[]: 0 0 0 0 [ 314.409187] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 314.440158] lowmem_reserve[]: 0 0 0 0 [ 314.444019] Node 1 Normal free:3785976kB min:53420kB low:66772kB high:80124kB active_anon:0kB inactive_anon:0kB active_file:144kB inactive_file:0kB unevictable:0kB writepending:4kB present:3932160kB managed:3870208kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 314.477180] lowmem_reserve[]: 0 0 0 0 [ 314.481110] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB 15:11:11 executing program 3: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xfff, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r1, 0x1, 0x0, 0x369e5d84) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280), 0x12) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000100)={0x7}, 0x4) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file1\x00', 0x0) 15:11:11 executing program 1: 15:11:11 executing program 2: 15:11:11 executing program 5: 15:11:11 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r1) r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xc8, 0x10000) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000040)={0x2, 0x2}) socket$inet_dccp(0x2, 0x6, 0x0) r3 = syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x2, 0x3) ioctl$VIDIOC_G_DV_TIMINGS(r3, 0xc0845658, &(0x7f0000000080)={0x0, @bt={0x10001, 0xffffffff, 0x1, 0x1, 0xfe, 0x7257, 0x0, 0x1, 0x1, 0xfd2, 0xc5e7, 0x4, 0xffff, 0xb4b, 0x1, 0x20}}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) [ 314.499540] Node 0 DMA32: 832*4kB (UME) 18*8kB (ME) 7*16kB (UME) 202*32kB (UM) 1043*64kB (UM) 189*128kB (UME) 144*256kB (UM) 74*512kB (UME) 3*1024kB (ME) 2*2048kB (M) 83*4096kB (UM) = 522880kB [ 314.537926] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 314.554929] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000641a) 15:11:11 executing program 1: 15:11:11 executing program 5: [ 314.562796] FAT-fs (loop3): Filesystem has been set read-only [ 314.609841] Node 1 Normal: 58*4kB (UME) 348*8kB (UE) 255*16kB (UM) 60*32kB (UME) 15*64kB (UM) 8*128kB (U) 8*256kB (UME) 3*512kB (UE) 3*1024kB (UME) 4*2048kB (ME) 918*4096kB (M) = 3785976kB [ 314.636395] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 314.646081] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 314.656542] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 314.665933] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 314.675176] 24778 total pagecache pages [ 314.680734] 0 pages in swap cache [ 314.684202] Swap cache stats: add 0, delete 0, find 0/0 [ 314.689617] Free swap = 0kB [ 314.693232] Total swap = 0kB [ 314.696270] 1965979 pages RAM 15:11:11 executing program 0: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, 0x0, 0x0) 15:11:11 executing program 2: 15:11:11 executing program 5: 15:11:11 executing program 1: 15:11:11 executing program 4: epoll_create1(0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x4000, 0x0) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) r1 = epoll_create1(0x0) close(r1) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x208000, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e21, 0x80000, @loopback, 0xfffffffffffff151}}}, &(0x7f0000000000)=0x84) getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000080)=@assoc_id=r3, &(0x7f00000000c0)=0xfffffffffffffeac) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000000100), 0x4) syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x2, 0x3) [ 314.727804] 0 pages HighMem/MovableOnly [ 314.733152] 333227 pages reserved [ 314.736697] 0 pages cma reserved [ 314.809796] syz-executor.0: vmalloc: allocation failure: 0 bytes, mode:0x14000c0(GFP_KERNEL), nodemask=(null) [ 314.866864] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 314.886807] CPU: 0 PID: 17710 Comm: syz-executor.0 Not tainted 4.14.137 #33 [ 314.894162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 314.909675] Call Trace: [ 314.912283] dump_stack+0x138/0x19c [ 314.915940] warn_alloc.cold+0x96/0x1af [ 314.919923] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 314.925587] ? lock_downgrade+0x6e0/0x6e0 [ 314.929860] ? avc_has_perm+0x2df/0x4b0 [ 314.933951] __vmalloc_node_range+0x3be/0x6a0 [ 314.938825] ? trace_hardirqs_on+0x10/0x10 [ 314.943097] vmalloc+0x46/0x50 [ 314.946495] ? sel_write_load+0x1a0/0x1050 [ 314.950855] sel_write_load+0x1a0/0x1050 [ 314.954945] ? save_trace+0x290/0x290 [ 314.958864] ? sel_read_bool+0x240/0x240 [ 314.962968] ? trace_hardirqs_on+0x10/0x10 [ 314.967308] ? save_trace+0x290/0x290 [ 314.971123] __vfs_write+0x105/0x6b0 [ 314.974847] ? __lock_is_held+0xb6/0x140 [ 314.978940] ? sel_read_bool+0x240/0x240 [ 314.983030] ? kernel_read+0x120/0x120 [ 314.986950] ? __lock_is_held+0xb6/0x140 [ 314.991020] ? check_preemption_disabled+0x3c/0x250 [ 314.996053] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 315.001518] ? rcu_read_lock_sched_held+0x110/0x130 [ 315.006724] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 315.011493] ? __sb_start_write+0x153/0x2f0 [ 315.015836] vfs_write+0x198/0x500 [ 315.019409] SyS_write+0xfd/0x230 [ 315.022873] ? SyS_read+0x230/0x230 [ 315.026509] ? do_syscall_64+0x53/0x640 [ 315.030506] ? SyS_read+0x230/0x230 [ 315.034143] do_syscall_64+0x1e8/0x640 [ 315.038037] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 315.042896] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 315.048111] RIP: 0033:0x459829 [ 315.051324] RSP: 002b:00007fdaa3659c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 315.059044] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459829 [ 315.066418] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 315.073778] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 315.081078] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdaa365a6d4 [ 315.088346] R13: 00000000004c9a25 R14: 00000000004e1060 R15: 00000000ffffffff [ 315.101361] Mem-Info: [ 315.103818] active_anon:170961 inactive_anon:684 isolated_anon:0 [ 315.103818] active_file:12890 inactive_file:11635 isolated_file:0 [ 315.103818] unevictable:4100 dirty:316 writeback:0 unstable:0 [ 315.103818] slab_reclaimable:12815 slab_unreclaimable:108727 [ 315.103818] mapped:58988 shmem:260 pagetables:2220 bounce:0 [ 315.103818] free:1079846 free_pcp:213 free_cma:0 [ 315.103841] Node 0 active_anon:683844kB inactive_anon:2736kB active_file:51416kB inactive_file:46540kB unevictable:16400kB isolated(anon):0kB isolated(file):0kB mapped:235952kB dirty:1260kB writeback:0kB shmem:1040kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 204800kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 315.103872] Node 1 active_anon:0kB inactive_anon:0kB active_file:144kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 315.172504] Node 0 DMA free:15908kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 315.224181] audit: type=1804 audit(1565190672.189:163): pid=17709 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir525748567/syzkaller.UwknhR/229/file0/file0" dev="loop3" ino=350 res=1 [ 315.255932] lowmem_reserve[]: 0 2580 2580 2580 [ 315.261373] Node 0 DMA32 free:519336kB min:36468kB low:45584kB high:54700kB active_anon:681804kB inactive_anon:2760kB active_file:51444kB inactive_file:46540kB unevictable:16400kB writepending:1276kB present:3129332kB managed:2644892kB mlocked:16400kB kernel_stack:8736kB pagetables:8684kB bounce:0kB free_pcp:864kB local_pcp:300kB free_cma:0kB [ 315.261521] lowmem_reserve[]: 0 0 0 0 [ 315.261540] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 315.261571] lowmem_reserve[]: 0 0 0 0 [ 315.261590] Node 1 Normal free:3785976kB min:53420kB low:66772kB high:80124kB active_anon:0kB inactive_anon:0kB active_file:144kB inactive_file:0kB unevictable:0kB writepending:4kB present:3932160kB managed:3870208kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 315.261618] lowmem_reserve[]: 0 0 0 0 [ 315.369345] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 315.387257] Node 0 DMA32: 798*4kB (UME) 42*8kB (UME) 9*16kB (UME) 169*32kB (UM) 1043*64kB (UM) 201*128kB (UME) 144*256kB (UM) 74*512kB (UME) 3*1024kB (ME) 0*2048kB 83*4096kB (UM) = 519352kB [ 315.409535] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 315.425422] Node 1 Normal: 58*4kB (UME) 348*8kB (UE) 255*16kB (UM) 60*32kB (UME) 15*64kB (UM) 8*128kB (U) 8*256kB (UME) 3*512kB (UE) 3*1024kB (UME) 4*2048kB (ME) 918*4096kB (M) = 3785976kB [ 315.448007] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 315.457149] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 15:11:12 executing program 3: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xfff, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file1\x00', 0x4000000000000) mknodat(r0, &(0x7f0000000100)='./file0\x00', 0x2, 0x54) fallocate(r1, 0x1, 0x0, 0x369e5d84) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280), 0x12) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000340)={'vcan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x9, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xffffffffffffff00}, [@alu={0x7, 0x6, 0x0, 0x8, 0xf, 0x10c, 0xfffffffffffffff0}, @exit, @jmp={0x5, 0xffffffff, 0xf, 0x7, 0x9, 0x18, 0x9}, @ldst={0x3, 0x1, 0x7, 0x7, 0x8, 0x20, 0xffffffffffffffff}, @alu={0x4, 0x290b, 0xe, 0x0, 0x5, 0x6, 0xffffffffffffffff}, @ldst={0x3, 0x2, 0x3, 0xb, 0x7, 0xfffffffffffffff8, 0x4}]}, &(0x7f0000000240)='GPL\x00', 0x8001, 0x27, &(0x7f00000002c0)=""/39, 0x0, 0x3, [], r2, 0x9, r1, 0x8, &(0x7f0000000380)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000400)={0x5, 0xb, 0x3, 0x401}, 0x10}, 0x70) fallocate(r0, 0x0, 0x3, 0x1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file1\x00', 0x0) 15:11:12 executing program 1: 15:11:12 executing program 5: 15:11:12 executing program 2: 15:11:12 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x2, 0x3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) getsockname(r2, &(0x7f0000000000)=@nfc_llcp, &(0x7f0000000080)=0x80) [ 315.470422] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 315.479459] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 315.491865] 24798 total pagecache pages [ 315.496266] 0 pages in swap cache [ 315.499735] Swap cache stats: add 0, delete 0, find 0/0 15:11:12 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x4, &(0x7f0000000200)={0x0, {{0x2, 0x0, @multicast1}}}, 0x90) 15:11:12 executing program 5: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100)='sysfs\x00\x14\xbc\xecukXM\xf7\x1d\xdd\xf1\xd0\x0e\x0ei\x00\x00\x00\x00\x00\x00\xadEY\xb3\xd1\xfd\xbb?\x98\xa5Ij\xdf', 0x1, 0x0) mkdir(&(0x7f0000000000)='./file0/bus\x00', 0x0) 15:11:12 executing program 0: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, 0x0, 0x0) 15:11:12 executing program 1: mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x3, 0x1b071, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000003d00)='./file0\x00', 0x0) move_pages(0x0, 0x1, &(0x7f0000000000)=[&(0x7f0000003000/0x2000)=nil], &(0x7f00000000c0)=[0x1], 0x0, 0x0) [ 315.522074] Free swap = 0kB [ 315.525131] Total swap = 0kB [ 315.528161] 1965979 pages RAM [ 315.537567] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 315.539275] 0 pages HighMem/MovableOnly [ 315.550541] 333227 pages reserved [ 315.550555] 0 pages cma reserved 15:11:12 executing program 2: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xfff, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r1, 0x1, 0x0, 0x369e5d84) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280), 0x12) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file1\x00', 0x0) [ 315.607419] FAT-fs (loop3): Filesystem has been set read-only [ 315.637729] syz-executor.0: vmalloc: allocation failure: 0 bytes, mode:0x14000c0(GFP_KERNEL), nodemask=(null) [ 315.657525] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 315.672284] CPU: 0 PID: 17734 Comm: syz-executor.0 Not tainted 4.14.137 #33 [ 315.679426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 315.688829] Call Trace: [ 315.691446] dump_stack+0x138/0x19c [ 315.695090] warn_alloc.cold+0x96/0x1af [ 315.699079] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 315.699094] ? lock_downgrade+0x6e0/0x6e0 [ 315.699117] ? avc_has_perm+0x2df/0x4b0 [ 315.712185] __vmalloc_node_range+0x3be/0x6a0 [ 315.716798] ? trace_hardirqs_on+0x10/0x10 [ 315.721140] vmalloc+0x46/0x50 [ 315.721157] ? sel_write_load+0x1a0/0x1050 [ 315.721166] sel_write_load+0x1a0/0x1050 [ 315.721176] ? save_trace+0x290/0x290 [ 315.721193] ? sel_read_bool+0x240/0x240 [ 315.721205] ? trace_hardirqs_on+0x10/0x10 [ 315.721216] ? save_trace+0x290/0x290 [ 315.721231] __vfs_write+0x105/0x6b0 [ 315.721239] ? __lock_is_held+0xb6/0x140 15:11:12 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xfff, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'erspan0\x00', 0x1200}) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) r4 = epoll_create(0x1) epoll_pwait(r4, &(0x7f0000000040)=[{}], 0x1, 0x7f, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000000)) shutdown(r3, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) fallocate(r2, 0x1, 0x0, 0x369e5d84) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280), 0x12) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file1\x00', 0x0) 15:11:12 executing program 1: r0 = epoll_create1(0x0) r1 = add_key(&(0x7f0000000000)='pkcs7_test\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="3959d5319d65355a24e88b977e46b9181e3993d634a57f4977", 0x19, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_QUERY(0x18, r1, 0x0, &(0x7f00000000c0)='/dev/midi#\x00', &(0x7f0000000100)) r2 = epoll_create1(0x0) close(r0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x20000, 0x0) r4 = getuid() stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r3, &(0x7f0000000180)='./file0\x00', r4, r5, 0x800) syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x2, 0x3) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000780)) [ 315.721249] ? sel_read_bool+0x240/0x240 [ 315.721259] ? kernel_read+0x120/0x120 [ 315.721269] ? __lock_is_held+0xb6/0x140 [ 315.721281] ? check_preemption_disabled+0x3c/0x250 [ 315.721296] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 315.721309] ? rcu_read_lock_sched_held+0x110/0x130 [ 315.721322] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 315.756517] ? __sb_start_write+0x153/0x2f0 [ 315.756534] vfs_write+0x198/0x500 [ 315.756555] SyS_write+0xfd/0x230 [ 315.756567] ? SyS_read+0x230/0x230 [ 315.779474] ? do_syscall_64+0x53/0x640 [ 315.779492] ? SyS_read+0x230/0x230 [ 315.779504] do_syscall_64+0x1e8/0x640 [ 315.779514] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 315.779531] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 315.797282] RIP: 0033:0x459829 [ 315.797288] RSP: 002b:00007fdaa3659c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 315.797299] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459829 [ 315.797304] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 315.797310] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 315.797316] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdaa365a6d4 [ 315.797322] R13: 00000000004c9a25 R14: 00000000004e1060 R15: 00000000ffffffff 15:11:13 executing program 4: r0 = epoll_create1(0x0) epoll_create1(0x0) close(r0) syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x2, 0x3) 15:11:13 executing program 0: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, 0x0, 0x0) 15:11:13 executing program 3: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xfff, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r1, 0x1, 0x0, 0x369e5d84) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280), 0x12) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file1\x00', 0x0) 15:11:13 executing program 1: r0 = epoll_create1(0x0) r1 = add_key(&(0x7f0000000000)='pkcs7_test\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="3959d5319d65355a24e88b977e46b9181e3993d634a57f4977", 0x19, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_QUERY(0x18, r1, 0x0, &(0x7f00000000c0)='/dev/midi#\x00', &(0x7f0000000100)) r2 = epoll_create1(0x0) close(r0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x20000, 0x0) r4 = getuid() stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r3, &(0x7f0000000180)='./file0\x00', r4, r5, 0x800) syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x2, 0x3) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000780)) 15:11:13 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) mknodat(r1, &(0x7f0000000040)='./file0\x00', 0xc001, 0x5) write(r0, &(0x7f0000000200)="260000001300abf1eb14c1f8000322ff001000e313000000090000680000000006000300124b", 0x26) connect$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x1c) 15:11:13 executing program 5 (fault-call:2 fault-nth:0): r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x80084504, &(0x7f0000ffcffc)) [ 316.106888] syz-executor.0: vmalloc: allocation failure: 0 bytes, mode:0x14000c0(GFP_KERNEL), nodemask=(null) [ 316.122841] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 316.129032] CPU: 1 PID: 17769 Comm: syz-executor.0 Not tainted 4.14.137 #33 [ 316.136165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 316.145575] Call Trace: [ 316.148187] dump_stack+0x138/0x19c [ 316.151924] warn_alloc.cold+0x96/0x1af [ 316.155916] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 316.160793] ? lock_downgrade+0x6e0/0x6e0 [ 316.160816] ? avc_has_perm+0x2df/0x4b0 [ 316.160832] __vmalloc_node_range+0x3be/0x6a0 [ 316.160843] ? trace_hardirqs_on+0x10/0x10 [ 316.160857] vmalloc+0x46/0x50 [ 316.168987] ? sel_write_load+0x1a0/0x1050 [ 316.168999] sel_write_load+0x1a0/0x1050 [ 316.169011] ? _raw_spin_unlock_irq+0x28/0x90 [ 316.169023] ? save_trace+0x290/0x290 [ 316.169038] ? sel_read_bool+0x240/0x240 [ 316.202263] ? trace_hardirqs_on+0x10/0x10 [ 316.206950] ? save_trace+0x290/0x290 [ 316.210776] __vfs_write+0x105/0x6b0 [ 316.214594] ? __lock_is_held+0xb6/0x140 [ 316.218671] ? sel_read_bool+0x240/0x240 [ 316.222838] ? kernel_read+0x120/0x120 [ 316.227092] ? __lock_is_held+0xb6/0x140 [ 316.231164] ? check_preemption_disabled+0x3c/0x250 [ 316.236225] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 316.241708] ? rcu_read_lock_sched_held+0x110/0x130 [ 316.246752] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 316.251535] ? __sb_start_write+0x153/0x2f0 [ 316.255879] vfs_write+0x198/0x500 [ 316.259696] SyS_write+0xfd/0x230 [ 316.263173] ? SyS_read+0x230/0x230 [ 316.266816] ? do_syscall_64+0x53/0x640 [ 316.270801] ? SyS_read+0x230/0x230 [ 316.274442] do_syscall_64+0x1e8/0x640 [ 316.278532] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 316.283416] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 316.288610] RIP: 0033:0x459829 [ 316.291811] RSP: 002b:00007fdaa3659c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 316.299532] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459829 15:11:13 executing program 1: r0 = epoll_create1(0x0) r1 = add_key(&(0x7f0000000000)='pkcs7_test\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="3959d5319d65355a24e88b977e46b9181e3993d634a57f4977", 0x19, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_QUERY(0x18, r1, 0x0, &(0x7f00000000c0)='/dev/midi#\x00', &(0x7f0000000100)) r2 = epoll_create1(0x0) close(r0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x20000, 0x0) r4 = getuid() stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r3, &(0x7f0000000180)='./file0\x00', r4, r5, 0x800) syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x2, 0x3) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000780)) [ 316.306902] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 316.314184] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 316.321473] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdaa365a6d4 [ 316.328774] R13: 00000000004c9a25 R14: 00000000004e1060 R15: 00000000ffffffff [ 316.386954] K: renamed from caif0 15:11:13 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x2, 0x3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) [ 316.437844] warn_alloc_show_mem: 1 callbacks suppressed [ 316.437849] Mem-Info: [ 316.465222] active_anon:173246 inactive_anon:682 isolated_anon:0 [ 316.465222] active_file:12895 inactive_file:11648 isolated_file:0 [ 316.465222] unevictable:4100 dirty:171 writeback:1 unstable:0 15:11:13 executing program 1 (fault-call:2 fault-nth:0): r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) ioctl$EVIOCSCLOCKID(r0, 0x40084503, &(0x7f0000ffcffc)) 15:11:13 executing program 5: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) ioctl$EVIOCSCLOCKID(r0, 0x80084504, &(0x7f0000000000)=0xe465) [ 316.465222] slab_reclaimable:12768 slab_unreclaimable:108748 [ 316.465222] mapped:58988 shmem:256 pagetables:2325 bounce:0 [ 316.465222] free:1076492 free_pcp:293 free_cma:0 [ 316.510473] A link change request failed with some changes committed already. Interface K may have been left with an inconsistent configuration, please check. 15:11:13 executing program 2: r0 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000000c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) socketpair(0x3, 0xe, 0x8, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='status\x00') ioctl$KVM_XEN_HVM_CONFIG(r3, 0x4038ae7a, &(0x7f0000000680)={0xff, 0xc0011031, &(0x7f0000000500)="ae21adb854174fb7f6521dd72de62e05c6fe9799191fa3ba21485b6d67b4a1dbdbf648747858d82c47681e06160a8d864c569f6fb9bced86734b82fbea92810215fbf266d50d812579092fa40bc062f8cd92c4d78c6b9c796494155e6c0da33ddfa37bf93cd99bc0460c48a4cbe68ca87d3ac0b976e7e0f588c4fd72757007f97af410949c97a3d7660ea61b8c7e4ad34eec4084f0735b47ebff5e60ba212ebfb9ede6ba235e65b17bc704bcb0860486fcfff997f2475ddf07c41c931572", &(0x7f00000005c0)="c3f9ff659fc999da773a132f650ad936ef42dab2e7740398a406ab4e40c87dd51e85ebd2de3e84082cc41561bc39ae962f1abd9cb5a5d01e2f5fdc3a82a487969a4690c7fa4ca27926b9a0ac93c8c22abfa840db879dc2dd5fd23d12f89aa3cded7a8d6407b9f7da4e13ed47fb0903e17c5059a760d8305fe8fcb2f76bebf520e9e7bc31", 0xbe, 0x84}) accept4$unix(r2, &(0x7f00000001c0), &(0x7f0000000040)=0x6e, 0x80800) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, r0) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000140)={0x0, 0x1, 0x100000001, 0xff}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000280)={r4, @in6={{0xa, 0x4e24, 0x909, @loopback}}, 0x7f, 0x1e}, &(0x7f0000000340)=0x90) ioctl$VIDIOC_G_ENC_INDEX(r3, 0x8818564c, &(0x7f00000006c0)) r5 = syz_open_dev$video4linux(&(0x7f0000000380)='/dev/v4l-subdev#\x00', 0x3, 0x1) ioctl$VIDIOC_G_FMT(r5, 0xc0d05604, &(0x7f00000003c0)={0x8, @vbi={0x5, 0x7fffffff, 0x0, 0x7b57476a, [0xfffffffffffffffc, 0xe08], [0x1, 0x9], 0x13b}}) connect$bt_l2cap(r3, &(0x7f0000000f00)={0x1f, 0x2, {0x1, 0x40, 0x3, 0x10001, 0x4, 0x9}, 0x8, 0x6}, 0xe) bind$rose(r1, &(0x7f0000000f40)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x40) [ 316.567846] audit: type=1804 audit(1565190673.549:164): pid=17797 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir525748567/syzkaller.UwknhR/231/file0/file0" dev="loop3" ino=354 res=1 15:11:13 executing program 3: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xfff, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) exit(0x8001) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r1, 0x8, 0x0, 0x369e5d87) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280), 0x12) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, 0x0, 0x1ee) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x101000, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file1\x00', 0x0) 15:11:13 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$kcm(0x29, 0x7, 0x0) close(r1) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000080)=0x3, 0x4) r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x1, 0x2102) r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x88001) sendfile(r0, r3, 0x0, 0x800000000022) sendfile(r2, r3, &(0x7f0000000100)=0x4, 0x800000000000c9) [ 316.641721] Node 0 active_anon:691340kB inactive_anon:2728kB active_file:51436kB inactive_file:46592kB unevictable:16400kB isolated(anon):0kB isolated(file):0kB mapped:236152kB dirty:680kB writeback:4kB shmem:1024kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 208896kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no 15:11:13 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, 0x0, 0x0) 15:11:13 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) ioctl$EVIOCSCLOCKID(r0, 0x40084503, &(0x7f0000ffcffc)) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x9, 0x80000) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x79, "37297952c0482497054f544bea699aa74116f6a1fdda04b9bbb74556a36566fee3667ca4655a282337d29c8fcfbf20856ddf1db37ba213c730d318be1eb5af3291fdd52a811146fca89d21180ddea8572439ae95ebbd7c7e9b1b0668eeb2271156aa307480d225d72df01bfbd1e77c40982ff8116928e072b7"}, &(0x7f0000000040)=0x9d) [ 316.679039] Node 1 active_anon:0kB inactive_anon:0kB active_file:144kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no 15:11:13 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x2, 0x3) ioctl$VIDIOC_G_CROP(r1, 0xc014563b, &(0x7f0000000040)={0x6, {0x5, 0x100000001, 0x1ff, 0x8000}}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) ioctl$void(r0, 0x5450) setsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f0000000000)=0x2, 0x4) connect$caif(r2, &(0x7f0000000080)=@dgm={0x25, 0x7, 0x81}, 0x18) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000000c0), &(0x7f0000000100)=0x4) [ 316.718799] Node 0 DMA free:15908kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 316.718824] lowmem_reserve[]: 0 2580 2580 2580 [ 316.718843] Node 0 DMA32 free:506496kB min:36468kB low:45584kB high:54700kB active_anon:691444kB inactive_anon:2748kB active_file:51472kB inactive_file:46608kB unevictable:16400kB writepending:768kB present:3129332kB managed:2644892kB mlocked:16400kB kernel_stack:8992kB pagetables:9212kB bounce:0kB free_pcp:948kB local_pcp:628kB free_cma:0kB [ 316.718926] lowmem_reserve[]: 0 0 0 0 [ 316.718979] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 316.719007] lowmem_reserve[]: 0 0 0 0 15:11:13 executing program 5: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xf8, 0x8000) ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f0000000040)) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x80084504, &(0x7f0000ffcffc)) [ 316.719039] Node 1 Normal free:3785728kB min:53420kB low:66772kB high:80124kB active_anon:0kB inactive_anon:0kB active_file:144kB inactive_file:0kB unevictable:0kB writepending:4kB present:3932160kB managed:3870208kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:248kB local_pcp:120kB free_cma:0kB [ 316.719068] lowmem_reserve[]: 0 0 0 0 [ 316.719083] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 316.719157] Node 0 DMA32: 578*4kB (UME) 25*8kB (UE) 10*16kB (UME) 3*32kB (UM) 944*64kB (UM) 263*128kB (UME) 144*256kB (UM) 74*512kB (UME) 3*1024kB (ME) 2*2048kB (M) 80*4096kB (UM) = 506448kB [ 316.719255] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 316.719304] Node 1 Normal: 58*4kB (UME) 349*8kB (UME) 255*16kB (UM) 60*32kB (UME) 15*64kB (UM) 8*128kB (U) 7*256kB (UE) 3*512kB (UE) 3*1024kB (UME) 4*2048kB (ME) 918*4096kB (M) = 3785728kB [ 316.719387] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 316.719395] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 316.719401] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 316.719408] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 316.719413] 24811 total pagecache pages [ 316.719428] 0 pages in swap cache [ 316.719434] Swap cache stats: add 0, delete 0, find 0/0 [ 316.719438] Free swap = 0kB [ 316.719443] Total swap = 0kB [ 316.719448] 1965979 pages RAM [ 316.719452] 0 pages HighMem/MovableOnly [ 316.719456] 333227 pages reserved [ 316.719460] 0 pages cma reserved [ 316.775223] syz-executor.0: [ 316.893057] vmalloc: allocation failure: 0 bytes 15:11:14 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) r1 = syz_open_dev$video(0x0, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000100)=0x44a2, 0x8) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000400)=0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x70, 0x401, 0x90, 0x4, 0x3, 0x0, 0x8, 0x40000, 0x0, 0x800, 0x7fffffff, 0x7fffffff, 0x0, 0x200000, 0x5, 0x5, 0x3, 0x800, 0x10000, 0x400, 0x3, 0x877, 0x3, 0xffffffffffffff1b, 0x10001, 0x7fffffff, 0x4, 0x7ff, 0x3, 0xffffffffffffff5b, 0x101, 0x8, 0x2, 0x0, 0x8000, 0x5, 0x20, 0x0, 0xce, 0x243b963c0020f594, @perf_bp={&(0x7f0000000340), 0xd}, 0x10200, 0x0, 0x4, 0x6, 0x0, 0x7, 0x4}, r2, 0x8, r0, 0x1) ioctl$VIDIOC_G_SLICED_VBI_CAP(r1, 0xc0745645, &(0x7f0000000040)={0x0, [], 0x4}) sysinfo(&(0x7f0000000280)=""/153) write$FUSE_BMAP(r0, &(0x7f0000000200)={0x18, 0xffffffffffffffda, 0x5, {0x5}}, 0x18) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r3, 0x210, 0x70bd28, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x84) [ 316.919152] , mode:0x14000c0(GFP_KERNEL), nodemask= [ 316.971544] (null) [ 317.013808] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 317.019345] CPU: 1 PID: 17811 Comm: syz-executor.0 Not tainted 4.14.137 #33 [ 317.026461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 317.035831] Call Trace: [ 317.035851] dump_stack+0x138/0x19c [ 317.035868] warn_alloc.cold+0x96/0x1af [ 317.035883] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 317.035897] ? lock_downgrade+0x6e0/0x6e0 [ 317.035915] ? avc_has_perm+0x2df/0x4b0 [ 317.042303] __vmalloc_node_range+0x3be/0x6a0 [ 317.042321] ? trace_hardirqs_on+0x10/0x10 [ 317.042335] vmalloc+0x46/0x50 [ 317.042351] ? sel_write_load+0x1a0/0x1050 [ 317.042360] sel_write_load+0x1a0/0x1050 [ 317.042370] ? save_trace+0x290/0x290 [ 317.042384] ? sel_read_bool+0x240/0x240 [ 317.042395] ? trace_hardirqs_on+0x10/0x10 [ 317.042408] ? save_trace+0x290/0x290 [ 317.051666] __vfs_write+0x105/0x6b0 [ 317.051680] ? __lock_is_held+0xb6/0x140 [ 317.051694] ? sel_read_bool+0x240/0x240 [ 317.051704] ? kernel_read+0x120/0x120 [ 317.051715] ? __lock_is_held+0xb6/0x140 [ 317.051727] ? check_preemption_disabled+0x3c/0x250 [ 317.051741] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 317.051758] ? rcu_read_lock_sched_held+0x110/0x130 [ 317.064588] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 317.064601] ? __sb_start_write+0x153/0x2f0 15:11:14 executing program 2: r0 = socket$kcm(0x2, 0x1, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)=@nfc_llcp={0x27, 0x0, 0x2, 0x0, 0x0, 0x0, "b6bc8fda04ae1bf1a1e4431ff3e4e210a9ad83a2709b87b524875076871471eb7b6e745475d5febe321ff3eb7a90f27b92d384bf15cacfa784201efd3d604b"}, 0x80, 0x0}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x890c, &(0x7f0000000000)) [ 317.064616] vfs_write+0x198/0x500 [ 317.064630] SyS_write+0xfd/0x230 [ 317.064642] ? SyS_read+0x230/0x230 [ 317.080616] ? do_syscall_64+0x53/0x640 [ 317.080632] ? SyS_read+0x230/0x230 [ 317.080645] do_syscall_64+0x1e8/0x640 [ 317.080655] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 317.080675] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 317.080684] RIP: 0033:0x459829 [ 317.080689] RSP: 002b:00007fdaa3659c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 317.080699] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459829 15:11:14 executing program 2: setresuid(0x0, 0xee01, 0x0) getgroups(0x2, &(0x7f0000000380)=[0xffffffffffffffff, 0xee01]) setresgid(r0, 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(rfc7539esp(xts-serpent-sse2,md4-generic))\x00'}, 0x58) 15:11:14 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, 0x0, 0x0) [ 317.080704] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 317.080710] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 317.080718] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdaa365a6d4 [ 317.147975] R13: 00000000004c9a25 R14: 00000000004e1060 R15: 00000000ffffffff 15:11:14 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x2, 0x3) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000000)={0xf5, 0x0, [0x1, 0x6, 0x100000000, 0xa9a]}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) 15:11:14 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) ioctl$EVIOCSCLOCKID(r0, 0x40084503, &(0x7f0000ffcffc)) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r0, 0x5, 0xffff, 0x9, 0x6}) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000000)=0x2) [ 317.296824] syz-executor.0: vmalloc: allocation failure: 0 bytes, mode:0x14000c0(GFP_KERNEL), nodemask=(null) [ 317.338701] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 317.346812] CPU: 0 PID: 17844 Comm: syz-executor.0 Not tainted 4.14.137 #33 [ 317.353940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 317.353947] Call Trace: [ 317.353969] dump_stack+0x138/0x19c [ 317.353985] warn_alloc.cold+0x96/0x1af [ 317.354001] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 317.354017] ? lock_downgrade+0x6e0/0x6e0 [ 317.354039] ? avc_has_perm+0x2df/0x4b0 [ 317.354061] __vmalloc_node_range+0x3be/0x6a0 [ 317.354073] ? finish_task_switch+0x178/0x650 [ 317.354083] ? finish_task_switch+0x14d/0x650 [ 317.354094] ? switch_mm_irqs_off+0x5e1/0xec0 [ 317.354108] vmalloc+0x46/0x50 [ 317.354121] ? sel_write_load+0x1a0/0x1050 [ 317.354133] sel_write_load+0x1a0/0x1050 [ 317.354145] ? save_trace+0x290/0x290 [ 317.354164] ? sel_read_bool+0x240/0x240 [ 317.354177] ? trace_hardirqs_on+0x10/0x10 [ 317.354188] ? save_trace+0x290/0x290 [ 317.354203] __vfs_write+0x105/0x6b0 [ 317.354211] ? __lock_is_held+0xb6/0x140 [ 317.354221] ? sel_read_bool+0x240/0x240 [ 317.354230] ? kernel_read+0x120/0x120 [ 317.354240] ? __lock_is_held+0xb6/0x140 [ 317.354251] ? check_preemption_disabled+0x3c/0x250 [ 317.354265] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 317.354277] ? rcu_read_lock_sched_held+0x110/0x130 [ 317.354286] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 317.354295] ? __sb_start_write+0x153/0x2f0 [ 317.354306] vfs_write+0x198/0x500 [ 317.354319] SyS_write+0xfd/0x230 [ 317.354330] ? SyS_read+0x230/0x230 [ 317.354340] ? do_syscall_64+0x53/0x640 [ 317.354354] ? SyS_read+0x230/0x230 [ 317.370040] do_syscall_64+0x1e8/0x640 [ 317.370051] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 317.370069] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 317.370077] RIP: 0033:0x459829 [ 317.370082] RSP: 002b:00007fdaa3659c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 317.370093] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459829 [ 317.370098] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 317.370103] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 317.370109] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdaa365a6d4 [ 317.370114] R13: 00000000004c9a25 R14: 00000000004e1060 R15: 00000000ffffffff 15:11:14 executing program 5: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x9, 0x2040) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x84, r2, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xa, 0x4}}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xe46f0312a9bdc91b, 0x32}}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4011}, 0x40000) ioctl$EVIOCSCLOCKID(r0, 0x80084504, &(0x7f0000ffcffc)) keyctl$session_to_parent(0x12) 15:11:14 executing program 2: r0 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x8, 0x90000) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f00000005c0)={{0x1, 0x7, 0x3, 0x400, '\x00', 0x1ff}, 0x0, [0x10001, 0x2, 0x101, 0x7fff, 0x8, 0x9, 0x8000, 0x1ff, 0x6, 0xd3cc, 0x7, 0xc8b, 0x20, 0xffffffff, 0x2, 0x2, 0x5, 0x6, 0x74d, 0x4169, 0x521, 0x3, 0x1, 0x200, 0x1f5e, 0xfff, 0x101, 0xc0, 0x4, 0x1f, 0x8e8, 0x1, 0x200, 0x8, 0x7f, 0x0, 0x0, 0x3c, 0x5, 0x100, 0x8000, 0x46, 0xc2c, 0x5, 0x1, 0x101, 0x1ff, 0x1, 0x1, 0x3ff, 0x1000, 0x2, 0x1, 0x7, 0x7, 0x8, 0xffffffffffffff7f, 0x5, 0xfffffffffffffff8, 0x3, 0x80, 0x6, 0x668, 0x2, 0x1, 0xa00000000000000, 0xfffffffffffffffe, 0x1, 0x4, 0x8, 0x80000000, 0x9, 0x6, 0x9, 0x1f, 0x6, 0xc5, 0x9, 0x8, 0x8, 0x7fff, 0xffffffffffffffe1, 0x0, 0x7, 0x3, 0x400, 0x5, 0x7ff, 0x0, 0x5, 0x1, 0x1, 0x3f2, 0x2d0, 0xfffffffffffffffd, 0x0, 0x795c, 0x938, 0x10001, 0x3, 0x2, 0xffff, 0x0, 0xffff, 0x0, 0x8001, 0x0, 0x400, 0x48, 0x3, 0x80, 0x6, 0x20, 0x2, 0xa9, 0x1, 0x3, 0x7, 0x401, 0x5, 0x89, 0x0, 0x5, 0x7fffffff, 0x5, 0xfffffffffffffff7, 0x10001, 0x7fff], {r1, r2+10000000}}) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x80000, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000000)=[{r4}], 0x1, 0x0, 0x0, 0x0) r5 = dup2(r3, r4) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x80000, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f0000e35ff8)=0x45) r6 = getpgrp(0x0) fcntl$setown(r5, 0x8, r6) getgroups(0x2, &(0x7f0000000300)=[0x0, 0x0]) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000340)={{{@in=@local, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@loopback}}, &(0x7f0000000440)=0xe8) connect$rxrpc(r4, &(0x7f0000000500)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x9, @local, 0x1}}, 0x24) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000ac0)={{{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f00000004c0)=0xe8) syz_mount_image$jfs(&(0x7f0000000140)='jfs\x00', &(0x7f0000000180)='./file0\x00', 0x40, 0x1, &(0x7f00000002c0)=[{&(0x7f00000001c0)="d38ab0d0a7c37d7f46eb531f05a8b7c974b36350ca7fec926e1471f600e557ffa9a5c27357d9ddf0f603bf3a5e8bb5f4e6b80d91ceb66e7e4ab4ea685e50347bfbf97f3833fc664d8c09939272bba9dcf4824025ab9269f79748fbe87213c4885affb7072d7c8afef3d55c931368b52a351afb5e153c6ff41882c23f79942caa0386ba9b224a91854c6d045a29abad95d309e054cc54b58d30e8d4199b76ef658e4848e1c101ec0a7cbd352686a5ca4620cb6a3af7d31f8b91d0889af6c5051f2e2f78d85fb5c3193b04636b9cd6cff14d351be30203c2d5c3ca1f639cede7708fcf7a67bf173c4b04e3c2fcf71ccbf282e92371af00566a", 0xf8, 0x4}], 0x20000, &(0x7f0000000bc0)={[{@gid={'gid', 0x3d, r7}}, {@errors_continue='errors=continue'}, {@grpquota='grpquota'}, {@resize_size={'resize', 0x3d, 0x6}}, {@discard_size={'discard', 0x3d, 0x80000000}}, {@discard='discard'}], [{@permit_directio='permit_directio'}, {@euid_gt={'euid>', r8}}, {@subj_role={'subj_role', 0x3d, '/dev/dmmidi#\x00'}}, {@appraise_type='appraise_type=imasig'}, {@pcr={'pcr', 0x3d, 0x7}}, {@euid_lt={'euid<', r9}}, {@hash='hash'}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@seclabel='seclabel'}, {@dont_hash='dont_hash'}]}) fcntl$setsig(r4, 0xa, 0x15) r10 = gettid() tkill(r10, 0x102080000000015) socket$inet_tcp(0x2, 0x1, 0x0) 15:11:14 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) ioctl$EVIOCSCLOCKID(r0, 0x40084503, &(0x7f0000ffcffc)=0x10001) 15:11:14 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, 0x0, 0x0) 15:11:14 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x2, 0x509040) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x9de32616a39fd819}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xf0, r3, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x3c, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x3ff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x401}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffff}]}, @TIPC_NLA_NODE={0x34, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x6c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xe}}}}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xee5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffffff7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) io_setup(0x7, &(0x7f0000000000)=0x0) io_cancel(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x6, r0, &(0x7f0000000040)="f08e1b224cb329adc390bf9b2c62aee66ba184b4d2e23830a7cba714f1e2de12e0b3c0a2ab1c43edc1de61c4e9aaf4178b233eb28e7fea67f35cbcc256315be36678eb8532817926045fd75193ef417efaaec11400a0400b34e347c9c6980bf62602780aa2dc85e35c0eb10a4611f460a13e114a69df5cb73bca197e6ed6181fd71f1ee8523d7aa2e34d", 0x8a, 0xc2d, 0x0, 0x2, r2}, &(0x7f0000000140)) 15:11:14 executing program 3: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xfff, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x4000, 0x7) fchdir(r1) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r2, 0x1, 0x0, 0x369e5d84) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r0, 0x0, 0x12, &(0x7f0000000240)='/dev/input/mouse#\x00', 0xffffffffffffffff}, 0x30) write$cgroup_pid(r1, &(0x7f0000000340)=r3, 0xfffffffffffffe8d) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_REG_LIST(r0, 0xc008aeb0, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000000000019000000000000008e5851563a23950b01f32c923cac4b042e9d36d892465ef0a3eaae49d839ec709feb940e0af65994fca2d60f222cf77100030679684461b8a9ea13cfdcfb1f060164a5c0d1105b4e185827582448cded90f3e557156bf92586d8fbcf02be9edaec0318513a8d42c1145e899ca208b33b1629418c68ebe3b54f47a829e943899bb8920843d05e6eb32f50262abbbff59a917e69d1ef6c47a7bad3"]) creat(&(0x7f00000003c0)='./file1\x00', 0x0) [ 318.022573] syz-executor.0: vmalloc: allocation failure: 0 bytes, mode:0x14000c0(GFP_KERNEL), nodemask=(null) [ 318.033268] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 318.038712] CPU: 1 PID: 17875 Comm: syz-executor.0 Not tainted 4.14.137 #33 [ 318.045907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 318.055684] Call Trace: [ 318.058272] dump_stack+0x138/0x19c [ 318.061917] warn_alloc.cold+0x96/0x1af [ 318.065888] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 318.070764] ? lock_downgrade+0x6e0/0x6e0 [ 318.074925] ? avc_has_perm+0x2df/0x4b0 [ 318.079034] __vmalloc_node_range+0x3be/0x6a0 [ 318.083551] ? trace_hardirqs_on+0x10/0x10 [ 318.088001] vmalloc+0x46/0x50 [ 318.091214] ? sel_write_load+0x1a0/0x1050 [ 318.095458] sel_write_load+0x1a0/0x1050 [ 318.099619] ? save_trace+0x290/0x290 [ 318.103426] ? sel_read_bool+0x240/0x240 [ 318.107662] ? trace_hardirqs_on+0x10/0x10 [ 318.111913] ? save_trace+0x290/0x290 [ 318.115710] __vfs_write+0x105/0x6b0 [ 318.119517] ? __lock_is_held+0xb6/0x140 [ 318.123599] ? sel_read_bool+0x240/0x240 [ 318.127666] ? kernel_read+0x120/0x120 [ 318.131729] ? __lock_is_held+0xb6/0x140 [ 318.135897] ? check_preemption_disabled+0x3c/0x250 [ 318.140916] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 318.146388] ? rcu_read_lock_sched_held+0x110/0x130 [ 318.151434] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 318.156202] ? __sb_start_write+0x153/0x2f0 [ 318.160562] vfs_write+0x198/0x500 [ 318.164114] SyS_write+0xfd/0x230 [ 318.167744] ? SyS_read+0x230/0x230 [ 318.171360] ? do_syscall_64+0x53/0x640 [ 318.175586] ? SyS_read+0x230/0x230 [ 318.179226] do_syscall_64+0x1e8/0x640 [ 318.183220] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 318.188248] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 318.193426] RIP: 0033:0x459829 [ 318.196606] RSP: 002b:00007fdaa3659c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 318.204421] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459829 [ 318.212124] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 318.219423] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 318.226698] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdaa365a6d4 [ 318.234063] R13: 00000000004c9a25 R14: 00000000004e1060 R15: 00000000ffffffff [ 318.242661] warn_alloc_show_mem: 2 callbacks suppressed [ 318.242665] Mem-Info: [ 318.251328] active_anon:175694 inactive_anon:690 isolated_anon:0 [ 318.251328] active_file:12898 inactive_file:11667 isolated_file:0 [ 318.251328] unevictable:4100 dirty:222 writeback:0 unstable:0 [ 318.251328] slab_reclaimable:12818 slab_unreclaimable:108426 [ 318.251328] mapped:58993 shmem:257 pagetables:2368 bounce:0 [ 318.251328] free:1074449 free_pcp:164 free_cma:0 [ 318.285720] Node 0 active_anon:702776kB inactive_anon:2760kB active_file:51448kB inactive_file:46668kB unevictable:16400kB isolated(anon):0kB isolated(file):0kB mapped:235972kB dirty:884kB writeback:0kB shmem:1028kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 225280kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 318.315838] Node 1 active_anon:0kB inactive_anon:0kB active_file:144kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 318.341860] Node 0 DMA free:15908kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 318.341890] lowmem_reserve[]: 0 2580 2580 2580 15:11:15 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x4400, 0x0) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x874, 0x0, 0x1}, {0xb32, 0x0, 0x2}]}) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x38) ioctl$EVIOCSCLOCKID(r0, 0x40084503, &(0x7f0000ffcffc)) [ 318.341911] Node 0 DMA32 free:496764kB min:36468kB low:45584kB high:54700kB active_anon:702776kB inactive_anon:2760kB active_file:51448kB inactive_file:46668kB unevictable:16400kB writepending:884kB present:3129332kB managed:2644892kB mlocked:16400kB kernel_stack:9152kB pagetables:9472kB bounce:0kB free_pcp:584kB local_pcp:368kB free_cma:0kB [ 318.341936] lowmem_reserve[]: 0 [ 318.414038] 0 0 0 15:11:15 executing program 4: r0 = epoll_create1(0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x100) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f00000000c0)={&(0x7f0000ffd000/0x3000)=nil, 0x9, 0x1, 0x40, &(0x7f0000ffe000/0x1000)=nil}) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000280)={0x0, 0xfffffffffffffffa}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000300)={r2, 0xaa7}, 0x8) r3 = epoll_create1(0x0) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f0000000100)=""/214) close(r0) r4 = syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0x4, 0x3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000780)) ioctl$VIDIOC_RESERVED(r4, 0x5601, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x5b) set_thread_area(&(0x7f0000000080)={0x1dd, 0x0, 0xffffffffffffffff, 0x10001, 0x400, 0x6, 0x5, 0x4, 0x6}) [ 318.423570] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 15:11:15 executing program 5: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xfffffc) ioctl$EVIOCSCLOCKID(r0, 0x80084504, &(0x7f0000000140)=0x5) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000100)) signalfd(r0, &(0x7f0000000000)={0x2}, 0x8) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x2000, 0x0) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000080)={0x0, 0xe4, 0x7, 0x2, 0x7f, 0x7fff}) [ 318.477876] lowmem_reserve[]: 0 0 0 0 [ 318.503437] Node 1 Normal free:3785952kB min:53420kB low:66772kB high:80124kB active_anon:0kB inactive_anon:0kB active_file:144kB inactive_file:0kB unevictable:0kB writepending:4kB present:3932160kB managed:3870208kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB 15:11:15 executing program 4: r0 = epoll_create1(0x0) epoll_create1(0x2000000000000) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x80800) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800080}, 0xc, &(0x7f0000000500)={&(0x7f0000000240)={0x8c, r2, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xc000000000000000}]}, @TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffffffffffd}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xf7b}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8000}]}, @TIPC_NLA_MEDIA={0x40, 0x5, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000001}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}]}, 0x276}, 0x1, 0x0, 0x0, 0x40}, 0x8000) close(r0) ioctl$RTC_EPOCH_READ(r1, 0x8008700d, &(0x7f00000005c0)) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000680)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r3, 0x920, 0x70bd26, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x800) socket$bt_bnep(0x1f, 0x3, 0x4) r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) getsockopt$TIPC_CONN_TIMEOUT(r4, 0x10f, 0x82, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r5 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0xffffffffffffffff, 0x4000000000000003) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@dev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@remote}}, &(0x7f0000000400)=0xe8) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={&(0x7f0000000140), 0xc, &(0x7f0000000480)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, r6, {0x10, 0xffff}, {0xfff3, 0xf}, {0xfffb, 0xd}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4003) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r0, &(0x7f0000000040)={0x20000000000}) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000580)={0xe488, 0x3, 0x6, 0x8}, 0x10) ioctl$CAPI_GET_MANUFACTURER(r5, 0xc0044306, &(0x7f0000000600)=0x2) [ 318.578260] lowmem_reserve[]: 0 0 0 0 [ 318.591816] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB 15:11:15 executing program 3: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xfff, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) ioctl$sock_bt_bnep_BNEPCONNDEL(r0, 0x400442c9, &(0x7f0000000100)={0x81, @broadcast}) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r1, 0x1, 0x0, 0x369e5d84) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280), 0x12) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file1\x00', 0x0) [ 318.624754] Node 0 DMA32: 476*4kB (UME) 23*8kB (ME) 37*16kB (UME) 25*32kB (UM) 899*64kB (UM) 269*128kB (UME) 144*256kB (UM) 74*512kB (UME) 3*1024kB (ME) 1*2048kB (M) 78*4096kB (UM) = 494808kB [ 318.652140] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB 15:11:15 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x2, 0x3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000000780)) 15:11:15 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) accept4$rose(r1, &(0x7f0000000040)=@short={0xb, @dev, @rose, 0x1, @null}, &(0x7f0000000080)=0x1c, 0x80000) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) creat(&(0x7f0000000100)='./file0\x00', 0x10) ioctl$EVIOCSCLOCKID(r0, 0x40084503, &(0x7f0000ffcffc)) write$FUSE_INTERRUPT(r1, &(0x7f0000000140)={0x10, 0x0, 0x6}, 0x10) [ 318.671735] Node 1 Normal: 59*4kB (UME) 349*8kB (UME) 256*16kB (UM) 61*32kB (UME) 16*64kB (UM) 9*128kB (UM) 7*256kB (UE) 3*512kB (UE) 3*1024kB (UME) 4*2048kB (ME) 918*4096kB (M) = 3785972kB [ 318.699421] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 318.717177] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 318.726575] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 318.735654] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 318.759887] 24821 total pagecache pages [ 318.776912] 0 pages in swap cache [ 318.787252] Swap cache stats: add 0, delete 0, find 0/0 [ 318.806229] Free swap = 0kB [ 318.825717] Total swap = 0kB [ 318.829726] 1965979 pages RAM [ 318.837903] 0 pages HighMem/MovableOnly [ 318.863212] 333227 pages reserved 15:11:15 executing program 5: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xea7b, 0x80000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000100)={r2, @in={{0x2, 0x4e24, @multicast2}}}, 0x84) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x80084504, &(0x7f0000ffcffc)) 15:11:15 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0x3, 0x9}, 0xf) ioctl$sock_ifreq(r1, 0x89f7, &(0x7f0000000040)={'ip6erspan0\x00', @ifru_ivalue=0x7f}) exit_group(0x25) syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x7, 0x0) 15:11:15 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000000)="11dca5055e0bcfe47bf070") clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r1, 0x0, 0x0) [ 318.878818] 0 pages cma reserved 15:11:15 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x2, 0x3) ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f0000000040)={0x7, 0xfff, 0x0, 0x8000}) mq_unlink(&(0x7f0000000080)='{({systemvboxnet0)vboxnet1\x00') setsockopt$netrom_NETROM_T1(r2, 0x103, 0x1, &(0x7f0000000000), 0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) 15:11:15 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) ioctl$EVIOCSCLOCKID(r0, 0x40084503, &(0x7f0000000000)=0xbdab) [ 318.961448] syz-executor.0: vmalloc: allocation failure: 0 bytes, mode:0x14000c0(GFP_KERNEL), nodemask=(null) [ 318.995275] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 319.007665] CPU: 1 PID: 17935 Comm: syz-executor.0 Not tainted 4.14.137 #33 [ 319.015077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 319.024457] Call Trace: [ 319.027122] dump_stack+0x138/0x19c [ 319.030784] warn_alloc.cold+0x96/0x1af [ 319.034794] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 319.039831] ? lock_downgrade+0x6e0/0x6e0 [ 319.044012] ? avc_has_perm+0x2df/0x4b0 [ 319.048011] __vmalloc_node_range+0x3be/0x6a0 [ 319.052700] ? trace_hardirqs_on+0x10/0x10 [ 319.056954] vmalloc+0x46/0x50 [ 319.060163] ? sel_write_load+0x1a0/0x1050 [ 319.064411] sel_write_load+0x1a0/0x1050 [ 319.068486] ? save_trace+0x290/0x290 [ 319.072310] ? sel_read_bool+0x240/0x240 [ 319.076425] ? trace_hardirqs_on+0x10/0x10 [ 319.080931] ? save_trace+0x290/0x290 [ 319.084822] __vfs_write+0x105/0x6b0 [ 319.088548] ? __lock_is_held+0xb6/0x140 [ 319.092649] ? sel_read_bool+0x240/0x240 [ 319.096724] ? kernel_read+0x120/0x120 [ 319.100629] ? __lock_is_held+0xb6/0x140 [ 319.104808] ? check_preemption_disabled+0x3c/0x250 [ 319.109845] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 319.115312] ? rcu_read_lock_sched_held+0x110/0x130 [ 319.120347] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 319.125266] ? __sb_start_write+0x153/0x2f0 [ 319.129649] vfs_write+0x198/0x500 [ 319.133210] SyS_write+0xfd/0x230 [ 319.136685] ? SyS_read+0x230/0x230 [ 319.140323] ? do_syscall_64+0x53/0x640 [ 319.144312] ? SyS_read+0x230/0x230 [ 319.148043] do_syscall_64+0x1e8/0x640 [ 319.151954] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 319.157266] entry_SYSCALL_64_after_hwframe+0x42/0xb7 15:11:16 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000000)="11dca5055e0bcfe47bf070") clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r1, 0x0, 0x0) [ 319.162490] RIP: 0033:0x459829 [ 319.165696] RSP: 002b:00007fdaa3659c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 319.173426] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459829 [ 319.180817] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 319.188136] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 319.195438] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdaa365a6d4 [ 319.203060] R13: 00000000004c9a25 R14: 00000000004e1060 R15: 00000000ffffffff 15:11:16 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008913, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg(r2, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x24f940, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x40000, {0x0, @link_local, 'syzkaller0\x00'}}, 0x4b, &(0x7f0000007ac0), 0x1a9, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x4}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000100)={r3, 0xa6c1, 0xff}, 0x8) 15:11:16 executing program 5: mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x80084504, &(0x7f0000ffcffc)=0x4434) [ 319.240172] audit: type=1804 audit(1565190676.209:165): pid=17919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir525748567/syzkaller.UwknhR/234/file0/file0" dev="loop3" ino=357 res=1 [ 319.278635] syz-executor.0: vmalloc: allocation failure: 0 bytes, mode:0x14000c0(GFP_KERNEL), nodemask=(null) 15:11:16 executing program 3: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xfff, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file1\x00', 0xf) fallocate(r1, 0x1, 0x0, 0x369e5d84) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280), 0x12) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file1\x00', 0x0) [ 319.328610] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 319.354634] CPU: 1 PID: 17952 Comm: syz-executor.0 Not tainted 4.14.137 #33 [ 319.361951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 319.371411] Call Trace: [ 319.374024] dump_stack+0x138/0x19c [ 319.377683] warn_alloc.cold+0x96/0x1af [ 319.381675] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 319.386536] ? lock_downgrade+0x6e0/0x6e0 [ 319.390725] ? avc_has_perm+0x2df/0x4b0 [ 319.394856] __vmalloc_node_range+0x3be/0x6a0 [ 319.399552] ? trace_hardirqs_on+0x10/0x10 [ 319.403833] vmalloc+0x46/0x50 [ 319.407064] ? sel_write_load+0x1a0/0x1050 [ 319.411354] sel_write_load+0x1a0/0x1050 [ 319.415472] ? save_trace+0x290/0x290 [ 319.419477] ? sel_read_bool+0x240/0x240 [ 319.423650] ? trace_hardirqs_on+0x10/0x10 [ 319.427914] ? save_trace+0x290/0x290 [ 319.431985] __vfs_write+0x105/0x6b0 [ 319.435727] ? __lock_is_held+0xb6/0x140 [ 319.439809] ? sel_read_bool+0x240/0x240 [ 319.443891] ? kernel_read+0x120/0x120 [ 319.447821] ? __lock_is_held+0xb6/0x140 [ 319.447836] ? check_preemption_disabled+0x3c/0x250 [ 319.447850] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 319.456956] ? rcu_read_lock_sched_held+0x110/0x130 [ 319.456970] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 319.472222] ? __sb_start_write+0x153/0x2f0 15:11:16 executing program 4: r0 = epoll_create1(0x0) close(r0) r1 = syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x2, 0x3) fcntl$getflags(r1, 0x408) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000780)) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2) 15:11:16 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000004c0)='TIPC\x00') fcntl$setstatus(r0, 0x4, 0x2000) syz_genetlink_get_family_id$tipc(0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x80, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@ipv4={[], [], @multicast2}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1002}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x8, 0x70bd26, 0x25dfdbfb, {0x0, r3, {0x2, 0x5}, {0x0, 0x3c5f9b6b4919aa1c}, {0xffe4, 0xf}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x44004) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffeffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000003040), 0x4000000000003c4, 0x0) [ 319.476568] vfs_write+0x198/0x500 [ 319.480130] SyS_write+0xfd/0x230 [ 319.483604] ? SyS_read+0x230/0x230 [ 319.487272] ? do_syscall_64+0x53/0x640 [ 319.491291] ? SyS_read+0x230/0x230 [ 319.494936] do_syscall_64+0x1e8/0x640 [ 319.499100] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 319.504066] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 319.509287] RIP: 0033:0x459829 [ 319.512493] RSP: 002b:00007fdaa3659c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 319.520593] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459829 15:11:16 executing program 5: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x400, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0xfffffffffffffffd}, &(0x7f0000000100)=0x8) r3 = add_key(&(0x7f0000000200)='id_legacy\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000280), 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r3) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000140)={0x5, 0x8, 0x81, 0x100000001, r2}, 0x10) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000ff8000/0x6000)=nil}) ioctl$EVIOCSCLOCKID(r0, 0x80084504, &(0x7f0000ffcffc)) [ 319.527870] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 319.535157] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 319.542547] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdaa365a6d4 [ 319.550016] R13: 00000000004c9a25 R14: 00000000004e1060 R15: 00000000ffffffff 15:11:16 executing program 1: syz_mount_image$minix(&(0x7f0000000000)='minix\x00', &(0x7f0000000040)='./file0\x00', 0x8, 0x9, &(0x7f0000000700)=[{&(0x7f0000000100)="958be1ab5985a1cc9b7b0493ab9a1c97f4586fa52a596284255b64030778299a5c46867fbd47b1f6ddbaa98395095254c505d4733e4fed3ac881b991bbb904f634c15d86e16a229517bd03bce1c717647207737e6283d6d10899e5cea255371fa5ba7a2e800b2621a8dac9520d231efe352d772e6d2487275059b3ed15453c924dd0bcfba718e59eabb409867fafd5490077f3c862c90d232d07620831f4222745fbacc9a102aa0cbd73555ddb9781c14a7ab72e19a868457758f1bbd9a0985a56c47a46d67bbeea03279046bf1565cb9d83047e8e0288ad23b695e01610af6ee89deb", 0xe3, 0x3f}, {&(0x7f0000000200)="35e7ee9609acaf5203215a1b591e4a5c450f61a70dd29b7e5ba9dec076bb08636a68fc173a39f048a93cec1d7100d52db6e26cb926c4188f2b98388038a1fd77cb374b41587bfb35b14f4587215fcbef7f3ea7736dd3e37dcb63899bcfb33e360f56d50b5e227384983815530a989029940fb8326044efefbefbb3cee272c2c64059dc4f41aa9c49fe01e8a3297efa4d47c7ce8d31f3d74b1051e63ac233de854caaa7401dbeb679055c", 0xaa, 0x1}, {&(0x7f00000002c0)="547ad2d124fd0e3e2449446380d46f765835a172893d18d7530778059715b723ff6ad49ae925cd70da855b8d4efe654f29209015cab4a1c1d77c4b8d87e25568b768ac5a4e7fa8dcd246698b4f7c1ec16a57188a6cef7f67909a5b251e3889766e0e41668a8ce5e0961faff96d7fb111007ed20864ea758ee4dffca610450b91e9892064364e66fc81", 0x89, 0x8000}, {&(0x7f0000000380)="11a180965790c11f7f27ecdbb7fbd9d08c353805e5675455a388590cd501d30090a650864b45953747ca2d64eb7be13a6a9740cdcc0a3a05b0cf0e2b3bc3b1a6ad8bcfea19482180d82a4775c93e69f43895c72a5a90aff8c65ed2028f57991c93920666159bfd8caebb7cc5993e51a0db017b4598e427f146e003fdb5cba0b8edd944a2609214f551de494e77c4ae77db5becb7bd24fe75b052cfe923da41fea0", 0xa1}, {&(0x7f0000000080)="d5b4", 0x2, 0x8}, {&(0x7f0000000440)="60d1c55cbaa6762800970e62053e0068244d17e272eaf57470ee57ae13e4919d1436359181119d57cf7a7c1321f73059bc1eb9a68d48db9608ea295952aa5bd59782abc0f14ccfe22437560421f6b526a368b4dd68842f8e708150ba33f5498aae8df44cf702c4cf58a897109e", 0x6d, 0x401}, {&(0x7f00000004c0)="70aec2d3b552e5627b0d6342cfe1f52456ae03d391ce5377f875a487887708f65876b1a53ce21e2f6acd71a45f15b281a2b87a27be410189ab4cb391fddbaad63619252ac282ceff0d89667684327824995b62fab2d4f0145cfffe75ffded1f97bfcde702c91c584d31831c933605b45e3d8c3a00f8fd1a1fdb986f836b6bf0da19e2e4c1d31eaa9ce3094d95d27e5d832c50892c687bf52ccd82c174bcbb9e8c97669d49b97b67f10d28c215c5506bb2f59f4445dce0649850326514f0de58989", 0xc1, 0x100000000}, {&(0x7f00000005c0)="42e2eb298112a368e4074f7882723b70a04c246c986e985d6a078cbfbb89a20f75231191afaeedbaddeca012248b0ed3f69e0c5bdd925de9ee90320d7fad2cd764c5ca6ba026716a1c4284c752643483714db75dc6d521fdbe48de22b8dc985cabf2ee84f973b044e655c881bcc0410c4e08fbefd6d101c9a555dfba1ad215e184b9776430ff79bf723100c355ce8fb3daedc2c9c8b06c6389c6e52db62b7ef340cc420a19d6aa4a0a09acef426b315fe81be27c82dc1e0d1f396a4ef9c5da9381b053c665b7d3007131", 0xca, 0x7}, {&(0x7f00000006c0)="faeef9247187ee41cd2c05d9602ece5372b030f3ab2eaa79668a67386e6ce9162e82ee69fb0c0da343bb227c7e24e1f0de0f740b5a39", 0x36, 0x4}], 0x40c0, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x0) r1 = socket(0x11, 0xf, 0x0) accept4$inet(r1, &(0x7f0000000980)={0x2, 0x0, @broadcast}, &(0x7f00000009c0)=0x10, 0x80800) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000800)='/dev/null\x00', 0x200000, 0x0) accept4$packet(r2, &(0x7f00000008c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000900)=0x14, 0x800) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000940)={r3, 0x5, 0x9, 0x3, 0x1, 0x0, 0x3}) renameat2(r2, &(0x7f0000000840)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000880)='./file0\x00', 0x0) ioctl$EVIOCSCLOCKID(r0, 0x40084503, &(0x7f0000ffcffc)) ioctl$CAPI_CLR_FLAGS(r2, 0x80044325, &(0x7f0000000a00)=0x1) [ 319.577561] warn_alloc_show_mem: 1 callbacks suppressed [ 319.577567] Mem-Info: [ 319.604752] active_anon:175513 inactive_anon:692 isolated_anon:0 [ 319.604752] active_file:12908 inactive_file:11680 isolated_file:0 [ 319.604752] unevictable:4100 dirty:243 writeback:0 unstable:0 [ 319.604752] slab_reclaimable:12821 slab_unreclaimable:107954 15:11:16 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x80000) close(r0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x4042, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000100)={0x2, 0x3, 0x80, 0x7fff, &(0x7f0000000040)=[{}, {}, {}]}) syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x2, 0x3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) [ 319.604752] mapped:59028 shmem:258 pagetables:2428 bounce:0 [ 319.604752] free:1074910 free_pcp:174 free_cma:0 15:11:16 executing program 5: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x40000000000000) ioctl$EVIOCSCLOCKID(r0, 0x80084504, &(0x7f0000ffcffc)) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x8, 0x8000) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000040)={0x0, 0x6c, 0x8, [0x80, 0x10000, 0x0, 0x4, 0x59d, 0x100000001, 0x6, 0x102000000000]}, &(0x7f0000000080)=0x18) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000100)={r2, 0x7fffffff, 0x1a, "28b64616a72d441443119d59fddcb6e3567e51392c3fc9a5d713"}, 0x22) [ 319.857001] Node 0 active_anon:706428kB inactive_anon:3268kB active_file:51788kB inactive_file:46920kB unevictable:16400kB isolated(anon):0kB isolated(file):0kB mapped:236012kB dirty:968kB writeback:0kB shmem:1532kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 223232kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no 15:11:17 executing program 4: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000040)=0x4, 0x4) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) close(r1) syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x2, 0x3) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000780)) 15:11:17 executing program 5: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x101000, 0x0) write$rfkill(r1, &(0x7f0000000040)={0x10001, 0x0, 0x1, 0x1}, 0x8) ioctl$EVIOCSCLOCKID(r0, 0x80084504, &(0x7f0000ffcffc)) [ 319.983807] Node 1 active_anon:0kB inactive_anon:0kB active_file:144kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 320.181849] Node 0 DMA free:15908kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 320.409755] lowmem_reserve[]: 0 2580 2580 2580 [ 320.446150] Node 0 DMA32 free:489752kB min:36468kB low:45584kB high:54700kB active_anon:702532kB inactive_anon:5504kB active_file:54216kB inactive_file:46772kB unevictable:16400kB writepending:972kB present:3129332kB managed:2644892kB mlocked:16400kB kernel_stack:9248kB pagetables:9632kB bounce:0kB free_pcp:788kB local_pcp:592kB free_cma:0kB [ 320.697054] lowmem_reserve[]: 0 0 0 0 [ 320.721644] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 320.858864] lowmem_reserve[]: 0 0 0 0 [ 320.885784] Node 1 Normal free:3785972kB min:53420kB low:66772kB high:80124kB active_anon:0kB inactive_anon:0kB active_file:144kB inactive_file:0kB unevictable:0kB writepending:4kB present:3932160kB managed:3870208kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 321.029124] lowmem_reserve[]: 0 0 0 0 [ 321.048624] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 321.117094] Node 0 DMA32: 1*4kB (E) 551*8kB (UE) 52*16kB (UME) 188*32kB (U) 642*64kB (UME) 273*128kB (UME) 144*256kB (UM) 74*512kB (UME) 2*1024kB (M) 3*2048kB (UM) 78*4096kB (UM) = 489724kB [ 321.230678] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 321.277203] Node 1 Normal: 58*4kB (UME) 348*8kB (UE) 255*16kB (UM) 60*32kB (UME) 15*64kB (UM) 8*128kB (U) 8*256kB (UME) 3*512kB (UE) 3*1024kB (UME) 4*2048kB (ME) 918*4096kB (M) = 3785976kB [ 321.330756] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 321.350792] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 321.378832] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 321.408625] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 321.438712] 30043 total pagecache pages [ 321.451962] 0 pages in swap cache [ 321.460632] Swap cache stats: add 0, delete 0, find 0/0 [ 321.471833] Free swap = 0kB [ 321.478413] Total swap = 0kB [ 321.486197] 1965979 pages RAM 15:11:18 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000000)="11dca5055e0bcfe47bf070") clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r1, 0x0, 0x0) 15:11:18 executing program 5: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000000)=[0x1, 0x3f]) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000040)=""/53) ioctl$EVIOCSCLOCKID(r0, 0x80084504, &(0x7f0000ffcffc)) 15:11:18 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x80000) close(r0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x4042, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000100)={0x2, 0x3, 0x80, 0x7fff, &(0x7f0000000040)=[{}, {}, {}]}) syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x2, 0x3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) [ 321.492911] 0 pages HighMem/MovableOnly [ 321.501854] 333227 pages reserved [ 321.510000] 0 pages cma reserved 15:11:18 executing program 3: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xfff, 0x0) rename(&(0x7f0000000100)='./file2\x00', &(0x7f00000001c0)='./file1\x00') r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r1, 0x1, 0x0, 0x369e5d84) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280), 0x12) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file1\x00', 0x0) 15:11:18 executing program 4: r0 = epoll_create1(0x4000007fffc) r1 = epoll_create1(0x0) close(r0) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$TIOCGSERIAL(r2, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/191}) syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x2, 0x3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) [ 321.609700] syz-executor.0: vmalloc: allocation failure: 0 bytes, mode:0x14000c0(GFP_KERNEL), nodemask=(null) 15:11:18 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x7cc, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) setxattr$security_evm(&(0x7f0000000180)='./bus\x00', 0x0, 0x0, 0x0, 0x3) dup(r0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, 0x0) fchdir(0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) chdir(&(0x7f0000000340)='./file0\x00') r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) fallocate(r2, 0x8, 0x4, 0x2) write$UHID_INPUT(r2, &(0x7f0000001440)={0x8, "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", 0x1000}, 0xfffffc41) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, 0x0, 0x0) getpgrp(0xffffffffffffffff) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000500)={0x0, r1, 0x2a9, 0x0, 0x5, 0x9}) connect(r3, &(0x7f0000000380)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80) fadvise64(r2, 0x0, 0x0, 0x4) [ 321.695446] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 321.767435] CPU: 0 PID: 18034 Comm: syz-executor.0 Not tainted 4.14.137 #33 [ 321.774674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 321.784048] Call Trace: [ 321.786657] dump_stack+0x138/0x19c [ 321.790339] warn_alloc.cold+0x96/0x1af [ 321.794332] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 321.799188] ? lock_downgrade+0x6e0/0x6e0 [ 321.803350] ? avc_has_perm+0x2df/0x4b0 [ 321.807340] __vmalloc_node_range+0x3be/0x6a0 [ 321.811858] ? trace_hardirqs_on+0x10/0x10 [ 321.816104] vmalloc+0x46/0x50 [ 321.819308] ? sel_write_load+0x1a0/0x1050 [ 321.823560] sel_write_load+0x1a0/0x1050 [ 321.827629] ? save_trace+0x290/0x290 [ 321.831444] ? sel_read_bool+0x240/0x240 [ 321.835516] ? trace_hardirqs_on+0x10/0x10 [ 321.839887] ? save_trace+0x290/0x290 [ 321.843702] __vfs_write+0x105/0x6b0 [ 321.843713] ? __lock_is_held+0xb6/0x140 [ 321.843725] ? sel_read_bool+0x240/0x240 [ 321.843735] ? kernel_read+0x120/0x120 [ 321.843745] ? __lock_is_held+0xb6/0x140 [ 321.843756] ? check_preemption_disabled+0x3c/0x250 [ 321.843771] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 321.843784] ? rcu_read_lock_sched_held+0x110/0x130 [ 321.843798] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 321.851576] ? __sb_start_write+0x153/0x2f0 [ 321.851589] vfs_write+0x198/0x500 [ 321.851601] SyS_write+0xfd/0x230 [ 321.851611] ? SyS_read+0x230/0x230 [ 321.851623] ? do_syscall_64+0x53/0x640 [ 321.851633] ? SyS_read+0x230/0x230 [ 321.851644] do_syscall_64+0x1e8/0x640 [ 321.851652] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 321.851671] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 321.851679] RIP: 0033:0x459829 [ 321.851688] RSP: 002b:00007fdaa3659c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 321.932465] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459829 [ 321.939748] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 321.947116] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 321.954405] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdaa365a6d4 [ 321.961779] R13: 00000000004c9a25 R14: 00000000004e1060 R15: 00000000ffffffff [ 321.981860] audit: type=1804 audit(1565190678.959:166): pid=18035 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir525748567/syzkaller.UwknhR/236/file0/file0" dev="sda1" ino=17497 res=1 15:11:19 executing program 3: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xfff, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0xffffffffffffffff, r1, 0x0, 0x5, &(0x7f0000000100)='vfat\x00'}, 0x30) write$cgroup_pid(r0, &(0x7f0000000200)=r2, 0x12) fchdir(r1) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r3, 0x1, 0x0, 0x369e5d84) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280), 0x12) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file1\x00', 0x0) [ 322.356632] audit: type=1804 audit(1565190679.339:167): pid=18060 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir525748567/syzkaller.UwknhR/237/file0/file0" dev="sda1" ino=17486 res=1 [ 322.444443] Mem-Info: [ 322.446956] active_anon:175811 inactive_anon:4255 isolated_anon:0 [ 322.446956] active_file:16533 inactive_file:12412 isolated_file:0 [ 322.446956] unevictable:4100 dirty:950 writeback:0 unstable:0 [ 322.446956] slab_reclaimable:13586 slab_unreclaimable:107983 [ 322.446956] mapped:58992 shmem:3898 pagetables:2408 bounce:0 [ 322.446956] free:1067039 free_pcp:216 free_cma:0 [ 322.544434] Node 0 active_anon:701072kB inactive_anon:17520kB active_file:66388kB inactive_file:50648kB unevictable:16400kB isolated(anon):0kB isolated(file):0kB mapped:235968kB dirty:4896kB writeback:0kB shmem:15992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 227328kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 322.601416] Node 1 active_anon:0kB inactive_anon:0kB active_file:144kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 322.665170] Node 0 DMA free:15908kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 322.694031] lowmem_reserve[]: 0 2580 2580 2580 [ 322.698684] Node 0 DMA32 free:462456kB min:36468kB low:45584kB high:54700kB active_anon:703480kB inactive_anon:17820kB active_file:66788kB inactive_file:51248kB unevictable:16400kB writepending:1048kB present:3129332kB managed:2644892kB mlocked:16400kB kernel_stack:8960kB pagetables:9484kB bounce:0kB free_pcp:616kB local_pcp:364kB free_cma:0kB [ 322.729693] lowmem_reserve[]: 0 0 0 0 [ 322.733596] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 322.759767] lowmem_reserve[]: 0 0 0 0 [ 322.767969] Node 1 Normal free:3785976kB min:53420kB low:66772kB high:80124kB active_anon:0kB inactive_anon:0kB active_file:144kB inactive_file:0kB unevictable:0kB writepending:4kB present:3932160kB managed:3870208kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 322.800606] lowmem_reserve[]: 0 0 0 0 [ 322.804481] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 322.823922] Node 0 DMA32: 48*4kB (UME) 160*8kB (UM) 89*16kB (UME) 208*32kB (UME) 492*64kB (UME) 253*128kB (UME) 140*256kB (U) 70*512kB (UM) 1*1024kB (M) 3*2048kB (UME) 76*4096kB (UM) = 463568kB [ 322.845889] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 322.858616] Node 1 Normal: 58*4kB (UME) 348*8kB (UE) 255*16kB (UM) 60*32kB (UME) 15*64kB (UM) 8*128kB (U) 8*256kB (UME) 3*512kB (UE) 3*1024kB (UME) 4*2048kB (ME) 918*4096kB (M) = 3785976kB [ 322.882196] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 322.894816] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 322.904627] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 322.917161] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 322.927960] 34066 total pagecache pages [ 322.935593] 0 pages in swap cache [ 322.939077] Swap cache stats: add 0, delete 0, find 0/0 [ 322.945013] Free swap = 0kB [ 322.948064] Total swap = 0kB [ 322.956920] 1965979 pages RAM [ 322.960365] 0 pages HighMem/MovableOnly [ 322.964362] 333227 pages reserved [ 322.967831] 0 pages cma reserved [ 331.453482] MINIX-fs: file system does not have enough zmap blocks allocated. Refusing to mount. [ 331.463181] MINIX-fs: bad superblock or unable to read bitmaps 15:11:28 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x10180, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000080)={&(0x7f0000000000)='./file0\x00', r1}, 0x10) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) ioctl$EVIOCSCLOCKID(r0, 0x40084503, &(0x7f0000ffcffc)) 15:11:28 executing program 5: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x0) mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x2000000) ioctl$EVIOCSCLOCKID(r0, 0x80084504, &(0x7f0000ffcffc)) 15:11:28 executing program 4: r0 = epoll_create1(0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x22001, 0x0) recvfrom$inet(r1, &(0x7f0000000040)=""/164, 0xa4, 0x40010002, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) r2 = epoll_create1(0x0) close(r0) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000140)='trusted.overlay.upper\x00', &(0x7f0000000180)={0x0, 0xfb, 0x45, 0x7, 0x21ac000000000, "13ce618b1af0b3d2db6cdc29fd8004a7", "f7eb4100dbb9db6fe234a8df94b437a9a47c9d88af9a0ef56e3a8b3f0f88eb5455b30a18ef348381ff3e3353f9c4e134"}, 0x45, 0x3) syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x2, 0x3) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000780)) 15:11:28 executing program 3: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer\x00', 0xb0080, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xfff, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000100)={0x0, @speck128, 0x2, "c9f7347feb96e3a2"}) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r2, 0x1, 0x0, 0x369e5d84) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280), 0x12) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file1\x00', 0x0) ioctl$KDGKBSENT(r1, 0x4b48, &(0x7f00000001c0)={0x7fffffff, 0x2, 0x7fff}) 15:11:28 executing program 2: r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)=0x10000000006) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000240)={0x4, 0xd, 0xec3, 0x636, "668e3cd9bf7f3b8c03a170a1d4492fc82a30538bd9b42dc6766f22f47fbc974b"}) r1 = perf_event_open(&(0x7f0000000980)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000200)={0x7, {0x80000001, 0x1, 0x300, 0xffffffffffffffb2}}) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) write$UHID_INPUT(r0, &(0x7f00000002c0)={0x8, "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", 0xa943708f26830065}, 0x1006) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) dup3(r1, r0, 0x0) getsockname(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x0) migrate_pages(0x0, 0x0, 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r0, 0x4038ae7a, &(0x7f0000000080)={0x7, 0xbdd, &(0x7f0000000000)="3a5b0fca6ae2d82105f795de3627", &(0x7f0000000100)="9aca74523abb0db2f09226ff47802b4c3529cdcd87be9dfbfc237335d2e09e1a3ef02d66a921e62d2957eee172c835e9a8019b5b1832d44ee89972c5161e3805a96e1dbd59bb70e5dbf1f8bbd6384fa7d9de89d35924710b712154d50274a07865cc1dbd9a203c1fcdfd7de78946f15db7964ea944714945f88749ac17af4b6632699a948151de95d2373c27d4b78ee1121e930f806031c3104f3702939f4af041616e05703d5f80906cff62dde94486f8600fc2d523e836cb85615c3b2466c6a5bc5129bebdd4046286c8c07e6ceb99c39c83fe9f7dfdbf9f262bf14a7b", 0xe, 0xde}) 15:11:28 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r1, 0x0, 0x0) [ 332.053010] syz-executor.0: vmalloc: allocation failure: 0 bytes, mode:0x14000c0(GFP_KERNEL), nodemask=(null) [ 332.066787] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 332.078218] CPU: 1 PID: 18082 Comm: syz-executor.0 Not tainted 4.14.137 #33 [ 332.085449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 332.094814] Call Trace: [ 332.097423] dump_stack+0x138/0x19c [ 332.101076] warn_alloc.cold+0x96/0x1af [ 332.105072] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 332.110017] ? lock_downgrade+0x6e0/0x6e0 [ 332.114194] ? avc_has_perm+0x2df/0x4b0 [ 332.118186] __vmalloc_node_range+0x3be/0x6a0 [ 332.122786] ? trace_hardirqs_on+0x10/0x10 [ 332.127039] vmalloc+0x46/0x50 [ 332.130255] ? sel_write_load+0x1a0/0x1050 [ 332.134503] sel_write_load+0x1a0/0x1050 [ 332.138697] ? save_trace+0x290/0x290 [ 332.143316] ? sel_read_bool+0x240/0x240 [ 332.152264] ? trace_hardirqs_on+0x10/0x10 [ 332.156806] ? save_trace+0x290/0x290 [ 332.160631] __vfs_write+0x105/0x6b0 [ 332.164359] ? __lock_is_held+0xb6/0x140 [ 332.168445] ? sel_read_bool+0x240/0x240 [ 332.173070] ? kernel_read+0x120/0x120 [ 332.177170] ? __lock_is_held+0xb6/0x140 [ 332.181251] ? check_preemption_disabled+0x3c/0x250 [ 332.186304] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 332.191775] ? rcu_read_lock_sched_held+0x110/0x130 [ 332.196831] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 332.201599] ? __sb_start_write+0x153/0x2f0 [ 332.205936] vfs_write+0x198/0x500 [ 332.209505] SyS_write+0xfd/0x230 [ 332.212978] ? SyS_read+0x230/0x230 [ 332.216722] ? do_syscall_64+0x53/0x640 [ 332.220726] ? SyS_read+0x230/0x230 [ 332.224362] do_syscall_64+0x1e8/0x640 [ 332.228261] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 332.233120] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 332.238347] RIP: 0033:0x459829 [ 332.241541] RSP: 002b:00007fdaa3659c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 332.249261] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459829 [ 332.256629] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 332.263932] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 332.271215] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdaa365a6d4 [ 332.279141] R13: 00000000004c9a25 R14: 00000000004e1060 R15: 00000000ffffffff [ 332.290900] Mem-Info: [ 332.293351] active_anon:177053 inactive_anon:690 isolated_anon:0 [ 332.293351] active_file:12910 inactive_file:11702 isolated_file:0 [ 332.293351] unevictable:4100 dirty:263 writeback:0 unstable:0 [ 332.293351] slab_reclaimable:16224 slab_unreclaimable:101413 [ 332.293351] mapped:59003 shmem:256 pagetables:2436 bounce:0 [ 332.293351] free:1077713 free_pcp:175 free_cma:0 15:11:29 executing program 5: r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x800, 0x400000000) ioctl$KVM_GET_REGS(r0, 0x8090ae81, &(0x7f0000000100)) ioctl$KDSETMODE(r0, 0x4b3a, 0x8000002) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x0) ioctl$KIOCSOUND(r0, 0x4b2f, 0x8) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x0, 0x0) ioctl$TCGETS2(r3, 0x802c542a, &(0x7f0000000080)) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000600)=[@in={0x2, 0x4e22, @loopback}, @in={0x2, 0x4e24, @broadcast}], 0xfffffffffffffdc0) ioctl$EVIOCSCLOCKID(r1, 0x80084504, &(0x7f0000ffcffc)) [ 332.327745] audit: type=1804 audit(1565190689.279:168): pid=18087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir525748567/syzkaller.UwknhR/238/file0/file0" dev="loop3" ino=361 res=1 [ 332.327798] Node 0 active_anon:708212kB inactive_anon:2760kB active_file:51496kB inactive_file:46808kB unevictable:16400kB isolated(anon):0kB isolated(file):0kB mapped:236012kB dirty:1048kB writeback:0kB shmem:1024kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 233472kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 332.396780] ------------[ cut here ]------------ 15:11:29 executing program 4: r0 = epoll_create1(0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x200000, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000140)={0x4, [0x3, 0x9, 0x1ff, 0x1]}, &(0x7f0000000180)=0xc) r2 = epoll_create1(0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r3, 0x800448d3, &(0x7f0000000040)={{0xead3, 0x6, 0x7, 0x7fff, 0x80000001, 0x65a2}, 0x40, 0xfb, 0x1000, 0xd7, 0x5, "6c30e5a3f8294dcd47de0faffecade77b5f492eab4b84df7daef1ff3d9b30965ce80a0a407015bbad074437c05034c3bf503fe82e2703a4e0c6c6b6467edcd304c4da61a1bfbb83ebba2387084f145f4e8e5fabb2238733840be022b2bc2d6deb0c4b90a6af39426613370221b080f51e8f8af19d7b7b93fc1344c26b49b2e76"}) close(r0) syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x400000000000002, 0x3) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000780)) [ 332.401592] kernel BUG at fs/buffer.c:605! [ 332.414668] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 332.420058] Modules linked in: [ 332.423288] CPU: 0 PID: 18087 Comm: syz-executor.3 Not tainted 4.14.137 #33 [ 332.430410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 332.433071] Node 1 active_anon:0kB inactive_anon:0kB active_file:144kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 332.439793] task: ffff88809b6da500 task.stack: ffff8880584d0000 [ 332.466502] Node 0 [ 332.471854] RIP: 0010:mark_buffer_dirty_inode+0x2ea/0x3e0 [ 332.471859] RSP: 0018:ffff8880584d7678 EFLAGS: 00010246 [ 332.471867] RAX: 0000000000040000 RBX: ffff888095bb5a80 RCX: ffffc9000a659000 [ 332.471872] RDX: 0000000000040000 RSI: ffffffff81995cda RDI: ffff88809a3979b8 [ 332.471876] RBP: ffff8880584d76b0 R08: ffff88809b6da500 R09: 0000000000000004 [ 332.471881] R10: 0000000000000000 R11: ffff88809b6da500 R12: ffff88809a397858 [ 332.471886] R13: 0000000000000000 R14: ffff888089561660 R15: 0000000000003955 [ 332.471893] FS: 00007f6f40a52700(0000) GS:ffff8880aee00000(0000) knlGS:0000000000000000 [ 332.471903] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 332.475485] DMA free:15908kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 332.480107] CR2: 0000000000738008 CR3: 00000000831d0000 CR4: 00000000001426f0 [ 332.480117] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 332.480122] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 332.480125] Call Trace: [ 332.480144] fat16_ent_put+0xc5/0x100 [ 332.480153] fat_free_clusters+0x369/0x810 [ 332.480164] ? fat_ent_read+0xa30/0xa30 [ 332.480178] ? check_preemption_disabled+0x3c/0x250 [ 332.480194] ? __mark_inode_dirty+0x2b7/0x1040 [ 332.485644] lowmem_reserve[]: [ 332.492838] fat_truncate_blocks+0x693/0xae0 [ 332.492850] ? fat_file_release+0x140/0x140 [ 332.492861] ? lock_acquire+0x16f/0x430 [ 332.492868] ? fat_setattr+0x671/0xae0 [ 332.492881] ? truncate_pagecache+0x7b/0x90 [ 332.492894] fat_setattr+0x6c1/0xae0 [ 332.500375] 0 [ 332.507468] ? security_inode_setattr+0xe1/0x130 [ 332.507485] ? fat_truncate_blocks+0xae0/0xae0 [ 332.514837] 2580 15:11:29 executing program 4: r0 = epoll_create1(0x0) epoll_create1(0x0) close(r0) r1 = syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x2, 0x3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) 15:11:29 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x40000002, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) ioctl$EVIOCSCLOCKID(r0, 0x40084503, &(0x7f0000ffcffc)) [ 332.522046] notify_change+0x8d1/0xd10 [ 332.522060] do_truncate+0x124/0x1c0 [ 332.522068] ? file_open_root+0x2b0/0x2b0 [ 332.522083] path_openat+0x2786/0x3f70 [ 332.522095] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 332.522107] ? trace_hardirqs_on+0x10/0x10 [ 332.522120] ? path_lookupat.isra.0+0x7b0/0x7b0 [ 332.522127] ? __lock_is_held+0xb6/0x140 [ 332.522140] ? save_trace+0x290/0x290 [ 332.530550] 2580 [ 332.536256] ? __alloc_fd+0x1d4/0x4a0 [ 332.536270] do_filp_open+0x18e/0x250 [ 332.572100] 2580 [ 332.578519] ? __alloc_fd+0x1d4/0x4a0 [ 332.578531] ? may_open_dev+0xe0/0xe0 [ 332.590170] ? _raw_spin_unlock+0x2d/0x50 [ 332.590181] ? __alloc_fd+0x1d4/0x4a0 [ 332.590197] do_sys_open+0x2c5/0x430 [ 332.590207] ? filp_open+0x70/0x70 [ 332.594600] Node 0 [ 332.598675] ? SyS_clock_gettime+0xf8/0x180 [ 332.598690] ? do_syscall_64+0x53/0x640 [ 332.603230] DMA32 free:511800kB min:36468kB low:45584kB high:54700kB active_anon:704416kB inactive_anon:2760kB active_file:51496kB inactive_file:46808kB unevictable:16400kB writepending:1048kB present:3129332kB managed:2644892kB mlocked:16400kB kernel_stack:9248kB pagetables:9744kB bounce:0kB free_pcp:612kB local_pcp:336kB free_cma:0kB [ 332.608099] SyS_creat+0x27/0x30 [ 332.608113] ? compat_SyS_openat+0x40/0x40 [ 332.612898] lowmem_reserve[]: [ 332.615802] do_syscall_64+0x1e8/0x640 [ 332.615814] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 332.620377] 0 [ 332.624521] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 332.624532] RIP: 0033:0x459829 [ 332.628547] 0 [ 332.632382] RSP: 002b:00007f6f40a51c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 332.632391] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 0000000000459829 [ 332.632396] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 332.632400] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 332.632404] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6f40a526d4 [ 332.632409] R13: 00000000004bfe84 R14: 00000000004d1ca0 R15: 00000000ffffffff [ 332.632418] Code: fa 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 75 [ 332.639345] 0 [ 332.640486] 4d 4c 89 63 58 4c 89 ef e8 70 8e 82 04 e9 13 fe ff ff e8 e6 78 c3 ff <0f> 0b 4c 89 ff e8 5c 25 ed ff e9 [ 332.644309] 0 [ 332.647108] f8 fd ff ff e8 52 25 ed ff [ 332.657676] e9 [ 332.657698] RIP: mark_buffer_dirty_inode+0x2ea/0x3e0 RSP: ffff8880584d7678 [ 332.682362] ---[ end trace 356102848f3966a2 ]--- [ 332.693496] kobject: 'loop1' (ffff8880a49f80e0): kobject_uevent_env [ 332.702416] Kernel panic - not syncing: Fatal exception [ 332.713924] kobject: 'loop1' (ffff8880a49f80e0): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 332.718797] Kernel Offset: disabled [ 332.913616] Rebooting in 86400 seconds..